Record verified mixed rename planning and execution boundary evidence
This commit is contained in:
@@ -586,3 +586,31 @@ with separately reported new usage and aggregate live-storage accounting. An
|
||||
independent fresh ledger must not hide retained output or old state. Execution
|
||||
ownership/readmission seams remain separate required implementation; this
|
||||
decision does not label a read-only plan as accepted rewritten source.
|
||||
|
||||
## 2026-09-24 — carry output storage through actual verification
|
||||
|
||||
The [execution source map](analysis-mixed-rename-execution-20260924/RENAME-EXECUTION-SOURCE-MAP.md)
|
||||
identifies the next boundary: output buffers already coexist with parsing, so
|
||||
adding a retained-output baseline only at resolution checks too late. Preserve
|
||||
the exact per-snapshot Limits and ProjectLimits, explicitly drop consumed old
|
||||
auxiliary state, and carry surviving output storage through verification.
|
||||
The final comparison must include aliases and parameter names; the planning
|
||||
gate deliberately omits them and cannot establish accepted rewritten output.
|
||||
|
||||
We considered authenticating exact output bytes, then reserving a conservative
|
||||
parser envelope derived from the unchanged syntax topology. The
|
||||
[independent feasibility investigation](analysis-mixed-rename-execution-20260924/RENAME-EXECUTION-ENVELOPE-FEASIBILITY.md)
|
||||
found useful partial bounds but no complete safe, useful aggregate formula.
|
||||
Finishing it would duplicate parser lifecycle knowledge across expression
|
||||
tasks, name sets, projection buffers, string decoding and include traversal.
|
||||
Select explicit carried storage accounting at actual growth/handoff seams for
|
||||
the next bounded design instead. Revisit an envelope only if a small, stable
|
||||
source-derived proof demonstrates useful caps; do not use unexplained byte or
|
||||
node multipliers. This chooses a direction, not an implemented execution API.
|
||||
|
||||
The [domain audit](analysis-mixed-rename-execution-20260924/CARRIED-STORAGE-DOMAIN-AUDIT.md)
|
||||
keeps the declared metric explicit: logical auxiliary slots/text are distinct
|
||||
from model/serde/raw-validator heap, allocator capacity and process RSS. The
|
||||
exploratory allocation inventory is not a requirement to meter all heap usage.
|
||||
The successor contract must reconcile that domain before selecting growth
|
||||
hooks or claiming an aggregate pre-allocation guarantee.
|
||||
|
||||
Reference in New Issue
Block a user