Coordination integrity for a multi-session ecosystem: optimistic-concurrency guards so parallel work never silently overwrites itself.
Session b44948fe · 2026-07-18 · verified live on the sovereign edge
| Rung | Capability | Owner | Status | Evidence |
|---|---|---|---|---|
| F744 | nx_clobber_guard -- cross-tree content reconcile + OCC refuse | engineer | DONE / live | gate 3/3 + real drift caught (sec 2) |
| F749 | wire guard into nx_ship pre-upload + seed paths (enforcement half) | engineer | filed | -- |
| F745 | nx_store_collision_check -- dup-key overwrite detector | warden | DONE / live | gate 2/2 GREEN + neg-ctrl; dogfood live queue CLEAN (67 ids, 0 dups); NAS elf 16372B; MCP callable + cap 30d |
| F746 | claims plane on MCP + hubbed to NAS | warden | filed | eats seq37/39 |
| F747 | single-writer hub regen (flock) | engineer | filed | eats seq68 |
| F748 | program card + /compare benchmark + maturity triangulation | pm | filed | -- |
| Stage | Receipt |
|---|---|
| Built (sovereign) | nx_cc->nxasm_x86, no gcc | laptop asm 60089B | NAS elf 12025B |
| Gate GREEN 3/3 + neg-control | T1 identical->CONVERGED | T2 different->DIVERGED | T3 absent->ABSENT | verdict=GREEN |
| Deployed never-brick | /api/build -> /api/promote | live=nx_clobber_guard.elf prev:1 |
| MCP registered + cap | callable=1 | nishihost/nx_clobber_guard.elf | cap 30d |
Dogfooded on the REAL live drift -- the exact ecomat clobber that triggered this lane:
$ nx_clobber_guard cmp laptop-SSOT(20-domains) NAS-home-mirror(15-domains) RECONCILE a_bytes=11876 b_bytes=6376 verdict=DIVERGED (would-clobber: reconcile before push -- git-non-fast-forward) $ nx_clobber_guard cmp laptop-SSOT laptop-SSOT [control] RECONCILE a_bytes=11876 b_bytes=11876 verdict=CONVERGED
| Function | R | A | C | I |
|---|---|---|---|---|
| Build the guards (F744/F745/F747) | engineer | pm | referee | operator |
| Claims-on-MCP + hub (F746) | warden | pm | conductor | operator |
| Verify / gate / negative control | referee | pm | adversary | operator |
| Program card + benchmark (F748) | pm | pm | architect | operator |
Canonical store row: raci- | acl | R=engineer A=pm C=referee I=operator | active (added clean, replaced=0 = no clobber).
| Debt | What | Eaten by |
|---|---|---|
| seq71 | ecomat two-edit-surface clobber (docs vs design-market both id 17) | instance reconciled (laptop 19->20) + F744/F745 |
| seq40 | frontier-put no-autoid -> id races | VERIFIED FIXED (addauto live under concurrency) |
| seq68 | hub lost-update race (proven twice) | F747 |
| seq96 | pmdash name+elf collision (parallel session) | F745 |
| seq37 / seq39 | claims WSL-shell-only, not on MCP, not hubbed | F746 |
| seq58 / seq62 | store_put bare-prefix orphans (3 sessions hit it) | F745 class |
| Yardstick | Mechanism | acl parity |
|---|---|---|
| git non-fast-forward | refuse overwrite of unmerged state | MET -- F744 byte-diverge refuse |
| etcd compare-and-swap | write carries expected rev; stale fails | PARTIAL -- enforcement F749 |
| K8s resourceVersion | optimistic concurrency on writes | PARTIAL -- F749 |
| CRDT (Automerge/Yjs) | conflict-free auto-merge | N/A by design -- we refuse+reconcile, not silent-merge |
Beyond-SOTA: content-addressed OCC for multi-agent write fabrics; per-artifact vector-clock lineage; semantic (not byte) source reconciliation. Fetch: Jujutsu/Sapling conflict models · CRDT research (Automerge/Yjs) · Dropbox/rsync conflict-copy heuristics · etcd/ZooKeeper lease semantics.
Revenue today $0 MEASURED. Anti-clobber value = avoided rework + avoided outage: 2 mgmt outages this cluster traced to un-eaten debt MEASURED; seq71 was manually repaired twice -- this lane removes that recurring cost. Ecosystem maturity 456 permil / 20 domains MEASURED; coordination = META domain FUNCTIONAL->S-CLASS. Full ROI envelope (~$30-110k/yr, sibling-owned, source-tagged) at /pmdash.
Did not double-drive the pmdash/eff/ROI hotbed (sibling-owned) -- anti-clobber is the meta-fix that protects it (seq96 was a pmdash collision, exactly what F745 detects). Live oversight surfaces: /standup · /frontier · /plan · /pmdash.