Rongsong Shen 7d70820aac docs(ha-commit-durability): root-cause findings for failover committed-job loss (bug-828) ... WAL-byte decode proves REAL data loss (not commit-index): committed prefix entries physically absent from live nodes (ctrl-2 WAL starts LSN 16, ctrl-3 LSN 13), present only on the down node. Mechanism: empty-rejoin catch-up streams [watermark..committed] not [1..], no snapshot to backfill the prefix -> permanent gap. Predates libxce-failover. Full findings + open forks + xce_test waldump tooling plan in INVESTIGATION-failover-job-loss.md. Not yet fixed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-20 13:51:40 +00:00
..
design.md	fix(ha-commit-durability)!: controller never self-terminates — loud non-promotable fence replaces recovery FATAL/abort	2026-06-18 11:10:19 +00:00
INVESTIGATION-failover-job-loss.md	docs(ha-commit-durability): root-cause findings for failover committed-job loss (bug-828)	2026-06-20 13:51:40 +00:00
requirements.md	fix(ha-commit-durability)!: controller never self-terminates — loud non-promotable fence replaces recovery FATAL/abort	2026-06-18 11:10:19 +00:00
research.md	spec(ha-commit-durability): 6.1 answered — durability loss + liveness are REAL (reproduce off overlay), not an fdatasync artifact; Phase 6 now at 6.2 root-cause	2026-06-20 03:19:57 +00:00
spec.json	spec(ha-commit-durability): REOPEN for bug-795 total-outage cold-restart-all committed-job loss	2026-06-20 00:33:18 +00:00
tasks.md	spec(ha-commit-durability): REOPEN for bug-795 total-outage cold-restart-all committed-job loss	2026-06-20 00:33:18 +00:00