AdeAtlas
Invariants / DC-PUMP-09

DC-PUMP-09

DC derived enforced

No bootstrap spin. Reconnect applies ONLY to a session that was established and then lost. An unparseable --peer, or a FIRST dial that fails, keeps the pre-slice semantics exactly: logged-and-dropped, the lane ends, the feed ends, the relay loop halts clean. An unreachable peer must never become an infinite boot retry.

Source

docs/clusters/LIVE-WIRE-LIVENESS/SLICE-S1-keepalive-under-backpressure.md + docs/clusters/LIVE-WIRE-LIVENESS/SLICE-S2-live-feed-reconnect.md (INV-WL-8)

Enforcement trace

Code

Tests 2

  • first_dial_failure_still_ends_the_feed_no_boot_spin
  • spawn_live_wire_pump_source_with_no_usable_peer_yields_ended_feed

CI 1

Cross-references

DC-PUMP-08DC-NODE-13

Evidence notes

Preserves the pre-slice C3 honest-scope behaviour (an unusable peer is never fatal and never a fabricated address) while adding recovery for established sessions only. SUPPORTING live evidence only (never the reason for enforcement): a sustained preview run 2026-08-01 (~/.cardano-live1/ade-1376-s1s2.log) held the live tip for 8h+ with 1400 consecutive keep-alive round trips, max observed inter-line stall 20.0s (the cadence itself) against the peers ~97s limit, and recovered a deliberate docker restart of cardano-node-preview in 1m48s. Enforcement rests on the named tests + ci/ci_check_wire_liveness.sh, not on this run.