26e6508b64
fix(ecstore): reject equal-time latest identity conflicts before index fallback ( #6374 )
2026-08-23 01:42:11 +08:00
7c1a76dfd9
fix(ecstore): fence deletes against decommission commits ( #6363 )
...
* fix(ecstore): fence deletes against decommission commits
* fix(ecstore): preserve decommission target write locks
* fix(ecstore): preserve delete markers during source cleanup
* fix(ecstore): route batch delete markers to active pools
* fix(ecstore): preserve batch delete pool errors
* fix(ecstore): retain source-set lock during cleanup
* test(ecstore): exercise decommission delete fences
* test(ecstore): finish decommission delete fence scenario
* fix(ecstore): reuse fixed fence for reverse decommission
* fix(ecstore): fence decommission commit loss
* fix(ecstore): annotate batch delete fallback
* test(ecstore): fix decommission fence fixtures
* fix(ecstore): unblock decommission delete fences
* fix(ecstore): preserve distributed decommission set locks
* fix(ecstore): match decommission lock backend domain
* test(ecstore): align decommission fence barriers
* fix(ecstore): satisfy delete fence lint checks
* fix(rebalance): preserve access-denied delete errors
2026-08-23 00:40:38 +08:00
b4e3c7117e
fix(ilm): fail closed on unsafe manual recovery ( #5276 )
...
fix(ilm): fail closed on unsafe manual job recovery
Mark expired manual transition jobs Unknown when recovery cannot prove queued worker outcomes are durable. Enforce ETag-guarded admission release with exact delete preconditions so stale releasers cannot remove a replacement admission, while still allowing drained cancelled jobs to terminate.
Co-authored-by: heihutu <heihutu@gmail.com >
2026-07-26 07:36:58 +00:00
1d9fd3d7ac
refactor: move ecstore rebalance support helpers ( #3650 )
2026-06-20 13:34:23 +08:00
Zhengchao An