The store's mirror of the assignments may not write while they are switching or moved, asked before every write (issue 1093)

Review round 2. The writer's leave to write is the lease's and AssignmentsMirrorMayWrite, a flag set before the settle of the assignments' switch, kept after the commit and cleared only if the switch fails, so a pass that read its source before the switch lays and purges nothing after it.

internal/inventory/chain_move.go

@@ -437,6 +437,7 @@ func (i *Inventory) moveKind(ctx context.Context, m mover, say func(string, ...a
 // switchKind records the kind as moved, in one transaction that holds the tables against writes and finds their count
 // as the move read it: false when they took a row since.
 func (i *Inventory) switchKind(ctx context.Context, m mover, r MoveReport) (bool, error) {
+	committed := false
 	tx, err := i.store.Pool().Begin(ctx)
 	if err != nil {
 		return false, err
@@ -452,6 +453,16 @@ func (i *Inventory) switchKind(ctx context.Context, m mover, r MoveReport) (bool
 	if n != r.TableRows {
 		return false, nil
 	}
+	// The store's mirror of the assignments writes nothing from here: it would lay values without the links over the keys
+	// the settle writes and end the ones it ended.
+	if m.kind == KindAssignments {
+		i.moved.switching.Store(true)
+		defer func() {
+			if !committed {
+				i.moved.switching.Store(false)
+			}
+		}()
+	}
 	// The rows read again under the lock: nothing writes them now, so what the bucket holds is made what they say.
 	rows, tableRows, err := m.rows(ctx)
 	if err != nil {
@@ -475,6 +486,7 @@ func (i *Inventory) switchKind(ctx context.Context, m mover, r MoveReport) (bool
 	if err := tx.Commit(ctx); err != nil {
 		return false, err
 	}
+	committed = true
 	i.moved.mu.Lock()
 	if i.moved.kind == nil {
 		i.moved.kind = map[string]bool{}