Skip to content

Send loaded revision before claiming controller boot - #5519

Draft
mgazza wants to merge 1 commit into
fix/require-loaded-controller-revisionfrom
fix/bind-loaded-revision-before-claim
Draft

mgazza wants to merge 1 commit into
fix/require-loaded-controller-revisionfrom
fix/bind-loaded-revision-before-claim

Conversation

@mgazza

@mgazza mgazza commented Oct 12, 2026

Copy link
Copy Markdown
Collaborator

A stale loaded configuration could claim an unassigned controller epoch before the engine rejected the revision mismatch, preventing the corrected process from attaching with a new boot. Include the validated loaded_config_version in attach requests so the paired backend can reject stale configuration before assigning the boot or renewing its lease. Retain the response comparison as a second check.

Stacks on #5518. Requires the paired backend validation change, currently in progress; this client change alone does not resolve the server claim ordering. Enrollment stays disabled.

Validation: all 32 control/service tests pass, including the exact attach payload and stale startup refusal. Pre-commit passes. GitNexus reports the expected request/poll path across two files, medium risk.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant