- ext-zealphp 0.3.17: per-coroutine isolation of every request-state
primitive (7 superglobals, $GLOBALS / global $x, function-local static $x,
define(), ini_set, putenv/getenv, silent function/class redeclare,
require_once/include_once) via dlsym'd OpenSwoole on_yield/on_resume/
on_close scheduler hooks. NTS-only.
- App::mode('coroutine-legacy'|'legacy-cgi'|'coroutine'|'mixed') one-knob
lifecycle + App::isolation(); six standalone isolation setters.
- TableSessionHandler + App::sessionHandler/sessionMaxRows/sessionTtl —
concurrent-safe sessions via 3-way (base/disk/memory) merge.
- Fix: isolate global-keyword vars per coroutine on PHP 8.4/8.5
(Stage-2 IS_REFERENCE deref); auto-drop HOOK_FILE under silentRedeclare+
coroutine; executeFile() chdir; ext security hardening passes 1+2;
pool worker survives exit()/die() (FD-3 IPC).
- Known limitation (HAZARD-2): coroutine-legacy CODE isolation on PHP
8.4/8.5 has a pre-existing heap-corruption race under heavy concurrent
class autoloading (not a state leak; absent on 8.3). STATE isolation is
solid on 8.3/8.4/8.5.