Skip to content

RFC 0066: Server lifecycle and online deployment - #697

Draft
aaltshuler wants to merge 2 commits into
mainfrom
codex/server-upgrade-rfc
Draft

RFC 0066: Server lifecycle and online deployment#697
aaltshuler wants to merge 2 commits into
mainfrom
codex/server-upgrade-rfc

Conversation

@aaltshuler

Copy link
Copy Markdown
Contributor

What & why

Schema and configuration changes currently require reconstructing server state, while interrupted requests and failed writes can leave graphs unavailable. RFC 0066 proposes online activation in the running server, server-owned operation lifetimes, and explicit recovery and resource boundaries.

The proposal defines coherent schema/query activation without resetting graphs, exact publication outcomes, per-graph availability, bounded admission and change-feed progress, and an incremental rollout with evidence gates.

Backing issue / RFC

Related: #466, #694, #601, #602, #513, #494.

Checklist

  • Change is focused: one RFC and its registry entry.
  • Tests added/updated for behavior changes: N/A; documentation proposal.
  • Public docs updated if user-facing surface changed: N/A; implementation has not started.
  • Reviewed against docs/dev/invariants.md; graph publication, recovery ownership and authorization remain explicit requirements.

Local verification

  • python3 scripts/check-docs.py — passed; 139 Markdown files checked.
  • bash scripts/check-agents-md.sh — passed; 47 links and 45 docs checked.
  • typos docs/rfcs/0066-server-lifecycle-and-online-deployment.md docs/rfcs/README.md — passed.
  • git diff --check and git diff --check origin/main...HEAD — passed.
  • Rust tests were not rerun for this documentation-only PR. The RFC separately records the preceding investigation's executed tests, diagnostic failures and remaining qualification work.

Notes for reviewers

The RFC remains draft / not-started. Review the operation-settlement boundary, deployment publication/finalization/activation ordering, and the startup reconciliation proof required before online deployment can ship.

Issue #694 requires engine failure finalization in addition to surviving client disconnects. Issue #466 requires typed retry decisions for the complete command. The RFC also records its relationship to RFC 0065's separately gated isolated merge-publication design. Durable data-operation submission and result lookup have their own acceptance gate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant