1.1 KiB
R4.2 P2-B Fleet Order Preservation Repair
P2-C live acceptance exposed a real integration defect in the verified P2-B candidate. The fleet scheduler correctly produced durable cross-scope fairness order, but the integration passed the entire ranked list to the legacy scheduler. The legacy scheduler then applied its own priority / created_at / task_id sort and silently discarded fleet ordering.
The repair preserves the legacy scheduler as the fail-closed security oracle while changing how it is called: one fleet-ranked candidate is presented at a time. A candidate rejected by legacy security/policy advances to the next fleet candidate. A candidate returned by the oracle must have the same task ID as the candidate presented, otherwise execution fails closed.
Task ownership remains unchanged: the original schedule_for_worker/claim_task CAS remains authoritative, and a fleet reservation is still only bound after the claim succeeds.
This repair does not modify FleetScheduler state semantics, capacity, WriterLease, checkpoint, protected refs or Production behavior.