nx_ha_chaos_gate.nx source

1import "nx_gate_gn.nx" 2// nx_ha_chaos_gate.nx -- availability CONFORMANCE capstone (the "chaos" gap): compose failover + replication + 3// quorum and inject faults, asserting the cluster survives with negative controls: 4// T1 steady: data replicated byte-exact, quorum leader=0, active=PRIMARY 5// T2 primary dies: replicated data SURVIVES on the standby, quorum re-leads (2/3), failover promotes standby 6// T3 minority partition (1/3): NO leader elected (split-brain prevented) + failover DEGRADED (honest) 7// T4 recover (2/3 back): quorum re-elects a leader 8// Sovereign: nx_syscalls + nx_ha_failover + nx_ha_replication + nx_ha_quorum. expect_exit: 0 9import "nx_syscalls.nx" 10import "nx_ha_failover.nx" 11import "nx_ha_replication.nx" 12import "nx_ha_quorum.nx" 13 14func gp(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } 15func g_trunc(path: *u8) -> i64 { let fd: i64=sys_openat_wr(path, 0x1a4); if fd>=0 { sys_close(fd) } return 0 } 16 17func main(argc: i64, argv: *i64) -> i64 { 18 gp("=== nx_ha_chaos_gate (availability conformance: fault injection + survival) ===\n" as *u8) 19 let P: *u8 = "/tmp/chaos_p.log" as *u8 20 let S: *u8 = "/tmp/chaos_s.log" as *u8 21 g_trunc(P); g_trunc(S) 22 let h: *i64 = sys_mmap(32) as *i64; h[0]=1; h[1]=1; h[2]=1 // 3-node cluster, all up 23 let fo: *i64 = sys_mmap(16) as *i64; fo[0]=HA_PRIMARY // failover pair (primary/standby) 24 var pass: i64 = 0; var fail: i64 = 0 25 26 // T1 steady: write + replicate, quorum leader 0, active primary 27 rep_append(P, "commit-1\n" as *u8, 9) 28 rep_ship(P, S, 0) 29 if rep_in_sync(P, S) == 1 { if qm_leader(h, 3) == 0 { if fo_step(fo, HA_UP, HA_UP) == HA_PRIMARY { pass=pass+1; gp(" T1 steady: replicated, leader 0, active PRIMARY PASS\n" as *u8) } else { fail=fail+1; gp(" T1 FAIL fo\n" as *u8) } } else { fail=fail+1; gp(" T1 FAIL leader\n" as *u8) } } else { fail=fail+1; gp(" T1 FAIL sync\n" as *u8) } 30 31 // T2 CHAOS: primary (node 0) dies. Data already on the standby survives; quorum re-leads; failover promotes. 32 h[0] = 0 // kill primary 33 let survived: i64 = rep_in_sync(P, S) // the standby still holds the committed data 34 let newleader: i64 = qm_leader(h, 3) // 2/3 up -> node 1 leads 35 let newactive: i64 = fo_step(fo, HA_DOWN, HA_UP) // primary down, standby up -> failover 36 if survived == 1 { if newleader == 1 { if newactive == HA_STANDBY { pass=pass+1; gp(" T2 primary dies: DATA SURVIVES on standby + quorum re-leads(1) + failover->STANDBY PASS\n" as *u8) } else { fail=fail+1; gp(" T2 FAIL no failover\n" as *u8) } } else { fail=fail+1; gp(" T2 FAIL leader=" as *u8); gn(newleader); gp("\n" as *u8) } } else { fail=fail+1; gp(" T2 FAIL data lost\n" as *u8) } 37 38 // T3 CHAOS: partition down to a 1/3 minority -> NO leader (split-brain prevented), failover DEGRADED 39 h[1] = 0 // now only node 2 up (1/3) 40 if qm_leader(h, 3) == (0-1) { if fo_step(fo, HA_DOWN, HA_DOWN) == HA_DEGRADED { pass=pass+1; gp(" T3 minority 1/3: NO leader (no split-brain) + DEGRADED PASS\n" as *u8) } else { fail=fail+1; gp(" T3 FAIL not degraded\n" as *u8) } } else { fail=fail+1; gp(" T3 FAIL minority led\n" as *u8) } 41 42 // T4 recover: 2/3 back -> quorum re-elects 43 h[0] = 1 // node 0 back (nodes 0,2 up = 2/3) 44 if qm_leader(h, 3) == 0 { pass=pass+1; gp(" T4 recover 2/3 -> quorum re-elects leader 0 PASS\n" as *u8) } else { fail=fail+1; gp(" T4 FAIL\n" as *u8) } 45 46 gp("RESULT pass=" as *u8); gn(pass); gp(" fail=" as *u8); gn(fail) 47 if fail == 0 { gp(" verdict=GREEN (cluster survives fault injection -- SPOF killed by construction)\n" as *u8); sys_exit(0); return 0 } 48 gp(" verdict=RED\n" as *u8); sys_exit(1); return 1 49}