Record

UD-S9

Status

in force

Built

partly built

Decided

2026-10-01 by the user

It cannot crash: fix the actual causes; durability before effect

“Ensure it cannot crash at all; fix the actual issue”: the crash causes are eliminated at their roots (no uncaught exception, bounded memory, supervised workers), and consequential events are durable BEFORE their effects (intent before effect); only streaming detail is batched. Power loss and SIGKILL cannot be prevented by code, and the records say so. The defaults are UD-S9b. Refines UR-01 (no band-aids) and UR-08. SCALE-CR1 implemented fixes for the measured crash causes; the final fixer snapshot still owes independent review (TASKS: RECOVERY-POSTFIX-REVIEW). Intent before effect is SCALE-IE’s; no claim of complete crash prevention is made.