Model.runtime and declares how that machine is wired to execution topology, transport behavior, and storage layout. This page introduces the L1 layer, explains why it is optional, and maps the declarations you can place inside runtime.
L1 is entirely optional. Removing
runtime from a valid model never makes it invalid. Proofs that required L1 facts simply become unproven; they do not become violations or structural errors.What L1 declares
L1 describes selected qualitative facts about realization:- Transport ordering and grouping for topics
- Subscription delivery, dispatch, and routing
- Request routing into execution pools
- Execution topology and concurrency
- Storage partitioning
serializable isolation is L0, while execution member concurrency is L1.
Proof scope
Every successful proof records whether it consumed L1 facts:
Deleting L1 turns
runtime_dependent proofs into unproven, never into violations. The scope records a dependency, not a weakness. A proof resting on serializable is l0_only and still assumes the database implements it.
Layout under Model.runtime
Routing concept
Routing has two semantic components, independent dimensions rather than alternative modes:Compact runtime skeleton
Topic & Subscription Runtime
Declare transport grouping, ordering, delivery, and dispatch.
Outbox Runtime
Declare partitioning, ordering, and dispatch for outbox consumers.
Routers & Pools
Route requests into pools and declare per-member concurrency.
Storage Layouts
Map logical objects to storage partitions.