Repository navigation

Certify a restarting deploy in a canary worker before it rolls out - #2981

Merged

kriszyp merged 59 commits into

mainfrom

deploy-canary-rollout-step2

Oct 6, 2026

Commits on Oct 2, 2026
- Certify a restarting deploy in a canary worker before it rolls out
  
  dawsontoth
  and
  claude
  committed
  c3eb2f2
- Close the gaps the code review found in the canary rollout
  
  dawsontoth
  and
  claude
  committed
  3b6e367
- Remove the deploy-validation apparatus the canary retired
  
  dawsontoth
  and
  claude
  committed
  81ed664
- Keep the boot-outcome and canary tests independent of what ran before them
  
  dawsontoth
  and
  claude
  committed
  f2c35ac
- Check a peer activation's deploy permission against the project it activates
  
  dawsontoth
  and
  claude
  committed
  4ccc06f
- Admit a held start on its own load, and never on a certification nobody recorded
  
  dawsontoth
  and
  claude
  committed
  b531a29
- Stop every held start before refusing a release, and time out the ones that never report
  
  dawsontoth
  and
  claude
  committed
  5324205
- Wait for every start a gate-suite plan releases together before assigning its steps
  
  dawsontoth
  and
  claude
  committed
  17eb945
- Keep the running workers' watchers paused while a canary decides
  
  dawsontoth
  and
  claude
  committed
  2768bb3
- Let a thread still loading its components ignore a rollout's watcher pause
  
  dawsontoth
  and
  claude
  committed
  58b5880
- Release the requesting worker when its certifying deploy fails, too
  
  dawsontoth
  and
  claude
  committed
  1d672fd
- Remove the temp file when a certification record cannot be written
  
  dawsontoth
  and
  claude
  committed
  7a73d82
- Attribute a certification record without its ownership sidecar when that cannot be read
  
  dawsontoth
  and
  claude
  committed
  622f958
- Report what a component threw when it cannot be renamed, and give the main unit step room
  
  dawsontoth
  and
  claude
  committed
  4ba8dc6
- Start no replacement while another release is armed, before every replacement and not only the first
  
  dawsontoth
  and
  claude
  committed
  9212955
- Report an activation's failure, not a withdrawal that failed after it
  
  dawsontoth
  and
  claude
  committed
  57825b2
- Format the withdrawal's failure handler
  
  dawsontoth
  and
  claude
  committed
  5a63fae
- Interrupt a release whose canary was stopped for another release's refusal, and bound the branch-drop restart
  
  dawsontoth
  and
  claude
  committed
  17d3fc4
- Report an activation's failure past its commit, not a commit that failed after it, and pin the shared-canary test's order
  
  dawsontoth
  and
  claude
  committed
  aef5a7e
- Decide a stopped shared canary's other releases by what it reported, or its silence
  
  dawsontoth
  and
  claude
  committed
  7c5c2ea
- Replace a worker again when another release's refusal stopped its replacement
  
  dawsontoth
  and
  claude
  committed
  e8dee8f
- Report progress when a rollout replaces a worker again
  
  dawsontoth
  and
  claude
  committed
  ec00736
- Let a decision already under way record before a declined rollout closes
  
  dawsontoth
  and
  claude
  committed
  21b3909
- Test the shutdown close in a process of its own, and keep a start booted while armed from rejecting that release
  
  dawsontoth
  and
  claude
  committed
  71f850b
- Log why a silent held start is stopped without deciding anything
  
  dawsontoth
  and
  claude
  committed
  b4fd8bf
- Stop a silent held start whose only release is already being decided
  
  dawsontoth
  and
  claude
  committed
  f57c741
Commits on Oct 5, 2026
- Merge remote-tracking branch 'origin/main' into deploy-canary-rollout-step2
  dawsontoth
  committed
  b737c1b
- Keep a refused decision answerable until its requester reads it
  
  dawsontoth
  and
  claude
  committed
  7141199
- Let a requesting worker the rollout retires finish its deploy
  
  dawsontoth
  and
  claude
  committed
  919b0a2
- Fail the activation job for a peer that left the cluster before its turn
  
  dawsontoth
  and
  claude
  committed
  9b08ae3
- Refuse a worker whose load crossed a release's commit, before it binds
  
  dawsontoth
  and
  claude
  committed
  02ec58b
- Make worker 0's replacement the canary
  
  dawsontoth
  and
  claude
  committed
  b003b6b
- Record this round's certification rules in the design notes
  
  dawsontoth
  and
  claude
  committed
  286a164
- Keep each release's unread decision, not one per component
  
  dawsontoth
  and
  claude
  committed
  d4b1479
- Wait for admission only where main answers the load report
  
  dawsontoth
  and
  claude
  committed
  d07e39a
- Hold a requester's shutdown only while its release is armed
  
  dawsontoth
  and
  claude
  committed
  9fab7d7
- Retire a requesting worker 0 at its turn, and start again a copy the gate stopped
  
  dawsontoth
  and
  claude
  committed
  56c9055
- Start no copy while a decision about its release is under way
  
  dawsontoth
  and
  claude
  committed
  854e07f
- Read an unheld fixture worker's exit delay when its shutdown arrives
  
  dawsontoth
  and
  claude
  committed
  bd75da8
- Start a requester's copy only once it has exited, where they cannot share a port
  
  dawsontoth
  and
  claude
  committed
  73d8ea2
- Wait out any worker still answering a certifying deploy before starting its copy
  
  dawsontoth
  and
  claude
  committed
  9fadc69
- Describe an env declaration's load failure without rewriting what it threw
  
  dawsontoth
  and
  claude
  committed
  72ff73c
- Bound a requester's drain by the canary verdict timeout until its release is decided
  
  dawsontoth
  and
  claude
  committed
  f3705bd
- Keep a worker answering a certifying deploy out of the restart's throttle
  
  dawsontoth
  and
  claude
  committed
  d7cf9cc
- Register a deploy that joins an open decision, so it neither goes unseen nor releases the requester
  
  dawsontoth
  and
  claude
  committed
  126b24d
- Count a worker's joins of a decision apart
  
  dawsontoth
  and
  claude
  committed
  9749366
- Merge branch 'main' of https://github.com/HarperFast/harper into deploy-canary-rollout-step2
  
  dawsontoth
  and
  claude
  committed
  d8ca4f3
- Size the main unit cap from this branch's slowest leg, which already ran main's named-child suites
  
  dawsontoth
  and
  claude
  committed
  4f635e3
- Let a deployed tree's declared entry decide before the application lock, so a root config set back to the entry a deploy replaced installs it
  
  dawsontoth
  and
  claude
  committed
  73f4c66
- Fence a release whose certification record cannot be read while main's gate holds it open
  
  dawsontoth
  and
  claude
  committed
  cb8c87d
- Install from root config over a deployed tree whose record cannot be read, rather than trusting the lock
  
  dawsontoth
  and
  claude
  committed
  39b8614
- Refuse to certify a live release again while its certification record cannot be read
  
  dawsontoth
  and
  claude
  committed
  07bb1b1
- Keep a decided deploy from being cut off, throttle workers only a queued rollout can decide, and close two stale-state gaps
  
  dawsontoth
  and
  claude
  committed
  eeb6b46
- Defer a worker whose release was decided while its replacement booted, and record the installed tree under its preparation's lock
  
  dawsontoth
  and
  claude
  committed
  86ff43f
- Skip shutting down a worker that has already exited, since its exit would never come again
  
  dawsontoth
  and
  claude
  committed
  973e7db
- Pick worker 0 among HTTP workers, identify a linked tree by its target, and interrupt rather than cut off an undecided deploy
  
  dawsontoth
  and
  claude
  committed
  475fbe6
- Refuse to re-arm a release whose decision is still being read, and retire a predecessor at admission only for a replacement still starting
  
  dawsontoth
  and
  claude
  committed
  53334eb
Commits on Oct 6, 2026
- Start a slot again only once a predecessor retired at admission has exited
  
  dawsontoth
  and
  claude
  committed
  02ce6f7
- Merge the two JSDoc comments on join into one
  
  dawsontoth
  and
  claude
  committed
  bcc1bf9

Commits

Commits on Oct 2, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026