refactor: extract optional runtime shutdown boundary (#3632)

This commit is contained in:
安正超
2026-06-19 22:53:42 +08:00
committed by GitHub
parent e6391598f0
commit 74fcfddd7f
7 changed files with 236 additions and 82 deletions
@@ -80,9 +80,9 @@ Future sidecars for profiling, eBPF, or NUMA must preserve these invariants:
- Verify optional profiler sidecar and Wasm runtimes stay disabled by default
and cannot declare a startup fatal boundary.
`R-017`:
`R-021`:
- If a runtime service sidecar is added later, start it from the startup service
boundary with explicit shutdown ownership.
- If a runtime service sidecar is added later, enter it through the optional
runtime boundary with explicit shutdown ownership.
- Preserve current service order, KMS/audit/notification fatal boundaries, and
scanner/heal startup semantics.