Robert Allan JamesandClaude Opus 5.5
d6c90a6839
Captain Bob: close the messaging gap first; the arena must be dynamic;
audit every fixed-size structure ("no arrays ... it should all be fairly
dynamic"); failures must be handled properly (never silent, never
partial, logged + counted + refused, parity marked INCOMPLETE). All
rulings as proposed; S-2 (Stadium cell pool) left open -- it was a
question, not a proposal.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
90 lines
8.7 KiB
Markdown
90 lines
8.7 KiB
Markdown
# FABRIC-3.9.8.md — Observers and participants: execution plan and log
|
||
|
||
**Status: PLANNED. No stage started.** The design and its open rulings (O-1 to O-4, plus the
|
||
discard question) are in `FABRIC-3.9.0.md`.
|
||
|
||
Each stage:
|
||
- needs Captain Bob's explicit go;
|
||
- gets its own commit;
|
||
- gets its own three-architecture acceptance (`clean qemu`; amd64, then aarch64, then riscv64;
|
||
foreground; visible framebuffer; one at a time; coupled images reset before each).
|
||
|
||
Evidence is named **before** each stage runs.
|
||
|
||
**The standing acceptance sequence for every stage**, unchanged from `FABRIC-3.8.md`:
|
||
- a boot to `[zuse@Hera] ok>` with zero `UNKNOWN WORD`, faults and frame corruption;
|
||
- the `dict_hash` set identical across ISAs;
|
||
- the Stage G interleave (two workers, `A`/`B`), byte-identical across ISAs;
|
||
- mint → WIREBIND → `USE` → `1 2 + .` → `3`;
|
||
- 0 bytes of idle log growth over 20 s.
|
||
|
||
## 1. Staged plan
|
||
|
||
| Stage | Change | Evidence (named in advance) |
|
||
|---|---|---|
|
||
| **O-A** | Observer role (`FABRIC-3.9.0.md` §2.1). The absolute-heat-share charge is discarded (ruling 5). Observers are left out of the decision's candidates, the work-heat charge and the floor, and (O-2) the absolute charge. Observers with events go ahead at clean boundaries, among themselves by wait stamp (§2.4, per O-1). | *(Corrected before starting.)* The standard sequence, with the G interleave unchanged. **Console responsive under load:** `1 2 + .` typed while `wa`/`wb` run prints `3` in the middle of the A/B stream. **Observer precedence:** a message to Hestia sent in the same line as the two worker jobs runs before any `A`/`B`. **Not run: the busy-wait DoE driver.** Under O-1, Hera running `DOE` is an observer acting on an event, and nothing displaces her, so `MU-WAIT-ALL` would wait forever. The originally named evidence ("Hera's share falls on the unchanged busy-wait driver") contradicts the design. `DOE` stays unrun until O-C replaces the driver. |
|
||
| **M-0** *(first; a defect against the standing no-fixed-bounds rule)* | Kernel-Hermes arena, per-VM queues and channel member lists grow on demand; `Q_SLOT` decoupled from arena size (`FABRIC-3.9.0.md` §7.0). | The standard sequence. The existing kernel-Hermes boot self-tests (allocator, publish, drain, chunk, negotiation) still PASS, with `expected_n` now set by the reservoir, not the arena. A probe (reverted) admits **more than 32** messages system-wide, spread over senders with reservoir to pay, and more than 32 to one queue, with conservation and the ledger holding throughout. A channel takes more than 64 members. Nothing moves or corrupts across a grow: messages queued before a grow drain intact after it. |
|
||
| **M-A** *(ahead of O-B, per Captain Bob: "close the gap first")* | Manual messaging words over the existing C API (`FABRIC-3.9.0.md` §7.2, names per M-1). | The standard sequence. At the console: `CHANNEL`, then `JOIN-VM` of `wa` and `wb`, then `PUBLISH` of a marker payload delivers to both (`n = 2`, both print). `LEAVE-VM` then `PUBLISH` delivers to one. `CHANNEL-CLOSE` succeeds, and refuses channel 0. `INJECT` lands in a queue that `MAIL?`/`.MAIL` show before the recipient runs. `.CHANNELS` lists what was made. The `dict_hash` set changes by the new words and is identical across ISAs. |
|
||
| **M-B** | Autonomous events (§7.3): event channels created at boot; `EV-DONE`/`EV-BORN`/`EV-DIED` fired from the existing kernel points, for participants, funded per M-5, dropped and counted when full (M-6). | The standard sequence. A VM that `JOIN`s `EV-BORN`/`EV-DONE`/`EV-DIED` and defines the `ON-…` words sees one event for each `WORKER-BIRTH`, each job finished, and each `KILL`, with **no `SEND` anywhere in the job text**. A VM that didn't join sees nothing. The dropped-event counter reads 0 in normal use; a probe that floods the arena shows events dropped and counted, never blocking. |
|
||
| **O-B** | Hera's own mail drained at `sk_vm_idle_point()`, with the readline `n > 0` gate; the timer-paced pump drain removed (§2.5). | The standard sequence, plus: a message sent to Hera while she sits idle at the prompt is acted on **without waiting for the idle beat**. A probe records the delay in beats from admission to drain; it must be well under `SK_IDLE_BEAT_INTERVAL`. The relay and BLK-ATTACH flows are unchanged. |
|
||
| **O-C** | An event-driven DoE driver (§3, as revised by §7.4 once M-B lands): `DOE` starts trial 1 and returns to the prompt; Hera's `ON-DONE` (fed by `EV-DONE`) counts, ends trials and starts the next; `MU-WAIT-ALL` and the job text's own completion `SEND` are deleted. Capsule only. | A 1-rep smoke campaign on amd64 runs all 6 cells to `MU-CAMPAIGN: complete`, with every trial `fail=0` and N/N `KILL … dead`. Hera's rows during trials are only event handling. The prompt answers typed input while trials run. Then the standard sequence on all three ISAs. |
|
||
| **O-D** | The DoE relaunch: `12345 3 S" <isa>" DOE`, amd64, then aarch64, then riscv64, with the ring extracted between ISAs and `artemis.img` **not** reset in between. | A fresh time estimate from O-C's measured row rate, **before** launch. Then per ISA: 18 `MU-TRIAL` markers, `fail=0`, `MU-CAMPAIGN: complete`. |
|
||
| **Merge** | This branch to `master`, once all three ISAs have completed O-D. | Per this project's own merge practice, at Captain Bob's word. |
|
||
|
||
**Stop conditions** (re-plan rather than push on):
|
||
- `dict_hash` diverges across ISAs;
|
||
- conservation (`vm_physics_conserved()`, `stadium_conserved()`) goes false;
|
||
- an observer is ever returned as a heat candidate;
|
||
- a switch storm: log growth at an idle prompt, with QEMU pinned;
|
||
- a trial that never produces its marker.
|
||
|
||
## 2. Execution log
|
||
|
||
- [x] **Stage O-A — the observer role (`FABRIC-3.9.0.md` §2).** 2026-09-24. Captain Bob: *"all as
|
||
proposed, go ahead with O-A"* (O-1 to O-4 and the discard, all as proposed).
|
||
- **Discarded:** the uncommitted absolute-heat-share charge (`git checkout` of
|
||
`capsule_vm_physics.c/.h`), per ruling 5.
|
||
- **`capsule_vm_switch_signal.c/.h`:**
|
||
- Each slot carries an `observer` flag, with `sk_vm_switch_signal_set_observer()` and
|
||
`is_observer()`.
|
||
- `sk_vm_switch_decide()` now works in tiers:
|
||
1. An observer that is itself in progress (a live non-IDLE frame) or holding an event
|
||
keeps the CPU.
|
||
2. Otherwise, an observer with an event, meaning mail (or console input, for Hera),
|
||
goes ahead of every participant. Among observers, the oldest wait stamp wins.
|
||
3. Otherwise, participants are compared by work heat exactly as in FABRIC-3.8.
|
||
Observers are never heat candidates.
|
||
- `note_work_gained()` never floors an observer and leaves observers out of the floor
|
||
set. The running VM counts only if it is a participant.
|
||
- **`capsule_birth.c`:** `is_fleet_foundation` is hoisted to function scope. Registration
|
||
marks the Tripod as observers from that same birth-time fact.
|
||
- **`kernel_main.c`:** Hera is marked an observer where she registers.
|
||
- **`vm_runtime.c`:** observers are not charged at all (O-2).
|
||
- Nothing a VM executes can set or clear the role.
|
||
|
||
**Evidence, as corrected before starting (§1).** Ordinary words only, typed at
|
||
`[zuse@Hera] ok>`, byte-identical on all three ISAs (`logs/20260924-084904/amd64/`,
|
||
`-090107/aarch64/`, `-091424/riscv64/`):
|
||
- **G interleave unchanged:** A = 40, B = 40, 48 runs.
|
||
- **Observer precedence:** `S" LA" S" wa" SEND . S" LB" S" wb" SEND . S" 72 EMIT 72 EMIT
|
||
72 EMIT" S" Hestia" SEND .` gives `HHHABBAABBAA…`. Hestia's mail ran before any
|
||
participant output once Hera went idle.
|
||
- **Console responsive under load:** with `wa`/`wb` on 200 markers × 20,000-iteration
|
||
loops, `1 2 + .` typed mid-run appears as `…ABABAB1 2 + .` / `3 ok` / `ok> ABABBA…`.
|
||
Hera, an observer with console input, got the CPU at the next worker boundary, ran the
|
||
line, and the workers resumed. This is the C-4 (α) starvation recorded at C-b, fixed.
|
||
*(The first amd64 attempt at this check used loops that finished before the line was
|
||
typed, so it proved nothing. It was re-run with the heavy loops, and the script was fixed
|
||
for the other two ISAs.)*
|
||
|
||
**Acceptance** (same boots):
|
||
- All reach `[zuse@Hera] ok>` with zero `UNKNOWN WORD`, faults and frame corruption.
|
||
- The `dict_hash` set is unchanged from Stage I (word_count 531, M7.1a
|
||
`0x572daac83b797332`), since no words were added or removed.
|
||
- Mint → WIREBIND → `USE` → `1 2 + .` → `3`.
|
||
- Idle log growth: 0 bytes.
|
||
- Clean build on all three plus hosted, no new warnings.
|
||
|
||
**Not run, by design:** the busy-wait DoE driver, which would deadlock under O-1 (§1).
|
||
Don't run `DOE` until O-C.
|