G1
G1 — Determinism
Identical inputs → identical outputs
Given the same rack state, workload configuration, and mode, the scheduler produces bitwise-identical EU assignments on every run. No hidden entropy in the scheduling path.
Score(rack) = temp×0.6 + debt×0.4 + cpu×0.1
Pure function. No randomness in decision path.
Verified · every pulse
G2
G2 — Exhaustiveness
Each input processed exactly once
Every execution unit dispatched to a rack is tracked individually. The audit log guarantees no EU is double-processed or silently dropped. Rack IDs within a pulse are deduplicated at the scheduler level.
∀ EU ∈ pulse : rackId is unique
Duplicate assignment → hard rejection
Verified · per-pulse dedup
G3
G3 — Bounded Resource Use
CPU, memory, I/O, power, thermal — all capped
Every resource has an absolute ceiling enforced at assignment time. The scheduler filters racks that would exceed any cap before assigning work — not after. There is no unbounded retry storm path.
cpu ≤ 100% · temp ≤ 95°C · power ≤ 25kW
thermalDebt < 50 before assignment
Verified · all 24 racks
G4
G4 — Linear Scaling
Cost scales linearly with input size
The scheduler is O(n) in rack count. Filter → sort → slice. No consensus protocol, no distributed lock, no exponential retry. Scheduling overhead at 24 racks is under 1ms per pulse on commodity hardware.
T(n) = O(n) where n = rack count
<1ms @ 24 racks · <5ms @ 256 racks
Verified · benchmarked
G5
G5 — Replayability
Any execution replayable from genesis
The EU audit log is append-only and deterministic. Any system state can be reconstructed by replaying the log from pulse 1. This enables post-mortem analysis, compliance verification, and full session recovery.
State(t) = reduce(log[0..t], initialState)
Log is immutable. Replay is exact.
Live in Replay tab
G6
G6 — Explainability
Every scheduling decision has a reason record
Each EU is created with a structured reason record capturing the exact values used in the scheduling decision: rack, thermal headroom, CPU budget, thermal debt, and the decision label. No opaque global state.
reason = {rack, thermalHeadroom, cpuBudget,
thermalDebt, decision} · every EU
Verified · Audit Log tab