mirror of
https://github.com/stablyai/orca.git
synced 2026-11-13 09:27:29 +00:00
Neil
5df115db15
- Directors with an edge read director/edge.json from the relay-control bucket through the shared flag channel: mode on/off/down and rolloutPermille (0..1000). Boot defaults are mode on and the env percent; every cohort decision reads the applied flags. Off empties the cohort and hosts leave normally; down also skips the export at once (reason mode_down). The permille bucket keeps every host of P percent in at P x 10 permille. A control change re-arms the evacuation sweep within 5 s. - A skipped export (120 s outage clock or mode down) removes the host's relay_devices rows before placing it, so revokes made on the edge are never undone; logs a count only. - Evacuation: 100 drains per tick with 10 in flight, each pass starting at a random point of the keys and wrapping around; pages stay 500 rows and an idle pass reads each edge row once. - Fence retries: 56 attempts (last about 25.5 h after the failure), 50 per sweep with 10 in flight; fence_abandoned now carries outcome, cell and epoch like fence_failed.