0.1.0 batch 3: harden Activation and Call lifecycle

[suraciii]

Goal

Give each Activation one reliable lifecycle and Call admission model.

Scope

• Use a Runtime-owned activation context.
• Copy the starting Request Context into activation.
• Stop a canceled queued Call before method entry.
• Add Deactivate on Idle and ApplicationRequested.
• Contain factory, lifecycle hook, and observer panics.
• Fail queued Calls after panic or untrusted State.

Acceptance

• Deterministic race tests cover cancellation against method entry.
• Requested deactivation sends the next Call to a new Activation.
• Callback panic cannot stop the process or skip Runtime cleanup.
• State transition mutation checks fail at the intended assertions.
• make ci passes.

References

design/release-0.1.0.md
design/runtime.md
design/scheduling.md
design/request-context.md

[suraciii]

Batch 3 handoff

Status: Complete in the local reviewed batch.

• Commit: a398744a63fceaed820ec82397aaa56acd639a28
• Worktree: /home/szf/.herdr/worktrees/gor/release-0.1-batch3-lifecycle
• Branch: release-0.1-batch3-lifecycle
• Worktree status: clean
• Independent review: PASS with no P1 or P2 findings on the final frozen files

Delivered

• One stable Call lane for each GrainId, with one active Activation at a time.
• Runtime-owned Activation context with only the starting Request Context copied.
• Cancellation check before a queued Call enters its Grain method.
• Deactivate on Idle and the ApplicationRequested reason.
• FIFO handoff to a new Activation after requested deactivation.
• Terminal queue rejection after panic or untrusted State.
• Panic containment for factory, lifecycle, OnError, and OnCall callbacks.
• Safe ownership reroute for Calls that did not enter a method. A started method error cannot request reroute.
• An already canceled Shutdown starts only the abrupt stop path.
• The conformance coordinator uses Deactivate on Idle after it stops recovery work.
• ROADMAP now marks Batch 3 complete and points to Batch 4.

Verification

The following focused commands passed with 100 runs:

go test ./runtime -run '^(TestActivationStateTransitions|TestCallLaneCloseModeUsesTerminalPrecedence|TestRuntime_TriggerCancellationDoesNotCancelSharedActivation|TestRuntime_CancellationLinearizesAtMethodEntry|TestRuntime_CanceledFirstCallReleasesEmptyCallLane|TestRuntime_RequestedDeactivationPreservesQueuedCallOrder|TestRuntime_FaultWinsOverRequestedDeactivation|TestRuntime_DiscardWinsOverRequestedDeactivation|TestRuntime_DeactivationPanicDoesNotSkipCleanup|TestRuntime_OwnershipLossRejectsQueuedCallsWithoutLocalReactivation|TestRuntime_MethodErrorCannotRequestOwnershipReroute)$' -count=100
go test ./mail -run '^(TestMailbox_CanceledQueuedCallDoesNotEnter|TestMailbox_CallResultSeparatesCallbackErrorFromControlError)$' -count=100
go test . -run '^(TestRuntime_OwnershipChangeReroutesQueuedCall|TestDeactivationReason_ApplicationRequested|TestRequestContext_ActivationUsesRuntimeOwnedContext|TestOnCallPanicDoesNotChangeCallResult|TestBackgroundError_DeactivationPanicIsContained|TestBackgroundError_OnErrorPanicDoesNotStopCleanup|TestInvokeMapsOnActivatePanicToErrPanic|TestRuntime_StopModeRouting)$' -count=100
go test ./examples/shadow -run '^TestConformance_CancelRecoveryReminderClearsScheduleAndState$' -count=100

Additional results:

• go test -race ./mail ./runtime .: exit 0
• make ci: exit 0 on the final commit content
• Final local Call benchmark: 14 allocs/op, 760 B/op, 1097-1188 ns/op across three runs
• Ten compiling targeted mutations failed at their intended behavior assertions.
• Mutation evidence: research/release-0.1.0-batch-3-mutations.md

Changed paths

ROADMAP.md
background_error_test.go
deactivation_reason_test.go
design/conformance-example.md
design/errors.md
design/observability.md
design/release-0.1.0.md
design/request-context.md
design/runtime.md
design/scheduling.md
docs/programming-model.md
docs/release-0.1.0.md
errors_test.go
examples/shadow/conformance_failures_test.go
examples/shadow/domain/recovery.go
forward_test.go
gor.go
gor_test.go
mail/mail.go
mail/mail_test.go
observability_test.go
request_context_test.go
research/release-0.1.0-batch-3-mutations.md
runtime/activation_context.go
runtime/lifecycle_hardening_test.go
runtime/runtime.go
runtime/runtime_test.go
startup_test.go
state.go

This batch was not pushed, and no pull request was opened.

[suraciii]

Completed in the integrated candidate #116: Runtime-owned Activation context, queued Call cancellation, requested and idle deactivation, callback containment, and State-trust failure paths have deterministic tests and mutations. Exact master 0c41f9f644905183d7d4fd8f7efed24e4396bf0d passed local make ci and hosted run https://github.com/suraciii/gor/actions/runs/31504300130.