full-stack-restart-fragility

Status: OUT

Both the physical storage layer and the logical transaction layer are independently fragile under restart, creating a full-stack restart hazard: the B-tree's durability model protects user data pages but not structural metadata (height, sibling chain, free list), while the transaction system's isolation model depends on monotonic counters and abort-as-status-change semantics that have no persistence backing.

Justifications

Independent restart fragility at the physical-page and logical-transaction layers means a single process restart can simultaneously corrupt both the storage structure and the isolation guarantees.

Depends on (SL): btree-durability-protects-data-not-structure, transaction-isolation-fragile-under-restart

JSON