feat: prototype allocator-level OOM protection (OomGuard breaker + cooperative real-usage accounting)#4582

Draft

andygrove wants to merge 24 commits into

apache:mainfrom

andygrove:oom-guard-circuit-breaker

Commits on Jun 3, 2026

feat: add oom-guard feature and accounting helpers
andygrove
committed
refactor: feature-gate oom_guard module and harden should_trip
andygrove
committed
feat: oom-guard process globals, arming, and enforcement
andygrove
committed
feat: wrap global allocator with AccountingAllocator under oom-guard
andygrove
committed
docs: document oom-guard allocator reentrancy and cast safety
andygrove
committed
feat: stamp query-worker threads and arm oom-guard from config
andygrove
committed
refactor: name memoryGuard config keys and warn on zero limit
andygrove
committed
feat: map OomGuardPanic to ResourcesExhausted at JNI boundaries
andygrove
committed
refactor: share oom-guard error message and harden panic recovery
andygrove
committed
feat: register spark.comet.exec.memoryGuard configs
andygrove
committed
docs: clarify memoryGuard config descriptions
andygrove
committed
test: oom-guard trips on a real over-budget allocation
andygrove
committed
fix: map OomGuardPanic on the spawned-path consumer thread
andygrove
committed
refactor: consolidate oom-guard panic mapping and simplify allocator cfg
andygrove
committed
fix: avoid realloc use-after-free and serialize guard panics in OomGuard [skip ci]
andygrove
committed

Commits on Jun 20, 2026