Phase 2 W3c — Active/Standby Controller (OPS-04 / INVARIANT 33)#14

Merged

l17728 merged 15 commits into

mainfrom

feat/phase-2-w3c-active-standby

May 15, 2026

Commits on May 15, 2026

docs(spec): Phase 2 W3c — active/standby controller design (OPS-04 partial)

l17728
and
claude
committed
docs(plan): Phase 2 W3c — active/standby controller implementation plan (8 tasks)

l17728
and
claude
committed
feat(config): add active_lock_id + leader_poll_interval_seconds (W3c)
l17728
committed
refactor(config): cap active_lock_id at PG bigint max + env-override test (W3c)
l17728
committed
feat(controller): LeaderElector — PG advisory-lock primitive (W3c)

l17728
and
claude
committed
refactor(controller): exercise verify exception branch + log cleanup errors (W3c)

l17728
and
claude
committed
feat(controller): run_leader_loop state machine (W3c)

l17728
and
claude
committed
refactor(controller): guard on_active failures, strengthen step-down test (W3c)

l17728
and
claude
committed
test: make_app_with_state helper + migrate 7 fixture sites (W3c)

l17728
and
claude
committed
feat(api): GET /health/active LB target (W3c)
l17728
committed
feat(api): require_not_recovering 503 barrier on executor-loop endpoints (W3c)

l17728
and
claude
committed
feat(controller): lifespan leader-gates recovery + sweep, delete STRICT_RECOVERY (W3c)

l17728
and
claude
committed
test(e2e)+docs: failover drill + OpenAPI + operator runbook (W3c)
l17728
committed
fix(w3c): remove unused imports + await leader task on shutdown (W3c)

l17728
and
claude
committed
docs(plan): sync W3c plan with review-driven fixes during execution

l17728
and
claude
committed