Spiral/cyc 20260919 ttz7 c 17 power loss recovery

.spiral/cycles/CYC-20260919-TTZ7C-17.ttl

@@ -0,0 +1,22 @@
+@prefix sd: <https://muze.nl/ns/spiral-developer#> .
+@prefix dcterms: <http://purl.org/dc/terms/> .
+@prefix project: <https://github.com/simplyedit/simplystore/spiral#> .
+
+project:CYC-20260919-TTZ7C-17
+    a sd:Cycle ;
+    dcterms:identifier "CYC-20260919-TTZ7C-17" ;
+    sd:repositoryPath ".spiral/cycles/CYC-20260919-TTZ7C-17.md" ;
+    sd:status sd:Active ;
+    sd:derivedFrom [
+        a sd:ArtifactReference ;
+        sd:artifact project:REQ-20260919-TTZ7C-20 ;
+        sd:gitCommit "b1f15b5964986a9e3cab9025f08829b88294974c"
+    ] ;
+    sd:constrainedBy [
+        a sd:ArtifactReference ;
+        sd:artifact project:SRC-20260919-TTZ7C-18 ;
+        sd:gitCommit "8a42ed15242c174a296eb90ed4a35b3354d79e8d"
+    ] ;
+    sd:changeCausedBy [ a sd:ArtifactReference ;
+        sd:artifact project:SRC-20260919-TTZ7C-18 ;
+        sd:gitCommit "9fecb10ba1b58c79779394130e1c5cf500206ea9" ] .

.spiral/designs/DES-20260919-TTZ7C-21.md

@@ -0,0 +1,69 @@
+# Design: Power-Loss Baseline Harness
+
+## Purpose and boundary
+
+Implement the first work item of CYC-20260919-TTZ7C-17: discriminating baseline
+tests and a failure matrix before persistence/recovery fixes. The design follows
+REQ-20260919-TTZ7C-20. Product behavior remains unchanged in this slice.
+
+Use actual server/worker writes with a test-only Node preload. Trace completed
+file operations and syncs outside the disposable store; capture synchronized
+bytes for the small fixture logs. Independently record client-issued commands,
+observed acceptance, and observed completion. The expected state comes from
+fixture semantics and external observations, never solely from damaged logs.
+
+The preload is explicitly enabled only by a test configuration and is inherited
+by worker threads. Scope interception to the disposable store. Capture filesystem
+function references before wrapping so tracing cannot recurse. Controls must
+prove that instrumentation observes real appends, file syncs, and renames.
+
+## Fault model
+
+- Trace file sync and namespace publication separately. After abrupt process
+  termination, remove a newly created/renamed filename only when its trace shows
+  no subsequent directory sync. Such image edits model a permitted persistence
+  outcome; they are not physical power cuts or measured filesystem behavior.
+- At an explicit pause before a log sync, restore its last successfully synced
+  byte snapshot. Only unsynced data may be lost in this model. Preserve external
+  acknowledgments and side-effect witnesses outside the crash image.
+- Inject I/O errors before a selected operation, and a real partial callback
+  write where applicable. Assert that fault injection was actually reached.
+- Torn/corrupt durable artifacts and synthetic recovery-status combinations are
+  separate adversarial/policy fixtures. Do not present arbitrary mutation of
+  previously synced bytes as a valid cache-loss model.
+- A controlled append-completion gate can exercise concurrent acceptance order
+  without relying on timing races. Test that subsequent recovery does not derive
+  its expected order from the same log it is checking.
+
+## Reporting and tests
+
+Ordinary assertions verify setup, interception, completed operations, observed
+responses, and current classifications. Known requirement violations appear in
+nested tests marked TODO. `SIMPLYSTORE_BASELINE_STRICT=1` removes only those TODO
+annotations, exposing reproducible failing invariant assertions with a nonzero
+exit. A fixture/harness failure outside that final invariant remains a real
+failure in normal baseline mode. Remove TODO annotations as later fixes earn it.
+
+Cover durable acceptance/completion, missing directory entries, derived index
+loss, interrupted status append, explicit sync/rename/write failures, automatic
+replay with secondary effects, later-dataset rerun restrictions, command input
+completeness, and concurrent queue order. Name untested matrix rows explicitly;
+this baseline is not acceptance of the whole cycle or administrator tooling.
+
+Add an isolated `test:power-loss` command and a human-readable matrix with test
+names, expected/current results, and limitations. Existing suites stay separate
+and are run as regression evidence. Only new test files, package test scripts,
+and Spiral/documentation artifacts belong to this implementation slice.
+
+## Independence and limits
+
+External observations and side-effect witnesses survive every modeled cut and
+are not reconstructed from the store under test. Fixture command behavior is
+simple and known. The OD-JSONTag parser remains shared for reading actual bytes;
+compare its output against independently expected values/order.
+
+The trace covers the explicit filesystem APIs used by these fixtures, not all
+Node/native/custom-module I/O. It cannot prove hardware flush honesty, torn-sector
+semantics, mount behavior, cross-process writer exclusion, consistent backups,
+or full administration/rebuild workflows. A disposable block-level exercise and
+the remaining P1-P12 work are still required later in the active cycle.

.spiral/designs/DES-20260919-TTZ7C-21.ttl

@@ -0,0 +1,11 @@
+@prefix sd: <https://muze.nl/ns/spiral-developer#> .
+@prefix dcterms: <http://purl.org/dc/terms/> .
+@prefix project: <https://github.com/simplyedit/simplystore/spiral#> .
+
+project:DES-20260919-TTZ7C-21 a sd:Design ;
+    dcterms:identifier "DES-20260919-TTZ7C-21" ;
+    sd:repositoryPath ".spiral/designs/DES-20260919-TTZ7C-21.md" ;
+    sd:status sd:Active ;
+    sd:satisfies [ a sd:ArtifactReference ;
+        sd:artifact project:REQ-20260919-TTZ7C-20 ;
+        sd:gitCommit "b1f15b5964986a9e3cab9025f08829b88294974c" ] .