Stage ABI-scoped unit generations

2026-07-18 14:09:38 +00:00
parent 810c19b042
commit 1952c7d762
27 changed files with 302 additions and 53 deletions
@@ -232,6 +232,14 @@ refreshes the epoch deadline before its first guest call. Otherwise a component
 whose compilation outlasted the guest CPU budget would immediately trap in the
 following allocator/relocation call even though no guest loop consumed it.

+Unit artifacts live beneath an ABI-generation directory such as
+`BIN_DIRECTORY/units-c12-w7`: `c12` is the compiler/unit-metadata ABI and `w7`
+is the runtime core ABI. Old and new service binaries therefore never publish
+or read the same unit path during an ABI transition. The managed restart builds
+and serializes the complete next generation before stopping the old service;
+failure aborts the switch and leaves the running generation intact. Old
+generation directories are retained as an explicit rollback path.
+
 The proactive compiler and request workers coordinate through per-unit file
 locks and a lock-protected demand-priority queue under `BIN_DIRECTORY`. A small
 priority-only compiler process drains that queue independently of the full-site