docs(perception): record cross-host clock and control proof

This commit is contained in:
DCCONSTRUCTIONS
2026-09-02 19:46:27 +03:00
parent d7b8989e43
commit d80df61a7e
3 changed files with 140 additions and 6 deletions
@@ -1,8 +1,10 @@
# ADR 0049 — Stream-first full perception profiles
Date: 2026-09-01; updated 2026-09-02 19:00 MSK. Status: stage-1 engineering
baseline complete; stage-2 full graph has authenticated container-network proof.
Cross-host full-graph clock/grant integration, native-host GPU inventory,
Date: 2026-09-01; updated 2026-09-02 19:42 MSK. Status: stage-1 engineering
baseline complete; stage-2 has full graph container-network proof plus authenticated
cross-host grant delivery and bounded clock intervals. Continuous clock readiness is
not yet connected to full-graph freshness. Cross-host full-graph qualification,
native-host GPU inventory,
standalone image and product cutover remain open. This is not physical-live acceptance.
Execution order remains the four stages in
[the ExecPlan](../OBSERVATORY_REALTIME_PROFILES_EXECPLAN.md).
@@ -829,3 +831,20 @@ See [the detailed report](../../experiments/perception/PERCEPTION_STREAM_STAGE2_
Four prior services and automatic clocks restored; transient containers,
networks, lease volumes, keys and grants removed. Ollama/Frigate stay disabled.
Mac8000 and Worker telemetry remain available; no8765 or external deployment.
## Stage 2 increment 14: cross-host clock/control foundation (2026-09-02)
Application-side TLS Poll may deliver only a pending data grant already issued by the
trusted Worker controller. It cannot acquire/renew the local lease, reset/start models,
choose an epoch or cancel. Data admission remains single-use and independently scoped.
Four timestamps bound remote-minus-local offset without equal-path assumptions; recent
intervals are intersected, aged under an explicit rate/error envelope and expire.
Expired/excess/contradictory evidence means unavailable/WAIT, not a wider hidden budget.
CPU-only Mac↔Worker proof delivers both grants and8/8 exact echoes. A2.202s gap retains
the CPU sentinel and lease1, expires the old mapping and resumes with a new input epoch.
Of72 measured observations,60 meet conditional≤5ms; min/median/max uncertainty are
3.883/4.469/27.118ms and readiness changes after warmup. Consequently this increment
does not claim full-graph cross-host freshness and does not cherry-pick a passing sample.
The next full-graph run must consume continuous mapping state and carry uncertainty to
the receiving freshness decision. [Detailed report](../../experiments/perception/PERCEPTION_STREAM_STAGE2_CONTROL_CLOCK_2026-09-02.md).