Description
Source-grounded design review found a potential required-signal loss path: pinned delta aggregators drain/reset state during Collect; an external Producer or callback error can make scheduled collection fail before freezing that result while the ingress stage remains materialized. A later empty delta collection could cover the receipt without exporting its original metric effects. This is a source-chain inference, not an executed reproduction or proof of live loss. It was discovered during TSO-0197.01 (freeze bounded replay-memory design and proof packets); that design selects failure-transactional retention to honor complete first cover. No implementation is commissioned by recording this task, and it must share the parent implementation owner to avoid competing telemetry edits.
Acceptance Criteria
- #1 A deterministic negative reproduction on the exact pre-fix source demonstrates whether a delta ingress effect survives a one-shot post-aggregation collection error; record observed output and eligibility rather than inferring a runtime defect from source alone.
- #2 Required delta effects survive failed callback or external Producer collection and appear in a complete successful scheduled first cover without reentering original application or metric materialization; no empty-result false coverage or implicit loss.
- #3 Successful aggregation semantics, scheduled cadence, immutable retry payloads, both required signal outcomes, explicit permanent-rejection policy and generation-checked retirement remain intact across concurrent ordinary measurements and cancellation.
Definition of Done
- #1 just check passes (the full gate; it is what CI enforces)
- #2 just gen leaves no diff (only if a generated artifact’s inputs changed)
- #3 just –fmt –check passes and every new recipe has a # doc comment and a [group(…)]
Implementation Plan
Loop33 delta lane: deterministic failure reproduction, transactional fix, gate and review.
Implementation Notes
2026-11-01 owner commissioned the deterministic negative reproduction and the failure-transactional fix for loop33.
loop33: deterministic four-case reproduction confirms lost required delta and false receipt eligibility after callback or external Producer failure; independently reproduced and dependency assessment PASS. No production fix; red regression retained privately, not landed. Selected transactional semantic-provider P3 depends on bounded storage/effect prerequisites and W1. Resume with those prerequisites; AC2/3 remain open.
loop33 closeout dependency park reaffirmed: the real pinned-SDK four-case failed-Collect regression is intentionally red, including ordinary measurements between scheduled slots. AC1 reproduction is complete; no production repair landed. Resume with the selected transactional semantic-provider/reset prerequisite after the parent W1 evidence is available. The private red patch is retained and its worktree locked; never land that patch alone or substitute replay, snapshot merging or off-cadence collection.