Retentive state¶
Gap capability: state that survives process restarts — the equivalent of NVRAM-backed retentive memory in classical PLCs.
State that survives process restarts — the equivalent of NVRAM-backed retentive memory in classical PLCs. |
The runtime shall provide a retentive memory abstraction whose declared contents persist unchanged across cooperative process restarts. |
Retentive memory regions shall be backed by a memory-mapped file with a checksum verified at load. |
A retentive-memory checkpoint shall be atomic with respect to process crash — a concurrent crash shall yield either the pre-checkpoint or post-checkpoint contents, never a partial state. |
At startup, the runtime shall report whether retentive state was loaded cleanly, recovered from an incomplete checkpoint (and which version was selected), or initialised from defaults because no prior state existed. |