bug: Fix TOCTOU With Budget Leasing - #87

Open

markovejnovic wants to merge 15 commits into

mainfrom

bug/toctou-budget

Commits on Aug 29, 2026

docs(img): rewrite Img.Mutable moduledoc around the COW layer stack
markovejnovic
committed
2ea9cda
test(budget): pin the admission contracts try_run currently violates
markovejnovic
committed
11272a0
feat(budget): add boot_lease_ttl and restart_grace config
markovejnovic
committed
3b5b8c3
feat(budget): hold capacity as a lease from before a VM boots
markovejnovic
committed
6dba4f4
test(budget): cover drop/2 and the no-lease refusal; fix a vacuous rebind property
markovejnovic
committed
a5f1251
refactor(budget): front leases from the Budget facade, drop dead API
markovejnovic
committed
3c3cf52
fix(node): lease budget before booting a VM, not after
markovejnovic
committed
94d2fa3
fix(node): release the boot lease when start_fun raises
markovejnovic
committed
d08e3b9
test(budget): make the op-sequence id pool unique by construction
markovejnovic
committed
8b453fa
feat(fire_vmm): claim the VM's budget lease from init/1
markovejnovic
committed
fce49a4

Commits on Aug 30, 2026

docs: point budget references at the lease API
markovejnovic
committed
3cf7735
docs: correct TODO.txt code references after the lease API change
markovejnovic
committed
3c53bb6
fix(node): handle a declined VM start so the uid is not leaked
markovejnovic
committed
0f67df2
test(node): pin the mutable-layer release on a declined VM start
markovejnovic
committed
7f8fb72
some cleanup
markovejnovic
committed
7b88918