fix: hold the session to its wall-clock budget - #1171

Merged

xiaofei-zheng merged 65 commits into

mainfrom

fix/1146-time-budget-enforcement

Aug 19, 2026

Commits on Aug 18, 2026

fix(loop): refuse an action the session budget cannot fit

zoroyihan7
and
cursoragent
committed
ae9636d
fix(executors): stop one sentinel returncode from naming two causes

zoroyihan7
and
cursoragent
committed
5d7ac11
fix(executors): hold every unit of work to the session clock

zoroyihan7
and
cursoragent
committed
63ff1ab
fix(loop): cancel the in-flight actions the session cannot wait for

zoroyihan7
and
cursoragent
committed
bf80774
fix(loop): let the wall-clock defences reach an inline action too

zoroyihan7
and
cursoragent
committed
ea95a73
fix(loop): declare the time-budget helpers in the module interface

zoroyihan7
and
cursoragent
committed
180ad5c
fix(close): give the sequencer a report task it can still run

zoroyihan7
and
cursoragent
committed
ec558e4
fix(prelude): stop preparation spending the optimization phases' budget

zoroyihan7
and
cursoragent
committed
8291c0c
fix(executors): carry the session clock into the Ray worker

zoroyihan7
and
cursoragent
committed
7b4cb28
fix(dispatcher): stop the pump cancelling work it does not own

zoroyihan7
and
cursoragent
committed
4d7ecd8
fix(close): wait for a report already running instead of re-running it

zoroyihan7
and
cursoragent
committed
5b784b2
fix(state): reserve the closing grace window, not a fixed two minutes

zoroyihan7
and
cursoragent
committed
7051ebf
fix(loop): read the action cost the catalogue actually carries

zoroyihan7
and
cursoragent
committed
117d74c
test: stop two doubles asserting the behaviour these fixes removed

zoroyihan7
and
cursoragent
committed
402a777
fix(loop): stop the work, not just the coroutine awaiting it

zoroyihan7
and
cursoragent
committed
3989569
baseline/profile: the session budget reaches the arm that motivated it

zoroyihan7
and
cursoragent
committed
5122e35
admission: price an action on this session's baseline, not the catalogue

zoroyihan7
and
cursoragent
committed
cd2273f
explore: a variant the run reaped is not a variant that failed

zoroyihan7
and
cursoragent
committed
bd841b8
baseline: a round the run stopped is not a baseline that failed

zoroyihan7
and
cursoragent
committed
d0cbf87
ray: the cancel reaches the round, not just the coroutine awaiting it

zoroyihan7
and
cursoragent
committed
6cf0967
docs(executors): say what crossing the process boundary actually costs

zoroyihan7
and
cursoragent
committed
a46eeb4
fix(close): bound the wait on a running step by the work, not the budget

zoroyihan7
and
cursoragent
committed
0d9a8d7
test(budget): record why a warm replay is priced like a baseline round

zoroyihan7
and
cursoragent
committed
2b84b1c
fix(policy): the model cannot rewrite the budget its closing reserve leaves

zoroyihan7
and
cursoragent
committed
97943df
integrate: a cancelled gate takes its patch back out of the tree

zoroyihan7
and
cursoragent
committed
9bf3afc
framework: the candidate agent has the same blind spot on a cancel

zoroyihan7
and
cursoragent
committed
5748868
grid/baseline: every round carries the stop that ended it, not just the measured one

zoroyihan7
and
cursoragent
committed
933659d
writeback: a revalidation the run reaped is not an enablement that stalled

zoroyihan7
and
cursoragent
committed
168eefc
explore: rolling back a reaped rebench must not delete a prior round's row

zoroyihan7
and
cursoragent
committed
5f9c69d
cancel: derive the three cooperative-stop windows from what stopping costs

zoroyihan7
and
cursoragent
committed
a2326c4
dispatcher/integrate_patch: split the three functions this branch pushed over 100 lines

zoroyihan7
and
cursoragent
committed
2408383
cancel: reaping a round's server and dropping its lease are a sequence

zoroyihan7
and
cursoragent
committed
c744315
executors: a cancel at the post-verdict KB write owes the stash back

zoroyihan7
and
cursoragent
committed
8ab077f
enablement: a revalidation window the run stopped stays usable, and free

zoroyihan7
and
cursoragent
committed
ab0f783
enablement: a build whose launch probe the run stopped is still unprobed

zoroyihan7
and
cursoragent
committed
de7e321
tests: every pass of a round is asserted to carry the session deadline

zoroyihan7
and
cursoragent
committed
4a9b65a
baseline: the multi-node warmup holds the measured round's budget back

zoroyihan7
and
cursoragent
committed
5241794
stop_attribution: say where the returncode side of the distinction lives

zoroyihan7
and
cursoragent
committed
4177de8
tests: one multi-node setup for both benching arms' suites

zoroyihan7
and
cursoragent
committed
8111ba6
tests: the Ray lease is a launch site of its own

zoroyihan7
and
cursoragent
committed
073e008
baseline: the warmup holds back the measured round's expected runtime, not its backstop

zoroyihan7
and
cursoragent
committed
9c03b67
cancel: a cancelled action's unwind does not stop to observe itself

zoroyihan7
and
cursoragent
committed
a81d52b
baseline: a warmup may claim half of what the round has, and a budget under one whole round produces no anchor at all

zoroyihan7
and
cursoragent
committed
4c495f8
grid_runner: the budget is re-checked after the uncapped server restart, not only at the top of the loop

zoroyihan7
and
cursoragent
committed
db8e484
baseline: no pass of a round is shortened to pay for the next one

zoroyihan7
and
cursoragent
committed
0b62de6
machine_state: preparation answers to the session clock, not a ledger the resume outlives

zoroyihan7
and
cursoragent
committed
603ebca
baseline: a round the session cannot finish does not boot a server to find out

zoroyihan7
and
cursoragent
committed
92951f0
baseline: say what the round's price really is, an over-prediction with one safe use

zoroyihan7
and
cursoragent
committed
85a08cf
baseline: name the one thing that keeps a warmup's figure as a marked cold anchor

zoroyihan7
and
cursoragent
committed
e5edb4e
executors: a round reports what it spent booting apart from what it spent benchmarking

zoroyihan7
and
cursoragent
committed
7adef31
state: a session carries what its baseline cost in two parts, and whether it is a cold figure

zoroyihan7
and
cursoragent
committed
d4f1062
phases, executors: price work by what it spends, and stop when nothing can use the result

zoroyihan7
and
cursoragent
committed
0e8d572
phases: a session that stopped in CLOSE reopens where a fresh clock can be spent

zoroyihan7
and
cursoragent
committed
60a700c
executors, phases: measure a round's price rather than rebuild it, and let a hot pass correct a cold anchor

zoroyihan7
and
cursoragent
committed
5b3c723
executors, policy: measure the boot on one clock, and let a cold anchor be re-measured

zoroyihan7
and
cursoragent
committed
225e307
Require the boot duration when stamping server-ready

zoroyihan7
and
cursoragent
committed
8c26553
Record the multi-node successor as a known gap in the PRELUDE gate

zoroyihan7
and
cursoragent
committed
66a00ae
Stop the usable-budget lock test from racing the clock

zoroyihan7
and
cursoragent
committed
0670593
Stop recover from running after the session budget is spent.

zoroyihan7
and
cursoragent
committed
c86cd69
Ignore the EXPLORE hours leave-behind when it covers the whole session.

zoroyihan7
and
cursoragent
committed
07e23b9
Cancel a tick step that outlives the session bound so the run can still close.

zoroyihan7
and
cursoragent
committed
b2a43f0
Drop the unused await path that CodeQL flagged, and stop requiring a reactor turn on a spent budget.

zoroyihan7
and
cursoragent
committed
c218d3f
Fix a rebase merge that concatenated two BaselineExecutor methods.
zoroyihan7
committed
6f23e0a
Close SWEEP honestly when conc_sweep cannot fit the session budget.
zoroyihan7
committed
57c7b66
Remove the leftover rebase duplicate of enable_multi_node and an unused NamedTuple import.
zoroyihan7
committed
f2c241c