fix(1161): bound each /object_info transport so a hung route falls through to the one that works - #1179

Merged

artokun merged 21 commits into

mainfrom

fix/1161-oracle-transport-bound

Aug 13, 2026

Commits on Aug 13, 2026

chore(1161): claim — bound each /object_info transport so the fallback is reachable

artokun
and
claude
committed
96aaea8
fix(1161): bound each /object_info transport so a hung route reaches the fallback

artokun
and
claude
committed
dbaeb3b
fix(1161): one shared budget, sized from the payload, and never rejecting

artokun
and
claude
committed
964c3a7
fix(1161): reserve a floor so the fallback is actually issued

artokun
and
claude
committed
cad2ea8
fix(1161): make the fallback's budget a floor, not a leftover

artokun
and
claude
committed
57607e5
fix(1161): a refusal must quote the budget the step actually got

artokun
and
claude
committed
32b83ab
docs(1161): the changelog must describe the floor, not just the shared budget

artokun
and
claude
committed
848b76a
fix(1161): correct a measurement I invented, then reasoned from twice

artokun
and
claude
committed
fc77f65
test(1161): a throttled or resumed tab must not starve the fallback

artokun
and
claude
committed
183071e
fix(1161): bound the call by grants, not by a clock that can lie

artokun
and
claude
committed
e3e9824
fix(1161): divide the budget in advance and never consult a clock

artokun
and
claude
committed
164735c
fix(1161): tiny budgets, a null timers object, and the numbers in the comments

artokun
and
claude
committed
bbc6f8d
fix(1161): measure on a MONOTONIC clock instead of refusing to measure

artokun
and
claude
committed
674083c
fix(1161): normalise the clock reading, re-pin the shares, correct an overclaim

artokun
and
claude
committed
ed50346
fix(1161): the design comment described a design this no longer has

artokun
and
claude
committed
3fa07c2
fix(1161): a budget past the timer's range must not invert into no bound

artokun
and
claude
committed
29c699f
test(1161): the real-elapsed test could not see the overrun it was named for

artokun
and
claude
committed
3d1e027
docs(1161): the changelog repeated the measurement error it should not

artokun
and
claude
committed
8d81b18
fix(1161): the clock normalisation disabled the reclaim it was meant to protect

artokun
and
claude
committed
34fab81
fix(1161): reading the injected timers object could itself throw

artokun
and
claude
committed
a6988d1
fix(1161): clamping an over-range budget parked the call instead of bounding it

artokun
and
claude
committed
749ff16

Navigation Menu

fix(1161): bound each /object_info transport so a hung route falls through to the one that works - #1179

fix(1161): bound each /object_info transport so a hung route falls through to the one that works#1179
artokun merged 21 commits into
mainfrom
fix/1161-oracle-transport-bound

Commits on Aug 13, 2026

chore(1161): claim — bound each /object_info transport so the fallback is reachable

fix(1161): bound each /object_info transport so a hung route reaches the fallback

fix(1161): one shared budget, sized from the payload, and never rejecting

fix(1161): reserve a floor so the fallback is actually issued

fix(1161): make the fallback's budget a floor, not a leftover

fix(1161): a refusal must quote the budget the step actually got

docs(1161): the changelog must describe the floor, not just the shared budget

fix(1161): correct a measurement I invented, then reasoned from twice

test(1161): a throttled or resumed tab must not starve the fallback

fix(1161): bound the call by grants, not by a clock that can lie

fix(1161): divide the budget in advance and never consult a clock

fix(1161): tiny budgets, a null timers object, and the numbers in the comments

fix(1161): measure on a MONOTONIC clock instead of refusing to measure

fix(1161): normalise the clock reading, re-pin the shares, correct an overclaim

fix(1161): the design comment described a design this no longer has

fix(1161): a budget past the timer's range must not invert into no bound

test(1161): the real-elapsed test could not see the overrun it was named for

docs(1161): the changelog repeated the measurement error it should not

fix(1161): the clock normalisation disabled the reclaim it was meant to protect

fix(1161): reading the injected timers object could itself throw

fix(1161): clamping an over-range budget parked the call instead of bounding it