docs(#799): the store author's suites show what they did not check — Your-own-store, Guarantees, Guarantees-across-processes, Payment-gateways, Knowledge-bases, Changelog
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#720): a reclaimed child's lease is kept only for the reclaim's own look — Several-instances, Guarantees-across-processes (scenario 16, lost answers), Changelog
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Payments, Guarantees, Several-instances: an error of unknown outcome reconciled, a replay past keyRetention never sent (#657, #658)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees, Changelog: every action checks its holder's fence before it runs (#662)
Payments: the gateway contract, every payment race (PS1–PS23) and ten gateways (#653)
New pages Payments (the notice, the contract in short, whether the guarantees hold on a gateway,
what stays the application's, how to wire a gateway, how to check your own call) and
Payment-scenarios (each race: wrong, mechanism, guarantee, assumptions, boundary, proof).
Payment-gateways: the capability table of ten gateways read 2026-11-01, the support rule, quotes
and links. Guarantees: A12, the retention a repeat must come within. Cross-links from
Several-instances and Guarantees-across-processes; a Payments group in the sidebar; Changelog.
Gaps found: #657, #658.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees-across-processes: an undo's fence at its action, and the window it leaves (#640)
The holder checks its fence before the undo starts and again right before the undo action, after
the awaited observers (each event masked first, a model call with detectWithModel). The window
left is the undo action itself, up to its own write — not "the same window as send", which the
page claimed: send calls the other system right after its check.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees: an undo marked done never runs again (#607)
Guarantees-across-processes: every automatic undo marked done and skipped by whoever takes the
tree over — a failed join's too —, the one window left (between the undo action and its mark: at
least once, exactly once when fenced by its key), scenario 12b and its broken store. Guarantees:
P5 says once; the fault suite's row counts 23 scenarios and the undo matrix.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#608): fault scenario 5d and its sabotage
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#605): an undo runs only while its holder holds the tree
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#598): every holder takes the same side path — failures cross instances as their records (ADR-0028)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#533): Guarantees — every guarantee, its assumptions and its proofs
linearizable: the exact real-time order; three sabotage runs
docs(#533): the linearizability checker — Guarantees-across-processes, Changelog
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees-across-processes, Changelog: a root's end is heard once (#597)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees-across-processes, Changelog: an announced child failure stays the child's end (#596)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
Guarantees-across-processes, Your-own-store, Changelog: scenario 5c, an opted-out set fails the fault suite (#584); the PR time scale, the clocks, what the suite leaves to storeConformance
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#562): a child's end is heard at most once, by the pass that ended it — the window stated
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#484, #562): children-once reads the queue; a child's end can be heard twice after a takeover
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#533): fault scenarios of pods whose clocks disagree — Guarantees across processes, Changelog
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg
docs(#484): Guarantees across processes; faultSuite on Your own store; Several instances, sidebar, changelog
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012Kh8JmysuhZyQRSpNyJdPg