B-26 · Medium
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
§12d (Nov 3) runs the watch in the systemd initrd, so no network tool acts unwatched in either stage. Main still exempts initrd survivors: the units in
nix/netwatch-unordered.nix(started by the systemd initrd and kept across switch-root) are not ordered after the watch, so what they change before stage-2 netwatch attaches is attributed to nobody. Steering from that window that still stands at attach is read aspre-attach <object>(netwatch’s attach rule; N6) and holds every network tool’s failure until the object is gone: fails closed (over-holding). It fails open only for steering the attach snapshot cannot read, DNS servers set through resolved and the system proxy, which is B-22’s gap
| Breaks | Status | Mitigation | Closes in |
|---|---|---|---|
| Available (§12d not yet met); Correct only through B-22 | Open, temporary: closed by the initrd-watch work (lane-change-path and lane-nix: pinned bpffs links and maps, layout and build-hash check, root 0700 pins, ring sized from a measured event count) | planarian hold release <unit> lifts a hold a pre-attach object no longer warrants; with a scripted initrd there are no such units | A |
The guarantees it narrows
None: a process or availability row.