test: cross-examine the six transaction claims #1021 rests on - #1039

Draft

grypez wants to merge 48 commits into

sirtimid/vat-lifecycle-consistency-v2from

grypez/crank-claims-repro

Commits on Aug 13, 2026

fix(ocap-kernel): make c-list import accounting symmetric (#1006)

sirtimid
and
claude
committed
a310fe4
fix(ocap-kernel): format the changelog and cite this PR
sirtimid
committed
d921e9f
fix(ocap-kernel): don't audit an importer entry the collector is retiring

sirtimid
and
claude
committed
1f9c888

Commits on Aug 14, 2026

fix(ocap-kernel): retain the holders the accounting cannot see

sirtimid
and
claude
committed
e26c929
fix(ocap-kernel): release the ocap URL retention a failed mint took

sirtimid
and
claude
committed
051d772

Commits on Aug 17, 2026

fix(ocap-kernel): take an ocap URL retention per issuance, not per kref

sirtimid
and
claude
committed
ee9c894
test: pin the transaction invariants #1005 left broken

authored and
sirtimid
committed
e0573b7
fix: keep a crank's store work inside one transaction

sirtimid
and
claude
committed
c8ce039
test(kernel-test): reap until the vat's GC is visible, not three times

sirtimid
and
claude
committed
58b00b7
test: fix rollback crank test
sirtimid
committed
29e4dbf
fix(ocap-kernel): forget every savepoint when a crank rollback fails

sirtimid
and
claude
committed
f3b0d4a
fix(kernel-store): log an abort that fails while discarding a transaction

sirtimid
and
claude
committed
d6ab74c
test(ocap-kernel): pin the flush's ordering against a failing enqueue

sirtimid
and
claude
committed
dcf1db7
docs: correct the transaction claims review found wrong

sirtimid
and
claude
committed
97f161b
docs: cut the padding from this branch's comments and changelogs

sirtimid
and
claude
committed
fe99803
fix(ocap-kernel): revert cached values and GC candidates on crank rollback

sirtimid
and
claude
committed
f605ec6
test(kernel-store): pin the failed COMMIT that wedges `_inTx`

authored and
sirtimid
committed
5fadbf4
test(ocap-kernel): pin the endCrank failure that buries the real error

authored and
sirtimid
committed
9d78120
test(kernel-node-runtime): pin the kernel store's missing logger

authored and
sirtimid
committed
ad07e8a
test(ocap-kernel): pin the release failure lost at the remote savepoint

authored and
sirtimid
committed
997c10d
test: tighten the four repros after review

authored and
sirtimid
committed
251e58f
fix(kernel-store): clear `_inTx` before the COMMIT, not after

sirtimid
and
claude
committed
86d16dc
fix(ocap-kernel): stop `endCrank` burying the error that killed the run loop

sirtimid
and
claude
committed
8adaae5
fix(ocap-kernel): report the remote release failure, not a missing savepoint

sirtimid
and
claude
committed
fdf9d6a
test(ocap-kernel): pin the in-memory revert against a failed crank rollback

sirtimid
and
claude
committed
80cb871
fix(runtimes): give the kernel store a logger

sirtimid
and
claude
committed
90b42e9
chore: cite this PR in the changelogs

sirtimid
and
claude
committed
0892784
fix(ocap-kernel): free retired exports and harden GC delivery

sirtimid
and
claude
committed
da40298
fix(ocap-kernel): guard disowning, and stop hiding GC delivery failures

sirtimid
and
claude
committed
f6791a5
fix(ocap-kernel): don't starve the run loop retrying a remote GC delivery

sirtimid
and
claude
committed
5c3a850
test(ocap-kernel): pin each refcount audit credit source to a literal

sirtimid
and
claude
committed
2cc1d85
fix(ocap-kernel): don't commit a GC release a restarting vat disagrees with

sirtimid
and
claude
committed
0e80f43
test(ocap-kernel): cover the export-ownership guard and the launch cleanup path

sirtimid
and
claude
committed
2bcfb09
docs(ocap-kernel): add changelog entries for GC delivery hardening

sirtimid
and
claude
committed
1099770
fix(ocap-kernel): wait for a vat between workers instead of reading it as gone

sirtimid
and
claude
committed
4868848
fix(ocap-kernel): let the run loop restart a vat, and drop work only for endpoints that are gone

sirtimid
and
claude
committed
4e495cd
fix(ocap-kernel): stop a send resolving a live endpoint as unreachable

sirtimid
and
claude
committed
35ce937
fix(ocap-kernel): keep the run loop alive through restart, cleanup, and rollback

sirtimid
and
claude
committed
eaa71ac
fix(ocap-kernel): record a vat's death in one synchronous step

sirtimid
and
claude
committed
e8b3961
fix(ocap-kernel): restore the pre-crank GC candidates, and mark a partial launch terminated

sirtimid
and
claude
committed
52823d3
docs(ocap-kernel): add changelog entries for the vat lifecycle work

sirtimid
and
claude
committed
6a66373
fix(ocap-kernel): reject the delivery in flight when a vat's stream dies

sirtimid
and
claude
committed
bfcdbc4
fix(ocap-kernel): tear down a vat whose stream dies before its handle exists

sirtimid
and
claude
committed
c9b917b

Commits on Aug 31, 2026

test(kernel-store): pin the crank commit point against a foreign savepoint

grypez
and
claude
committed
e54a39a
test(kernel-store): pin the transaction that survives a failed rollback

grypez
and
claude
committed
b072c26
test(kernel-store): pin the transaction a failed COMMIT leaves open

grypez
and
claude
committed
489f299
test(ocap-kernel): pin the audit that runs after the crank answers its callers

grypez
and
claude
committed
d2edb2f
test(ocap-kernel): pin the GC candidate a rollback must not discard

grypez
and
claude
committed
17ed8d9