R3D Direct Persisted Build — 2026-07-16

Result

Persisted build and vacuum now scan the fenced PostgreSQL source snapshot into governed external-sort runs and stream a generation-specific artifact v6 candidate without constructing a complete owned engine. Candidate files use exclusive creation, exact disk reservation, bounded zero-fill preallocation, positioned section writes, fixed-buffer checksum finalization, production load validation, a final source-boundary recheck, and generation compare-and-swap.

The previous generation remains current on scan, run, quota, write, load, source-boundary, or publication failure. Nonpersisted builds retain the owned builder as the backend-local implementation and differential oracle.

Focused Evidence

Gate Exact command Result
Formatting and strict Clippy cd graph && cargo fmt --check && cargo clippy --features "pg17 development" --all-targets -- -D warnings PASS
Direct build and persistence cd graph && cargo test --features "pg17 development" persisted_ PASS: 25 tests
Governed runs cd graph && cargo test --features "pg17 development" build_runs PASS: 11 tests
Persistence validation cd graph && cargo test --features "pg17 development" persistence::tests PASS: 67 tests after candidate fault tests were added
Candidate ownership/faults cd graph && cargo test --features "pg17 development" direct_candidate PASS: quota-before-create, private-failure cleanup, and create-new preservation
PostgreSQL differential cd graph && cargo pgrx test pg17 --features "pg17 development" persisted_direct_build_matches_owned_build_for_public_queries PASS: owned and persisted traversal, indexed filtering, and GQL outputs match

Release Evidence

Gate Exact command Result
Full release gate cd graph && RUN_RSS=1 RUN_BUILD_MEMORY_STRESS=1 ./tests/heavy/run_release_gate.sh PASS: secret, formatting, strict Clippy, rustdoc, contract, 856 Rust tests (1 ignored), 1,128 pgrx tests (1 ignored), fuzz seed, package/install/upgrade, security, backup/restore, concurrency, transaction, recovery, and memory profiles
Synthetic scale full release gate PASS: 50,000-node build in 4,998 ms and representative query in 82 ms
Build residency full release gate PASS: 200,000 nodes and 200,000 relationships at 210 MiB peak RSS
Runtime residency full release gate PASS: 92 MiB peak RSS; production-shaped memory profiles remained between 192 and 268 MiB
Playground differential full release gate PASS: all 40 CSR queries; capped traversal stayed byte-for-byte stable after physical source reordering
Supported PostgreSQL matrix cd graph && RUN_DURABLE_PROJECTION_MATRIX=1 RUN_POSTGRES_SANITIZER=0 ./tests/heavy/run_pg_matrix_docker.sh PASS on PostgreSQL 14, 15, 16, 17, and 18: 860 Rust tests (1 ignored) and 1,132 serialized pgrx tests (1 ignored) per major, the GQL write/isolation profiles, and cross-backend lifecycle, publication-lock, and concurrent relation-identity durable profiles
Independent R3 review raw R3 diff reviewed after the release gate PASS after generation-orphan reservation and typed candidate-error preservation fixes

The matrix test harness runs pgrx cases serially because those integration tests intentionally share PostgreSQL maintenance state. Its container also includes the public artifact inspector used by the publication-lock regression. These are harness contracts, not retries: any failing test or durable profile still fails the matrix immediately.

The full Rust, PostgreSQL, documentation, security, packaging, production resource, and supported-major gates are green for the R3 checkpoint.