IIP-019: Durable state, recovery and scale
IIP-019 is recorded on the Hypervisor Daemon roadmap with status Active implementation in Horizon 0 — building the governed core: Durable state, recovery and scale. An append-only store for effects and receipts. A crash at any dispatch boundary leaves idempotent effects done exactly once and ambiguous ones marked unknown for reconciliation, never retried blindly. Recovery and per-tenant limits hold under load..
What it is
An append-only store for effects and receipts. A crash at any dispatch boundary leaves idempotent effects done exactly once and ambiguous ones marked unknown for reconciliation, never retried blindly. Recovery and per-tenant limits hold under load.
Where it stands
Partly built: the crash matrix runs in shadow, and replicated storage with durability classes holds part of the records. Scale and recovery testing has not started.
What has to be true next
The full crash matrix passes, and a load profile fixed in advance holds with no acknowledged event lost.
Status
Active implementation in Horizon 0 — building the governed core. Implementation is underway and has current code anchors, but the stated scope is not complete. Horizons order work by evidence, not by date.
Evidence
The paper, release, repository path or evidence bundle behind this status.