Module soaking

nixfleet_state_machine::transitions

Module soaking 

Source
Expand description

Transitions from Soaking.

  • LocalProbeObservedFirst / RemoteProbeObservedFirst — stamps probe_observed_first_at. Soak gate may now consult probe state.
  • LocalProbeResult / RemoteProbeResult — updates probe map.
  • LocalProbeFailureFirst / RemoteProbeFailureFirst — stamps probe_failure_first_at. Sweep window measured from this exact agent-supplied timestamp.
  • LocalSustainedFailureCrossed / RemoteFailed — drives Soaking → Failed. Agent reads onHealthFailure and (if rollback-and-halt) fires rollback in same handler.
  • LocalConvergedReached / RemoteConverged — drives Soaking → Converged after re-verifying the three §4.2 invariants.

Functions§

handle 🔒
update_probe 🔒
verify_converged_invariants 🔒
RFC-0005 §4.2 Converged event: CP re-verifies the three invariants before transitioning. Same check runs agent-side too — same code, both sides (RFC-0006 §2 principle 4).