OptionalauditOptionaldeploymentInfrastructure-verified deployment tag for audit attribution.
The deployment execution fence, read ONCE per pass and BEFORE any CAS
claim, or 'none' for a tick with no database behind it.
REQUIRED, and this is the option the requirement exists for: a fenced pass
must do nothing at all, because claiming a fire it will not run CONSUMES it
— the claim advances nextFireAt — and the fenced runtime then refuses the
start, so the fire is lost rather than deferred. A host that wires the
runtime's fence but forgets this one gets exactly that, and nothing reports
it. See ExecutionFenceWiring.
OptionallimitMax due schedules processed per tick pass. Must be a nonnegative safe integer; zero is an intentional no-op. Default 100.
OptionalnowClock override for tests.
OptionalrunThe deployment run cap. Absent means uncapped.
OptionalsignalThread-targeted agent signal dispatch with a durable target receipt.
A schedule-aware run-start adapter that preserves registered ownership.
OptionalstartRuntime-driven agent start. Absent preserves the guarded skip.
Authoritative target status used after a lost/failed dispatch response.
The schedules store (a D1SchedulesStorage) the tick claims + records over.
The same catalog policy enforced at create/update, rechecked per fire.
Every fire attempt is audited through this (accepted OR skipped/failed). Absent ⇒ no audit.