ensemble: fault model, peer liveness, and honest message identity - #61

Open

adiled wants to merge 15 commits into

mainfrom

ensemble-cleanup

Commits on Sep 27, 2026

wip: ensemble fault model, inbox race fix, iroh routable hints
adiled
committed
b2e9577
sim: link-fault scenario tests against a LinkCounters oracle
adiled
committed
4843051
ensemble: peer liveness lease, probe, and eviction
adiled
committed
8784e07
humd: redial supervisor with exponential backoff
adiled
committed
655d9c0
sim + ensemble: kill a peer, and the liveness it produces
adiled
committed
4e630e6
humd: give each drift test its own temp directory
adiled
committed
7ec3b37
liveness: an unproven peer was immortal, and a probe ran the wrong way
adiled
committed
9fa8fa8
sim: stop the lossy-heal test racing its own subscription
adiled
committed
8a9ea8f
delivery: mint message identity at the sender, and enforce dusk
adiled
committed
7c45d2f
humd: stop config/key tests mutating process-global env
adiled
committed
fbaf776
ensemble: at-most-once for unicast, keyed on mid not rid
adiled
committed
359d8c3
ensemble: read the producer path, and bound the seen-set by bytes
adiled
committed
523aea6
ensemble: a test that never ran, and a clippy error in my own code
adiled
committed
303b5de
ensemble: bound every peer send, so one stalled peer can't wedge the mesh
adiled
committed
b48a2bd
tests: three that could pass without proving anything
adiled
committed
ac8ddf6