forked from lei.chen/myxce
AdvanceCommitIndex (raft.tla:259/270, closes G4): leader-only (-EPERM); Max(agreeIndexes) = highest N with a quorum ((n_peers/2)+1) of match_index>=N, self counted as log_len; scan log_len downward. CURRENT-TERM RULE: advance commit_index to N only when on_get_entry_term(N)==s->term, else HOLD (Figure-8 safety — never commit a previous-term entry on replication count alone; a later current-term commit indirectly commits it). Monotonic; fires on_commit_advanced once per strict advance; commit_index<=log_len. 3.3: raft_on_append_entries_reply left untouched — verified it never advances commit (separation, Req 2.6). 6.1: sim commit-driver helper raft_sim_advance_commit added. Req 6.3 two-phase indirect-commit transition covered end-to-end by task 7.1 (sim). ASAN green (230 tests). |
||
|---|---|---|
| .. | ||
| settings | ||
| specs | ||
| steering | ||