Refusal, ownership and diagnostics¶
Failed admission or staging invalidates prior readiness. A fresh per-call token
can publish at most once. A complete 16-byte empty Sequence is written on refusal
only when that exact write was independently admitted. Wrong type, misalignment,
known alias or a body shorter than eight bytes permits no Atom output write.
There is no replay of a previous staged prefix. An atomic AUDIO admission rejects
nested/concurrent runs before foreign reads, diagnostics, DSP or active output
mutation. This admission is not a general CONTROL scheduler: the caller stops and
joins AUDIO and excludes new run admission before connect, activate, deactivate,
restore, diagnostic reads or retirement. A busy check on those methods does not
replace that exclusion. Standard LV2 threadSafeRestore is not advertised.
outputDiagnosticsStopped reports separate attempted/returned native, state
apply and state reflect results, local error, native report and publication count.
An initial code of 1 is a never-returned sentinel; a code is meaningful only when
its returned flag is true. lastNativeOutputStatus retains the last actually
returned native process code. A violating callback throw does not manufacture
a new native status. Returned poison or local corrupt report/staging and caught
runtime exceptions refuse later processing until a fresh instance. Nonpoison
returned errors retain their original values. Native ABI callbacks otherwise
retain their documented nonthrowing ownership obligations.
Whole structural/control/note/time preflight precedes state transfer and DSP. Failures after successful native processing cannot roll back consumed state, controls or DSP history. Reflection or late malformed output refuses publication and uses the independently admitted safe empty output; diagnostics distinguish that from a rejected block before DSP. The reference's transient frame telemetry is a validation oracle and is not persisted Level state.