[omry]

Move pairing and control TLS I/O onto shared bounded carrier credits and a serialized memory-BIO pump. Add a private bidirectional Python/Go streaming peer to exercise fragmentation, coalescing, backpressure, partial writes, and actual-worker ownership during cancellation.

Validation: 1,665 unit tests passed (43 skipped), 61 real native-peer tests passed, Go test/vet passed, Black checked 143 files, and pyrefly reported zero errors. The optional full Python suite retains one Docker-access failure.

---

• -> [arbiter-authentication/3.1.1] Shared bounded carrier and streaming peer #84
• docs: record reviewed authentication design for milestones 3–11 #83

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Refactoring control TLS into a shared streaming pump changes carrier buffering and I/O ownership, which could cause stalled or prematurely rejected exchanges.

Moves pairing and control TLS I/O onto shared bounded carrier credits and a serialized memory-BIO pump, and adds a private bidirectional Python/Go streaming peer to exercise fragmentation, coalescing, backpressure, partial writes, and worker ownership during cancellation. No issues found.

Verification

Rules No rules evaluated

Functional validation Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source}