Retire only once the same answer has held ten minutes as well as five passes

Five passes are twenty-five seconds, shorter than a controller restart, a store reconnecting or a file half written; the operator asked for both (hq ADR 0230).
2026-10-06 14:28:21 +02:00
parent e68ef88333
commit 2c15074a0b
10 changed files with 184 additions and 124 deletions
@@ -21,7 +21,8 @@ package main
 // (novox/hq ADR 0230, the operator's model of 2026-10-06).** Retiring disables its access — reversibly —
 // and marks its login and data "to delete" with when and why; nothing is deleted. Asked for again, the
 // ordinary create re-enables it as it was. It is retired only once the same set has gone unasked in
-// StablePasses consecutive passes, and a set larger than the bound waits for a person. retirement.go.
+// StablePasses consecutive passes and for StableFor, and a set larger than the bound waits for a
+// person. retirement.go.
 //
 // Carried, identical, by every Go provider until the Go SDK has the loop: postgres and keycloak.
 // Each module's `harness_same_test.go` fails when its copy and the other's differ (this file and
@@ -92,11 +93,12 @@ type Harness struct {
 	// missed the first hears the next, and a standing nobody repeats can be told from one that holds.
 	FailingAfter  time.Duration
 	SayAgainEvery time.Duration
-	// StablePasses (5) is how many consecutive passes must see the same set no longer asked for before
-	// it is retired. RetireAtOnce (3) and RetireFraction (0.5) bound what is retired without a person:
+	// StablePasses (5) is how many consecutive passes must see the same set no longer asked for, and
+	// StableFor (10m) how long it must have held since the first of them, before it is retired. RetireAtOnce (3) and RetireFraction (0.5) bound what is retired without a person:
 	// more consumers than RetireAtOnce, or — where more than one is held — a larger share of those held
 	// than RetireFraction, waits for `retire approve` (novox/hq ADR 0230).
 	StablePasses   int
+	StableFor      time.Duration
 	RetireAtOnce   int
 	RetireFraction float64

@@ -202,6 +204,9 @@ func (h *Harness) init() {
 	if h.StablePasses == 0 {
 		h.StablePasses = 5
 	}
+	if h.StableFor == 0 {
+		h.StableFor = StableFor
+	}
 	if h.RetireAtOnce == 0 {
 		h.RetireAtOnce = 3
 	}