fix: keep a crank's store work inside one transaction - #1021

Open

sirtimid wants to merge 39 commits into

mainfrom

sirtimid/crank-rollback-integrity

Commits on Sep 7, 2026

test: pin the transaction invariants #1005 left broken

authored and
sirtimid
committed
893b09f
fix: keep a crank's store work inside one transaction

sirtimid
and
claude
committed
0493967
test(kernel-test): reap until the vat's GC is visible, not three times

sirtimid
and
claude
committed
5e6cf5d
test: fix rollback crank test
sirtimid
committed
272f920
fix(ocap-kernel): forget every savepoint when a crank rollback fails

sirtimid
and
claude
committed
eeb5652
fix(kernel-store): log an abort that fails while discarding a transaction

sirtimid
and
claude
committed
d9971b0
test(ocap-kernel): pin the flush's ordering against a failing enqueue

sirtimid
and
claude
committed
48d46c6
docs: correct the transaction claims review found wrong

sirtimid
and
claude
committed
dc8d1de
docs: cut the padding from this branch's comments and changelogs

sirtimid
and
claude
committed
dc6eef4
fix(ocap-kernel): revert cached values and GC candidates on crank rollback

sirtimid
and
claude
committed
323dd18
test(kernel-store): pin the failed COMMIT that wedges `_inTx`

authored and
sirtimid
committed
6c28b96
test(ocap-kernel): pin the endCrank failure that buries the real error

authored and
sirtimid
committed
3d3fe3e
test(kernel-node-runtime): pin the kernel store's missing logger

authored and
sirtimid
committed
f1e0ed0
test(ocap-kernel): pin the release failure lost at the remote savepoint

authored and
sirtimid
committed
c10b5b9
test: tighten the four repros after review

authored and
sirtimid
committed
7ed40cd
fix(kernel-store): clear `_inTx` before the COMMIT, not after

sirtimid
and
claude
committed
afc664f
fix(ocap-kernel): stop `endCrank` burying the error that killed the run loop

sirtimid
and
claude
committed
10b042a
fix(ocap-kernel): report the remote release failure, not a missing savepoint

sirtimid
and
claude
committed
5470554
test(ocap-kernel): pin the in-memory revert against a failed crank rollback

sirtimid
and
claude
committed
726d063
fix(runtimes): give the kernel store a logger

sirtimid
and
claude
committed
daae217
chore: cite this PR in the changelogs

sirtimid
and
claude
committed
8e0676b
test(kernel-store): pin the transaction a failed COMMIT abandons

sirtimid
and
claude
committed
2724dff
fix(kernel-store): discard the transaction a failed COMMIT leaves open

sirtimid
and
claude
committed
eab4681
docs: trim changelog entries and comments

sirtimid
and
claude
committed
cf07c28
docs: cut the leftover narration from this branch's tests

sirtimid
and
claude
committed
d8318d5
test(kernel-store): pin the transaction a failed COMMIT leaves open

committed
29744e4
fix(kernel-store): refuse to commit a transaction an abort could not end

sirtimid
and
claude
committed
198380a
test(ocap-kernel): pin the audit that runs after the crank answers its callers

committed
64ffca1
fix(ocap-kernel): audit reference counts after the crank commits, not inside it

sirtimid
and
claude
committed
be4f406
test(kernel-store): pin the crank commit point against a foreign savepoint

committed
775636b
fix(ocap-kernel): keep a crank and an out-of-crank savepoint from overlapping

sirtimid
and
claude
committed
5e7a314
test(kernel-test): reap until the shared import is released, not three times

sirtimid
and
claude
committed
19689c6
docs: changelog entries for the driver, audit, and savepoint fixes

sirtimid
and
claude
committed
9b4717f

Commits on Sep 8, 2026

Commits on Sep 11, 2026

chore: point this PR's changelog links at the repo's new org

sirtimid
and
claude
committed
99eeb9c

Commits on Sep 14, 2026

fix(kernel-store): ask SQLite whether a transaction is open, rather than caching it

sirtimid
and
claude
committed
33fd2e1
fix(ocap-kernel): restore the GC candidates a rollback took, and close the gate's own gaps

sirtimid
and
claude
committed
62cb7fa
fix(ocap-kernel): refuse out-of-crank work that is not synchronous

sirtimid
and
claude
committed
6f9e29d