@push.rocks/smartnftables 2.0.0 → 2.2.0

package/changelog.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2026-09-15 - 2.2.0
+
+### Features
+
+- Add exact transition release with full boot and namespace binding, terminal retry and joined cleanup, including recovery after policy interfaces disappear.
+
+## 2026-09-15 - 2.1.0
+
+### Features
+
+- Expose a retained failure signal for unexpected policy process loss, ambiguous operations and unconfirmed cleanup while preserving exact recovery and retention semantics.
+
 ## 2026-09-14 - 2.0.0
 
 ### Breaking Changes

package/dist_rust/smartnftables_linux_amd64_musl.tsrust-build.json

@@ -1,12 +1,12 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "f87173a416bf8ff6aad2d59dcb8534bbc720325b51a78134ed84c758f1944881",
+  "binarySha256": "d997150e9cde38e1ba2c93c5b894c367f9b562a31291ee568ccd1e4a54034b61",
   "buildInfo": {
     "projectName": "@push.rocks/smartnftables",
-    "projectVersion": "2.0.0",
-    "gitCommit": "baace9c25621df66a88552dcd1d2f5e63c3e477f",
+    "projectVersion": "2.2.0",
+    "gitCommit": "32e9f40066053a15f32031e796e3151140e98eca",
     "gitDirty": false,
-    "builtAt": "2026-09-14T22:07:32.392Z",
+    "builtAt": "2026-09-15T06:33:44.972Z",
     "tsrustVersion": "1.13.0",
     "binary": "smartnftables",
     "target": "linux_amd64_musl"

package/dist_rust/smartnftables_linux_arm64_musl.tsrust-build.json

@@ -1,12 +1,12 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "206ed227d6c78079f1240f3a70fd2cf305258e84682b2affd97b92fcf3509b5a",
+  "binarySha256": "14a625bdb893667872dad6b339aa77f64c6d7e538158bff3e4b92e5684d70e61",
   "buildInfo": {
     "projectName": "@push.rocks/smartnftables",
-    "projectVersion": "2.0.0",
-    "gitCommit": "baace9c25621df66a88552dcd1d2f5e63c3e477f",
+    "projectVersion": "2.2.0",
+    "gitCommit": "32e9f40066053a15f32031e796e3151140e98eca",
     "gitDirty": false,
-    "builtAt": "2026-09-14T22:07:32.519Z",
+    "builtAt": "2026-09-15T06:33:49.548Z",
     "tsrustVersion": "1.13.0",
     "binary": "smartnftables",
     "target": "linux_arm64_musl"

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartnftables',
-    version: '2.0.0',
+    version: '2.2.0',
     description: 'A TypeScript module for managing nftables rules including NAT, firewall, and rate limiting with a high-level API.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSwyQkFBMkI7SUFDakMsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLG1IQUFtSDtDQUNqSSxDQUFBIn0=

package/dist_ts/classes.managednftables.d.ts

@@ -1,4 +1,4 @@
-import type { IManagedNftOptions, IManagedNftPolicy, IManagedNftTransition, IAppliedManagedNftPolicy, IPreparedManagedNftPolicy, IManagedNftStatus, TManagedNftPolicy } from './managed.types.js';
+import type { IManagedNftOptions, IManagedNftPolicy, IManagedNftTransition, IAppliedManagedNftPolicy, IPreparedManagedNftPolicy, IManagedNftStatus, IManagedNftTransitionRelease, TManagedNftPolicy } from './managed.types.js';
 export declare class ManagedNftablesError extends Error {
     readonly code: string;
     constructor(code: string);
@@ -10,6 +10,10 @@ export declare class ManagedNftables<TPolicy extends TManagedNftPolicy = IManage
     #private;
     constructor(options: IManagedNftOptions);
     get state(): string;
+    /** Retained loss of owner confidence, including idle process death. It never
+     * resets or proves withdrawal/deletion; explicit recovery and joined close
+     * remain the caller's responsibility. Orderly close does not abort it. */
+    get failureSignal(): AbortSignal;
     /** Starts only the compiler/IPC owner. The returned idle status is not enforcement. */
     start(): Promise<IManagedNftStatus<TPolicy>>;
     prepare(policy: TPolicy): Promise<IPreparedManagedNftPolicy<TPolicy>>;
@@ -18,6 +22,14 @@ export declare class ManagedNftables<TPolicy extends TManagedNftPolicy = IManage
     release(expected: IAppliedManagedNftPolicy<TPolicy>): Promise<{
         released: true;
     }>;
+    /** Terminal release when an apply acknowledgement was lost. Retain the full
+     * original identity and transition first. The native owner accepts only an
+     * absent table or the exact previous/target graph; it never recreates policy
+     * or requires surviving interfaces. Exact retries and inspection remain
+     * available; close() retries admitted cleanup, closeRetaining() only joins. */
+    releaseTransition(request: IManagedNftTransitionRelease<TPolicy>): Promise<{
+        released: true;
+    }>;
     /** Permanently selects retention cleanup, verifies exact PERSIST retention, and
      * joins the native process. Retain the full applied value before this call.
      * After any failure close() only terminates; it never deletes the table. */

package/dist_ts/classes.managednftables.js

@@ -67,6 +67,9 @@ export class ManagedNftables {
     #retaining = false;
     #detachExpected = null;
     #detach = null;
+    #transitionRelease = null;
+    #failure = new AbortController();
+    #processLost = false;
     constructor(options) {
         this.#options = snapshot(options);
         if (Object.keys(this.#options).some((key) => !['ownerId', 'instanceId', 'tableName', 'binaryPath', 'networkNamespaceFd'].includes(key))
@@ -81,6 +84,16 @@ export class ManagedNftables {
             throw new ManagedNftablesError('INVALID');
     }
     get state() { return this.#state; }
+    /** Retained loss of owner confidence, including idle process death. It never
+     * resets or proves withdrawal/deletion; explicit recovery and joined close
+     * remain the caller's responsibility. Orderly close does not abort it. */
+    get failureSignal() { return this.#failure.signal; }
+    #fail() {
+        if (this.#state !== 'closing')
+            this.#state = 'failed-owned';
+        if (!this.#failure.signal.aborted)
+            this.#failure.abort(new ManagedNftablesError('OWNER_LOST'));
+    }
     /** Starts only the compiler/IPC owner. The returned idle status is not enforcement. */
     start() {
         if (this.#state !== 'new' || this.#retaining)
@@ -97,11 +110,12 @@ export class ManagedNftables {
                 cliArgs: ['--management', ...(this.#options.networkNamespaceFd === undefined ? [] : ['--network-namespace-fd', '3'])],
                 inheritedFileDescriptors: this.#options.networkNamespaceFd === undefined ? undefined : [this.#options.networkNamespaceFd],
                 readyTimeoutMs: 3000, requestTimeoutMs: 30_000, maxPayloadSize: 262_144,
-                maxPendingRequestsByMethod: { preparePolicy: 1, openOwner: 1, reconcilePolicy: 1, inspectPolicy: 1, releasePolicy: 1, detachPolicy: 1, closeOwner: 1 },
+                maxPendingRequestsByMethod: { preparePolicy: 1, openOwner: 1, reconcilePolicy: 1, inspectPolicy: 1, releasePolicy: 1, releasePolicyTransition: 1, detachPolicy: 1, closeOwner: 1 },
             });
             this.#bridge.on('exit', () => {
+                this.#processLost = true;
                 if (!['closing', 'stopped'].includes(this.#state))
-                    this.#state = 'failed-owned';
+                    this.#fail();
             });
             if (!await this.#bridge.spawn())
                 throw new ManagedNftablesError('UNAVAILABLE');
@@ -112,7 +126,7 @@ export class ManagedNftables {
             this.#state = 'ready';
             return status;
         })();
-        return this.#track(work);
+        return this.#track(work, 'openOwner');
     }
     prepare(policy) {
         return this.#invoke('preparePolicy', policy);
@@ -124,11 +138,19 @@ export class ManagedNftables {
     release(expected) {
         return this.#invoke('releasePolicy', expected);
     }
+    /** Terminal release when an apply acknowledgement was lost. Retain the full
+     * original identity and transition first. The native owner accepts only an
+     * absent table or the exact previous/target graph; it never recreates policy
+     * or requires surviving interfaces. Exact retries and inspection remain
+     * available; close() retries admitted cleanup, closeRetaining() only joins. */
+    releaseTransition(request) {
+        return this.#invoke('releasePolicyTransition', request);
+    }
     /** Permanently selects retention cleanup, verifies exact PERSIST retention, and
      * joins the native process. Retain the full applied value before this call.
      * After any failure close() only terminates; it never deletes the table. */
     detach(expected) {
-        if (this.#closeRetainingSelected || this.#closeMode === 'delete')
+        if (this.#closeRetainingSelected || this.#closeMode === 'delete' || this.#transitionRelease)
             return Promise.reject(new ManagedNftablesError('UNAVAILABLE'));
         this.#retaining = true;
         let captured;
@@ -151,7 +173,7 @@ export class ManagedNftables {
                 throw new ManagedNftablesError('PROTOCOL');
             this.#nativeMayOwn = false;
             return result;
-        }));
+        }), 'detachPolicy');
         const detached = (async () => { const result = await work; await this.close(); return result; })();
         this.#detach = detached;
         void detached.catch(() => { this.#detach = null; });
@@ -183,8 +205,13 @@ export class ManagedNftables {
             await this.#work?.catch(() => undefined);
             if (this.#bridge) {
                 if (this.#nativeMayOwn && !retaining) {
-                    const result = await this.#bridge.sendCommand('closeOwner', {});
-                    if (result.released !== true)
+                    // Even native validation may have rejected before selecting its own
+                    // terminal intent. Retry this exact request; generic close must not
+                    // delete an earlier applied graph outside the requested transition.
+                    const result = this.#transitionRelease
+                        ? await this.#bridge.sendCommand('releasePolicyTransition', this.#transitionRelease.request)
+                        : await this.#bridge.sendCommand('closeOwner', {});
+                    if (result.released !== true || this.#transitionRelease && Object.keys(result).length !== 1)
                         throw new ManagedNftablesError('PROTOCOL');
                 }
                 await this.#bridge.terminate({ gracePeriodMs: 1000 });
@@ -194,6 +221,7 @@ export class ManagedNftables {
         })().catch(() => {
             this.#state = 'failed-owned';
             this.#close = null;
+            this.#fail();
             throw new ManagedNftablesError('CLEANUP_UNCONFIRMED');
         });
         return this.#close;
@@ -208,23 +236,48 @@ export class ManagedNftables {
         catch {
             return Promise.reject(new ManagedNftablesError('INVALID'));
         }
-        if (method === 'reconcilePolicy' || method === 'releasePolicy')
+        if (this.#transitionRelease && (method !== 'inspectPolicy' && method !== 'releasePolicyTransition'
+            || method === 'releasePolicyTransition' && !plugins.util.isDeepStrictEqual(this.#transitionRelease.request, captured))) {
+            return Promise.reject(new ManagedNftablesError('CONFLICT'));
+        }
+        if (method === 'releasePolicyTransition')
+            this.#transitionRelease = { request: captured };
+        if (method === 'reconcilePolicy' || method === 'releasePolicy' || method === 'releasePolicyTransition')
             this.#nativeMayOwn = true;
         return this.#track(this.#bridge.sendCommand(method, captured).then((result) => {
             const capturedResult = snapshot(result);
-            if (method === 'releasePolicy')
+            if (method === 'releasePolicy' || method === 'releasePolicyTransition') {
+                if (method === 'releasePolicyTransition' && (capturedResult?.released !== true
+                    || Object.keys(capturedResult).length !== 1))
+                    throw new ManagedNftablesError('PROTOCOL');
                 this.#nativeMayOwn = false;
-            if (this.#state !== 'closing' && (method === 'reconcilePolicy' || method === 'releasePolicy'
-                || method === 'inspectPolicy' && capturedResult.error === null))
+            }
+            if (method === 'inspectPolicy') {
+                const status = capturedResult;
+                if (status.state === 'failed-owned' || status.error !== null)
+                    this.#fail();
+            }
+            if (!this.#processLost && this.#state !== 'closing' && (method === 'reconcilePolicy' || method === 'releasePolicy' || method === 'releasePolicyTransition'
+                || method === 'inspectPolicy' && capturedResult.error === null
+                    && capturedResult.state !== 'failed-owned'))
                 this.#state = 'ready';
             return capturedResult;
-        }));
+        }), method);
     }
-    #track(work) {
+    #track(work, method) {
         const owned = work.catch((error) => {
             if (this.#state !== 'closing')
                 this.#state = 'failed-owned';
             const code = error instanceof plugins.smartrust.RustBridgeRequestError ? error.responseErrorCode : undefined;
+            // Only a native compiler rejection or explicit INVALID response proves
+            // effect-free validation. Other native errors can follow lost ownership
+            // or admitted kernel work. Recovery stays available; confidence is lost.
+            const validation = error instanceof plugins.smartrust.RustBridgeRequestError
+                && error.code === 'ERR_RUST_BRIDGE_REQUEST_RUST_RESPONSE'
+                && (method === 'preparePolicy' || code === 'INVALID');
+            if (!validation && (this.#state !== 'closing'
+                || ['reconcilePolicy', 'releasePolicy', 'releasePolicyTransition', 'detachPolicy'].includes(method)))
+                this.#fail();
             throw new ManagedNftablesError(typeof code === 'string' && /^[A-Z_]{1,64}$/.test(code) ? code : 'UNAVAILABLE');
         });
         this.#work = owned;
@@ -232,4 +285,4 @@ export class ManagedNftables {
         return owned;
     }
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/managed.types.d.ts

@@ -51,6 +51,13 @@ export interface IManagedNftTransition<TPolicy extends TManagedNftPolicy = IMana
     previous: IAppliedManagedNftPolicy<TPolicy> | null;
     target: IPreparedManagedNftPolicy<TPolicy>;
 }
+/** Persist the original boot/namespace identity and full transition before cleanup.
+ * This releases only its exact owned table; it does not prove packet drain or
+ * authorize address reuse. Surviving policy interfaces are not required. */
+export interface IManagedNftTransitionRelease<TPolicy extends TManagedNftPolicy = IManagedNftPolicy> {
+    identity: IManagedNftIdentity;
+    transition: IManagedNftTransition<TPolicy>;
+}
 export interface IManagedNftStatus<TPolicy extends TManagedNftPolicy = IManagedNftPolicy> {
     identity: IManagedNftIdentity;
     state: 'idle' | 'applied' | 'failed-owned' | 'released' | 'retained';
@@ -96,6 +103,12 @@ export type TManagedNftCommands<TPolicy extends TManagedNftPolicy = IManagedNftP
             released: true;
         };
     };
+    releasePolicyTransition: {
+        params: IManagedNftTransitionRelease<TPolicy>;
+        result: {
+            released: true;
+        };
+    };
     detachPolicy: {
         params: IAppliedManagedNftPolicy<TPolicy>;
         result: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@push.rocks/smartnftables",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "private": false,
   "description": "A TypeScript module for managing nftables rules including NAT, firewall, and rate limiting with a high-level API.",
   "main": "dist_ts/index.js",

package/readme.md

@@ -109,10 +109,12 @@ grants remain outstanding.
 | Method | Behavior |
 | --- | --- |
 | `start()` | Starts one private native process and returns idle status. |
+| `failureSignal` | Stable per-instance AbortSignal for lost owner confidence, including an unexpected idle process exit. It never resets or confirms cleanup. |
 | `prepare(policy)` | Validates, canonicalizes and hashes an inert complete policy without kernel writes. |
 | `reconcile({ previous, target })` | Creates or replaces the entire policy in one kernel transaction. `previous` is null initially, otherwise the full prior applied result. |
 | `inspect()` | Reads the current owned graph and reports `enforced`, pending intent and a bounded error code. |
 | `release(applied)` | Verifies the exact retained graph and confirms deletion; repeats are idempotent. |
+| `releaseTransition({ identity, transition })` | Selects terminal cleanup using the original full identity and transition when the applied result is unavailable. Accepts absence or deletes the exact previous/target graph without requiring surviving interfaces. |
 | `detach(applied)` | Selects terminal retention, verifies the same graph with PERSIST-only flags after dropping socket ownership, then joins the native process. Returns `{ detached: true }`; retain the full applied result. |
 | `closeRetaining()` | Stops command admission, joins admitted operations and terminates the native process without requesting deletion or confirming retention. Use when the exact applied result is unavailable. |
 | `close()` | Stops command admission, joins admitted policy operations, confirms owned-table deletion unless retention was selected, then joins the native process. Failure retains the owner for explicit recovery. |
@@ -156,6 +158,22 @@ invalidates the old boot receipt; the caller must fence its old link/workload
 lifecycle before starting a new owner instance. Cleanup failures and uncertain
 operations must not be reported as successful release or used to transfer authority.
 
+Subscribe to `failureSignal` before starting or admitting policy work, and check
+`failureSignal.aborted` when attaching to an existing instance. Unexpected child
+exit, ambiguous operation failures, native inspection reporting failed ownership,
+and unconfirmed cleanup abort the signal once with `ManagedNftablesError` code
+`OWNER_LOST`. Local input rejection, effect-free native compiler validation and
+native `INVALID` responses do not abort it. Other native errors can occur after
+kernel effects or ownership loss and conservatively abort it. Successful orderly
+close, including a cancelled startup, does not signal an unexpected failure;
+ambiguous mutations still signal loss while close is draining them.
+
+The caller must fence packet admission on loss. Recovery operations and exact
+retries remain available as documented, but successful recovery never resets the
+signal. It does not monitor foreign kernel changes while idle or prove policy
+withdrawal: PERSIST policy can remain after process death. Still await the chosen
+joined cleanup method and retain unresolved policy/allocation authority.
+
 For an orderly restart that must preserve policy, persist the complete applied
 result and call `await owner.detach(applied)` before calling `close()`. The native
 operation validates the exact receipt, graph, interfaces, boot and namespace. It
@@ -185,6 +203,35 @@ may have left no graph; a lost reply may have left the original or target graph.
 Keep the complete original transition durably and recover it through a fresh owner
 with identical options. Never fabricate an applied receipt to request detachment.
 
+When cleanup is required instead of recovering enforcement, persist a
+`IManagedNftTransitionRelease` containing the identity returned by the original
+`start()` and the full original transition. After fencing workload packet
+admission and joining the old owner, start a fresh owner with the same options:
+
+```typescript
+// Both values come from the caller's durable journal, before the lost apply ACK.
+const cleanup = { identity: originalIdentity, transition: originalTransition };
+await recoveryOwner.releaseTransition(cleanup);
+await recoveryOwner.close();
+```
+
+`releaseTransition()` validates the original boot and namespace, canonical target,
+complete previous result when present, table identity and entire rule graph. It
+accepts an absent table, the previous graph, or the target graph; it never creates
+or replaces policy. Deleted or changed interfaces do not prevent this cleanup.
+Orphan adoption checks the graph before and after claiming OWNER, binds the prior
+or already-observed handle, and rejects another live owner. Deletion uses the exact
+handle and a generation-fenced batch, followed by an absence check.
+
+Once admitted, only that captured cleanup body may be retried. Other policy writes,
+preparation and detachment reject; inspection never claims enforcement. An ordinary
+`close()` retries the selected cleanup before joining the child. `closeRetaining()`
+only joins, allowing a fresh process to retry the durably retained cleanup after
+an ambiguous acknowledgement. Local inert-input or busy rejection does not select
+cleanup. A successful release acknowledges that table operation at observation
+time, including an exact retry after a lost delete ACK. It does not prove packet
+drain, clear conntrack, release allocations, or cross a changed boot/namespace.
+
 After `closeRetaining()`, all policy commands, including `detach()`, reject.
 Concurrent cleanup calls share the same join. A failed join keeps the native
 owner and retention choice for retry through `closeRetaining()` or `close()`.

package/rust/src/main.rs

@@ -91,6 +91,10 @@ fn dispatch(owner: &mut Option<owner::Owner>, request: Request) -> Result<serde_
                 .release(decode(request.params)?)?;
             Ok(serde_json::json!({"released":true}))
         }
+        "releasePolicyTransition" => {
+            owner.as_mut().ok_or(Error::Conflict)?.release_transition(decode(request.params)?)?;
+            Ok(serde_json::json!({"released":true}))
+        }
         "detachPolicy" => {
             owner.as_mut().ok_or(Error::Conflict)?.detach(decode(request.params)?)?;
             Ok(serde_json::json!({"detached":true}))

package/rust/src/owner.detach.rs

@@ -5,7 +5,7 @@ impl Owner {
     /// orphan after an ACK was lost, including through a fresh native process.
     pub fn detach(&mut self, expected: Applied) -> Result<()> {
         self.validate_receipt(&expected)?;
-        if self.released || self.pending.is_some() {
+        if self.released || self.pending.is_some() || self.transition_release.is_some() {
             return Err(Error::Conflict);
         }
         if let Some(retention) = &self.retention {

package/rust/src/owner.rs

@@ -44,6 +44,12 @@ pub struct Transition {
     pub previous: Option<Applied>,
     pub target: Prepared,
 }
+#[derive(Clone, Debug, Deserialize, Serialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase", deny_unknown_fields)]
+pub struct TransitionRelease {
+    pub identity: Identity,
+    pub transition: Transition,
+}
 #[derive(Clone, Debug, Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct Status {
@@ -69,6 +75,7 @@ pub struct Owner {
     error: Option<Error>,
     released: bool,
     retention: Option<Retention>,
+    transition_release: Option<TransitionRelease>,
 }
 
 struct Retention {
@@ -78,6 +85,8 @@ struct Retention {
 
 #[path = "owner.detach.rs"]
 mod detach;
+#[path = "owner.transitionrelease.rs"]
+mod transitionrelease;
 
 pub(crate) fn context() -> Result<(String, String, String)> {
     let boot = std::fs::read_to_string("/proc/sys/kernel/random/boot_id")
@@ -164,6 +173,7 @@ impl Owner {
             error: None,
             released: false,
             retention: None,
+            transition_release: None,
         })
     }
     fn socket(&mut self) -> Result<&mut Socket> {
@@ -360,7 +370,7 @@ impl Owner {
         })
     }
     pub fn reconcile(&mut self, transition: Transition) -> Result<Applied> {
-        if self.released || self.retention.is_some() {
+        if self.released || self.retention.is_some() || self.transition_release.is_some() {
             return Err(Error::Conflict);
         }
         transition.target.validate()?;
@@ -463,6 +473,9 @@ impl Owner {
         self.applied(&graph, transition.target.clone())
     }
     pub fn inspect(&mut self) -> Status {
+        if self.transition_release.is_some() {
+            return self.inspect_transition_release();
+        }
         if self.retention.is_some() {
             return self.inspect_retained();
         }
@@ -503,7 +516,7 @@ impl Owner {
         }
     }
     pub fn release(&mut self, expected: Applied) -> Result<()> {
-        if self.retention.is_some() {
+        if self.retention.is_some() || self.transition_release.is_some() {
             return Err(Error::Conflict);
         }
         self.validate_receipt(&expected)?;
@@ -561,6 +574,9 @@ impl Owner {
         }
     }
     pub fn close(&mut self) -> Result<()> {
+        if let Some(request) = self.transition_release.clone() {
+            return self.release_transition(request);
+        }
         if self.retention.is_some() {
             return Err(Error::Conflict);
         }

package/rust/src/owner.transitionrelease.rs

@@ -0,0 +1,107 @@
+use super::*;
+
+impl Owner {
+    /// Terminal cleanup of an exact caller-retained transition. Unlike reconcile,
+    /// this never creates/replaces policy and does not require surviving interfaces.
+    pub fn release_transition(&mut self, request: TransitionRelease) -> Result<()> {
+        if self.retention.is_some() || request.identity != self.identity {
+            return Err(Error::Conflict);
+        }
+        request.transition.target.validate()?;
+        if let Some(previous) = &request.transition.previous {
+            self.validate_receipt(previous)?;
+            if previous.prepared.policy.kind() != request.transition.target.policy.kind()
+                || previous.prepared.policy.revision()
+                    >= request.transition.target.policy.revision()
+            {
+                return Err(Error::Conflict);
+            }
+        }
+        if let Some(selected) = &self.transition_release {
+            if selected != &request {
+                return Err(Error::Conflict);
+            }
+            if self.released {
+                return Ok(());
+            }
+        } else {
+            if self.released
+                || self
+                    .pending
+                    .as_ref()
+                    .is_some_and(|pending| pending != &request.transition)
+                || self.applied.as_ref().is_some_and(|applied| {
+                    Some(applied) != request.transition.previous.as_ref()
+                        && applied.prepared != request.transition.target
+                })
+            {
+                return Err(Error::Conflict);
+            }
+            // Capture terminal intent before any query, ownership claim or delete.
+            self.transition_release = Some(request.clone());
+        }
+        let result = self.release_transition_inner(&request.transition);
+        match result {
+            Ok(()) => {
+                self.released = true;
+                self.pending = None;
+                self.error = None;
+                self.socket = None;
+                Ok(())
+            }
+            Err(error) => {
+                self.error = Some(error);
+                Err(error)
+            }
+        }
+    }
+
+    fn release_transition_inner(&mut self, transition: &Transition) -> Result<()> {
+        let Some(graph) = self.graph()? else {
+            return Ok(());
+        };
+        // Also bind any handle this process already observed before an ambiguous
+        // delete. A replacement under the same name must never inherit authority.
+        if let Some(applied) = &self.applied {
+            self.binding(&graph, Some(applied))?;
+        }
+        let graph = self.adopt(graph, transition)?;
+        let prepared = if self.matches(&graph, &transition.target)? {
+            transition.target.clone()
+        } else {
+            transition
+                .previous
+                .as_ref()
+                .ok_or(Error::Conflict)?
+                .prepared
+                .clone()
+        };
+        self.applied = Some(self.applied(&graph, prepared)?);
+        self.socket()?.batch(
+            graph.generation,
+            vec![(2, 0, vec![Attr::u64(4, wire::handle(&graph.table, 4)?)])],
+        )?;
+        if self.graph()?.is_some() {
+            return Err(Error::Conflict);
+        }
+        Ok(())
+    }
+
+    pub(super) fn inspect_transition_release(&self) -> Status {
+        // Cleanup intent cannot grant enforcement, including after a failed
+        // attempt that acquired OWNER on an otherwise valid persistent graph.
+        Status {
+            identity: self.identity.clone(),
+            state: if self.released {
+                "released"
+            } else {
+                "failed-owned"
+            }
+            .into(),
+            enforced: false,
+            applied: self.applied.clone(),
+            pending: self.pending.clone(),
+            error: self.error.map(|error| error.code().into()),
+        }
+    }
+}

package/rust/src/owner_tests.rs

@@ -27,6 +27,9 @@ mod poolguard_tests;
 #[path = "owner_detach_tests.rs"]
 mod detach_tests;
 
+#[path = "owner_transitionrelease_tests.rs"]
+mod transitionrelease_tests;
+
 #[path = "owner_coexistence_tests.rs"]
 mod coexistence_tests;
 

package/rust/src/owner_transitionrelease_tests.rs

@@ -0,0 +1,327 @@
+use super::namespace_tests::NativeOwner;
+use super::*;
+use serde_json::json;
+use std::io::Write;
+use std::time::{Duration, Instant};
+
+fn target(revision: u64) -> Prepared {
+    let mut policy = crate::egress::tests::pool_guard();
+    policy["revision"] = json!(revision);
+    serde_json::from_value::<crate::egress::Policy>(policy)
+        .unwrap()
+        .prepare()
+        .unwrap()
+        .into()
+}
+fn request(owner: &Owner, transition: Transition) -> TransitionRelease {
+    TransitionRelease {
+        identity: owner.identity.clone(),
+        transition,
+    }
+}
+
+#[test]
+fn transition_release_validates_closed_identity_and_body_before_admission() {
+    let mut owner = Owner::new(options("release_input")).unwrap();
+    let command = request(
+        &owner,
+        Transition {
+            previous: None,
+            target: target(1),
+        },
+    );
+    for field in ["bootId", "namespaceDevice", "namespaceInode", "instanceId"] {
+        let mut invalid = serde_json::to_value(&command).unwrap();
+        invalid["identity"][field] = json!("invalid");
+        assert_eq!(
+            owner.release_transition(serde_json::from_value(invalid).unwrap()),
+            Err(Error::Conflict)
+        );
+        assert!(owner.transition_release.is_none());
+    }
+    let mut invalid = command.clone();
+    invalid.transition.target.digest = format!("sha256:{}", "0".repeat(64));
+    assert!(owner.release_transition(invalid).is_err());
+    assert!(owner.transition_release.is_none());
+    for pointer in ["", "/identity", "/transition", "/transition/target"] {
+        let mut invalid = serde_json::to_value(&command).unwrap();
+        invalid.pointer_mut(pointer).unwrap()["extra"] = json!(true);
+        assert!(serde_json::from_value::<TransitionRelease>(invalid).is_err());
+    }
+    let mut invalid = serde_json::to_value(&command).unwrap();
+    invalid["transition"]
+        .as_object_mut()
+        .unwrap()
+        .remove("previous");
+    assert!(serde_json::from_value::<TransitionRelease>(invalid).is_err());
+    assert!(owner.socket.is_none());
+}
+
+#[test]
+#[ignore = "requires disposable isolated native qualification guest"]
+fn release_original_transition_after_interfaces_disappear_never_recreates_policy() {
+    isolated();
+    for replacement in [false, true] {
+        for delivered in [false, true] {
+            let endpoint = endpoint("a", 72);
+            let policy = crate::policy::Policy {
+                schema_version: 1,
+                revision: 1,
+                endpoints: vec![endpoint],
+                rules: vec![],
+            };
+            let mut owner = Owner::new(options("release_links")).unwrap();
+            let previous = replacement.then(|| {
+                owner
+                    .reconcile(Transition {
+                        previous: None,
+                        target: policy.clone().prepare().unwrap().into(),
+                    })
+                    .unwrap()
+            });
+            let mut next = policy;
+            if replacement {
+                next.revision = 2;
+            }
+            let command = request(
+                &owner,
+                Transition {
+                    previous,
+                    target: next.prepare().unwrap().into(),
+                },
+            );
+            if delivered {
+                owner.reconcile(command.transition.clone()).unwrap();
+            }
+            // Only the original command crosses this process boundary.
+            drop(owner);
+            ip(&["link", "del", "worka"]);
+            ip(&["netns", "del", "a"]);
+            let mut fresh = Owner::new(options("release_links")).unwrap();
+            assert!(fresh.reconcile(command.transition.clone()).is_err());
+            if replacement && delivered {
+                // Model a retained native pending command after an ambiguous batch.
+                fresh.pending = Some(command.transition.clone());
+            }
+            fresh.release_transition(command.clone()).unwrap();
+            let status = fresh.inspect();
+            assert_eq!(status.state, "released");
+            assert!(!status.enforced);
+            assert!(fresh.graph().unwrap().is_none());
+            fresh.release_transition(command.clone()).unwrap();
+            assert_eq!(
+                fresh.reconcile(command.transition.clone()),
+                Err(Error::Conflict)
+            );
+            let mut different = command;
+            different.transition.target = target(3);
+            assert_eq!(fresh.release_transition(different), Err(Error::Conflict));
+            fresh.close().unwrap();
+        }
+    }
+}
+
+#[test]
+#[ignore = "requires disposable isolated native qualification guest"]
+fn release_transition_rejects_foreign_owner_and_keeps_exact_terminal_choice() {
+    isolated();
+    let mut active = Owner::new(options("release_foreign")).unwrap();
+    let command = request(
+        &active,
+        Transition {
+            previous: None,
+            target: target(1),
+        },
+    );
+    let applied = active.reconcile(command.transition.clone()).unwrap();
+    let mut fresh = Owner::new(options("release_foreign")).unwrap();
+    assert_eq!(
+        fresh.release_transition(command.clone()),
+        Err(Error::ForeignOwner)
+    );
+    assert_eq!(fresh.inspect().state, "failed-owned");
+    assert!(!fresh.inspect().enforced);
+    assert_eq!(
+        fresh.reconcile(command.transition.clone()),
+        Err(Error::Conflict)
+    );
+    assert_eq!(fresh.detach(applied.clone()), Err(Error::Conflict));
+    assert_eq!(fresh.release(applied), Err(Error::Conflict));
+    assert!(active.inspect().enforced);
+    drop(active);
+    // close may retry only the already-selected exact release operation.
+    fresh.close().unwrap();
+    assert!(fresh.graph().unwrap().is_none());
+    fresh.release_transition(command).unwrap();
+}
+
+#[test]
+#[ignore = "requires disposable isolated native qualification guest"]
+fn release_transition_binds_previous_handle_and_complete_graph() {
+    isolated();
+    for fault in ["handle", "body", "pending"] {
+        let mut active = Owner::new(options("release_binding")).unwrap();
+        let previous = active
+            .reconcile(Transition {
+                previous: None,
+                target: target(1),
+            })
+            .unwrap();
+        let command = request(
+            &active,
+            Transition {
+                previous: Some(previous.clone()),
+                target: target(2),
+            },
+        );
+        drop(active);
+        let mut fresh = Owner::new(options("release_binding")).unwrap();
+        let mut invalid = command.clone();
+        if fault == "handle" {
+            invalid
+                .transition
+                .previous
+                .as_mut()
+                .unwrap()
+                .receipt
+                .table_handle = "18446744073709551615".into();
+        } else if fault == "pending" {
+            fresh.pending = Some(Transition {
+                previous: Some(previous.clone()),
+                target: target(3),
+            });
+        } else {
+            let mut foreign = Socket::open().unwrap();
+            let generation = foreign.generation().unwrap();
+            foreign
+                .batch(
+                    generation,
+                    vec![(
+                        3,
+                        0x600,
+                        vec![
+                            Attr::string(1, "snft_release_binding"),
+                            Attr::string(3, "foreign"),
+                        ],
+                    )],
+                )
+                .unwrap();
+        }
+        assert_eq!(fresh.release_transition(invalid), Err(Error::Conflict));
+        assert!(fresh.graph().unwrap().is_some());
+        assert!(!fresh.inspect().enforced);
+        drop(fresh);
+        // Disposable fixture cleanup never enters the production API.
+        let mut cleanup = Socket::open().unwrap();
+        let generation = cleanup.generation().unwrap();
+        cleanup
+            .batch(
+                generation,
+                vec![(2, 0, vec![Attr::string(1, "snft_release_binding")])],
+            )
+            .unwrap();
+    }
+}
+
+#[test]
+#[ignore = "requires disposable isolated native qualification guest"]
+fn release_transition_retry_never_deletes_a_replacement_for_its_observed_handle() {
+    isolated();
+    let mut owner = Owner::new(options("release_replaced")).unwrap();
+    let command = request(
+        &owner,
+        Transition {
+            previous: None,
+            target: target(1),
+        },
+    );
+    let first = owner.reconcile(command.transition.clone()).unwrap();
+    // Stop at the exact production boundary after deletion, before its final
+    // observation. Retained state must still bind the handle already acquired.
+    owner.transition_release = Some(command.clone());
+    let graph = owner.graph().unwrap().unwrap();
+    owner
+        .socket()
+        .unwrap()
+        .batch(
+            graph.generation,
+            vec![(
+                2,
+                0,
+                vec![Attr::u64(4, wire::handle(&graph.table, 4).unwrap())],
+            )],
+        )
+        .unwrap();
+    let mut replacement = Owner::new(options("release_replaced")).unwrap();
+    let second = replacement.reconcile(command.transition.clone()).unwrap();
+    assert_ne!(first.receipt.table_handle, second.receipt.table_handle);
+    drop(replacement);
+    assert_eq!(owner.release_transition(command), Err(Error::Conflict));
+    let graph = owner.graph().unwrap().unwrap();
+    assert_eq!(
+        wire::handle(&graph.table, 4).unwrap().to_string(),
+        second.receipt.table_handle
+    );
+    assert_eq!(owner.applied, Some(first));
+    assert!(!owner.inspect().enforced);
+    drop(owner);
+    Owner::new(options("release_replaced"))
+        .unwrap()
+        .release(second)
+        .unwrap();
+}
+
+#[test]
+#[ignore = "requires disposable isolated native qualification guest"]
+fn release_transition_recovers_lost_delete_ack_across_actual_native_processes() {
+    isolated();
+    let namespace = std::fs::File::open("/proc/thread-self/ns/net").unwrap();
+    let mut native = NativeOwner::start(&namespace);
+    let status = native.call(
+        "openOwner",
+        serde_json::to_value(options("release_ack")).unwrap(),
+    );
+    let command = TransitionRelease {
+        identity: serde_json::from_value(status["identity"].clone()).unwrap(),
+        transition: Transition {
+            previous: None,
+            target: target(1),
+        },
+    };
+    native.call(
+        "reconcilePolicy",
+        serde_json::to_value(&command.transition).unwrap(),
+    );
+    writeln!(
+        native.child.stdin.as_mut().unwrap(),
+        "{}",
+        json!({
+            "id":"lost-release", "method":"releasePolicyTransition", "params":command,
+        })
+    )
+    .unwrap();
+    let mut observer = Owner::new(options("release_ack")).unwrap();
+    let until = Instant::now() + Duration::from_secs(3);
+    while observer.graph().unwrap().is_some() {
+        assert!(Instant::now() < until);
+        std::thread::sleep(Duration::from_millis(5));
+    }
+    // Never read or retain the release response.
+    drop(native);
+    let mut fresh = NativeOwner::start(&namespace);
+    fresh.call(
+        "openOwner",
+        serde_json::to_value(options("release_ack")).unwrap(),
+    );
+    assert_eq!(
+        fresh.call(
+            "releasePolicyTransition",
+            serde_json::to_value(&command).unwrap()
+        ),
+        json!({"released":true})
+    );
+    let status = fresh.call("inspectPolicy", json!({}));
+    assert_eq!(status["state"], "released");
+    assert_eq!(status["enforced"], false);
+    assert!(observer.graph().unwrap().is_none());
+}

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@push.rocks/smartnftables',
-  version: '2.0.0',
+  version: '2.2.0',
   description: 'A TypeScript module for managing nftables rules including NAT, firewall, and rate limiting with a high-level API.'
 }

package/ts/classes.managednftables.ts

@@ -1,6 +1,6 @@
 import * as plugins from './plugins.js';
 import type { IManagedNftOptions, IManagedNftPolicy, IManagedNftTransition, IAppliedManagedNftPolicy,
-  IPreparedManagedNftPolicy, IManagedNftStatus, TManagedNftCommands, TManagedNftPolicy } from './managed.types.js';
+  IPreparedManagedNftPolicy, IManagedNftStatus, IManagedNftTransitionRelease, TManagedNftCommands, TManagedNftPolicy } from './managed.types.js';
 
 export class ManagedNftablesError extends Error {
   constructor(public readonly code: string) { super(`Managed nftables ${code}.`); }
@@ -55,6 +55,9 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
   #retaining = false;
   #detachExpected: IAppliedManagedNftPolicy<TPolicy> | null = null;
   #detach: Promise<{ detached: true }> | null = null;
+  #transitionRelease: { request: IManagedNftTransitionRelease<TPolicy> } | null = null;
+  readonly #failure = new AbortController();
+  #processLost = false;
 
   constructor(options: IManagedNftOptions) {
     this.#options = snapshot(options);
@@ -71,6 +74,16 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
 
   public get state(): string { return this.#state; }
 
+  /** Retained loss of owner confidence, including idle process death. It never
+   * resets or proves withdrawal/deletion; explicit recovery and joined close
+   * remain the caller's responsibility. Orderly close does not abort it. */
+  public get failureSignal(): AbortSignal { return this.#failure.signal; }
+
+  #fail(): void {
+    if (this.#state !== 'closing') this.#state = 'failed-owned';
+    if (!this.#failure.signal.aborted) this.#failure.abort(new ManagedNftablesError('OWNER_LOST'));
+  }
+
   /** Starts only the compiler/IPC owner. The returned idle status is not enforcement. */
   public start(): Promise<IManagedNftStatus<TPolicy>> {
     if (this.#state !== 'new' || this.#retaining) return Promise.reject(new ManagedNftablesError('UNAVAILABLE'));
@@ -85,10 +98,11 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
         cliArgs: ['--management', ...(this.#options.networkNamespaceFd === undefined ? [] : ['--network-namespace-fd', '3'])],
         inheritedFileDescriptors: this.#options.networkNamespaceFd === undefined ? undefined : [this.#options.networkNamespaceFd],
         readyTimeoutMs: 3000, requestTimeoutMs: 30_000, maxPayloadSize: 262_144,
-        maxPendingRequestsByMethod: { preparePolicy: 1, openOwner: 1, reconcilePolicy: 1, inspectPolicy: 1, releasePolicy: 1, detachPolicy: 1, closeOwner: 1 },
+        maxPendingRequestsByMethod: { preparePolicy: 1, openOwner: 1, reconcilePolicy: 1, inspectPolicy: 1, releasePolicy: 1, releasePolicyTransition: 1, detachPolicy: 1, closeOwner: 1 },
       });
       this.#bridge.on('exit', () => {
-        if (!['closing', 'stopped'].includes(this.#state)) this.#state = 'failed-owned';
+        this.#processLost = true;
+        if (!['closing', 'stopped'].includes(this.#state)) this.#fail();
       });
       if (!await this.#bridge.spawn()) throw new ManagedNftablesError('UNAVAILABLE');
       const { ownerId, instanceId, tableName } = this.#options;
@@ -96,7 +110,7 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
       if (this.#state !== 'starting') throw new ManagedNftablesError('UNAVAILABLE');
       this.#state = 'ready'; return status;
     })();
-    return this.#track(work);
+    return this.#track(work, 'openOwner');
   }
 
   public prepare(policy: TPolicy): Promise<IPreparedManagedNftPolicy<TPolicy>> {
@@ -110,11 +124,20 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
     return this.#invoke('releasePolicy', expected);
   }
 
+  /** Terminal release when an apply acknowledgement was lost. Retain the full
+   * original identity and transition first. The native owner accepts only an
+   * absent table or the exact previous/target graph; it never recreates policy
+   * or requires surviving interfaces. Exact retries and inspection remain
+   * available; close() retries admitted cleanup, closeRetaining() only joins. */
+  public releaseTransition(request: IManagedNftTransitionRelease<TPolicy>): Promise<{ released: true }> {
+    return this.#invoke('releasePolicyTransition', request);
+  }
+
   /** Permanently selects retention cleanup, verifies exact PERSIST retention, and
    * joins the native process. Retain the full applied value before this call.
    * After any failure close() only terminates; it never deletes the table. */
   public detach(expected: IAppliedManagedNftPolicy<TPolicy>): Promise<{ detached: true }> {
-    if (this.#closeRetainingSelected || this.#closeMode === 'delete') return Promise.reject(new ManagedNftablesError('UNAVAILABLE'));
+    if (this.#closeRetainingSelected || this.#closeMode === 'delete' || this.#transitionRelease) return Promise.reject(new ManagedNftablesError('UNAVAILABLE'));
     this.#retaining = true;
     let captured: IAppliedManagedNftPolicy<TPolicy>;
     try {
@@ -129,7 +152,7 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
       if (result?.detached !== true || Object.keys(result).length !== 1) throw new ManagedNftablesError('PROTOCOL');
       this.#nativeMayOwn = false;
       return result;
-    }));
+    }), 'detachPolicy');
     const detached = (async () => { const result = await work; await this.close(); return result; })();
     this.#detach = detached;
     void detached.catch(() => { this.#detach = null; });
@@ -160,14 +183,20 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
       await this.#work?.catch(() => undefined);
       if (this.#bridge) {
         if (this.#nativeMayOwn && !retaining) {
-          const result = await this.#bridge.sendCommand('closeOwner', {});
-          if (result.released !== true) throw new ManagedNftablesError('PROTOCOL');
+          // Even native validation may have rejected before selecting its own
+          // terminal intent. Retry this exact request; generic close must not
+          // delete an earlier applied graph outside the requested transition.
+          const result = this.#transitionRelease
+            ? await this.#bridge.sendCommand('releasePolicyTransition', this.#transitionRelease.request)
+            : await this.#bridge.sendCommand('closeOwner', {});
+          if (result.released !== true || this.#transitionRelease && Object.keys(result).length !== 1) throw new ManagedNftablesError('PROTOCOL');
         }
         await this.#bridge.terminate({ gracePeriodMs: 1000 });
       }
       this.#bridge = null; this.#state = 'stopped';
     })().catch(() => {
       this.#state = 'failed-owned'; this.#close = null;
+      this.#fail();
       throw new ManagedNftablesError('CLEANUP_UNCONFIRMED');
     });
     return this.#close;
@@ -177,19 +206,41 @@ export class ManagedNftables<TPolicy extends TManagedNftPolicy = IManagedNftPoli
     if (this.#retaining || !['ready', 'failed-owned'].includes(this.#state) || !this.#bridge || this.#work) return Promise.reject(new ManagedNftablesError('UNAVAILABLE'));
     let captured: TManagedNftCommands<TPolicy>[K]['params'];
     try { captured = snapshot(params); } catch { return Promise.reject(new ManagedNftablesError('INVALID')); }
-    if (method === 'reconcilePolicy' || method === 'releasePolicy') this.#nativeMayOwn = true;
+    if (this.#transitionRelease && (method !== 'inspectPolicy' && method !== 'releasePolicyTransition'
+      || method === 'releasePolicyTransition' && !plugins.util.isDeepStrictEqual(this.#transitionRelease.request, captured))) {
+      return Promise.reject(new ManagedNftablesError('CONFLICT'));
+    }
+    if (method === 'releasePolicyTransition') this.#transitionRelease = { request: captured as IManagedNftTransitionRelease<TPolicy> };
+    if (method === 'reconcilePolicy' || method === 'releasePolicy' || method === 'releasePolicyTransition') this.#nativeMayOwn = true;
     return this.#track(this.#bridge.sendCommand(method, captured).then((result) => {
       const capturedResult = snapshot(result);
-      if (method === 'releasePolicy') this.#nativeMayOwn = false;
-      if (this.#state !== 'closing' && (method === 'reconcilePolicy' || method === 'releasePolicy'
-        || method === 'inspectPolicy' && (capturedResult as IManagedNftStatus<TPolicy>).error === null)) this.#state = 'ready';
+      if (method === 'releasePolicy' || method === 'releasePolicyTransition') {
+        if (method === 'releasePolicyTransition' && ((capturedResult as { released: true })?.released !== true
+          || Object.keys(capturedResult).length !== 1)) throw new ManagedNftablesError('PROTOCOL');
+        this.#nativeMayOwn = false;
+      }
+      if (method === 'inspectPolicy') {
+        const status = capturedResult as IManagedNftStatus<TPolicy>;
+        if (status.state === 'failed-owned' || status.error !== null) this.#fail();
+      }
+      if (!this.#processLost && this.#state !== 'closing' && (method === 'reconcilePolicy' || method === 'releasePolicy' || method === 'releasePolicyTransition'
+        || method === 'inspectPolicy' && (capturedResult as IManagedNftStatus<TPolicy>).error === null
+          && (capturedResult as IManagedNftStatus<TPolicy>).state !== 'failed-owned')) this.#state = 'ready';
       return capturedResult;
-    }));
+    }), method);
   }
-  #track<T>(work: Promise<T>): Promise<T> {
+  #track<T>(work: Promise<T>, method: keyof TManagedNftCommands<TPolicy>): Promise<T> {
     const owned = work.catch((error) => {
       if (this.#state !== 'closing') this.#state = 'failed-owned';
       const code = error instanceof plugins.smartrust.RustBridgeRequestError ? error.responseErrorCode : undefined;
+      // Only a native compiler rejection or explicit INVALID response proves
+      // effect-free validation. Other native errors can follow lost ownership
+      // or admitted kernel work. Recovery stays available; confidence is lost.
+      const validation = error instanceof plugins.smartrust.RustBridgeRequestError
+        && error.code === 'ERR_RUST_BRIDGE_REQUEST_RUST_RESPONSE'
+        && (method === 'preparePolicy' || code === 'INVALID');
+      if (!validation && (this.#state !== 'closing'
+        || ['reconcilePolicy', 'releasePolicy', 'releasePolicyTransition', 'detachPolicy'].includes(method))) this.#fail();
       throw new ManagedNftablesError(typeof code === 'string' && /^[A-Z_]{1,64}$/.test(code) ? code : 'UNAVAILABLE');
     });
     this.#work = owned;

package/ts/managed.types.ts

@@ -60,6 +60,14 @@ export interface IManagedNftTransition<TPolicy extends TManagedNftPolicy = IMana
   target: IPreparedManagedNftPolicy<TPolicy>;
 }
 
+/** Persist the original boot/namespace identity and full transition before cleanup.
+ * This releases only its exact owned table; it does not prove packet drain or
+ * authorize address reuse. Surviving policy interfaces are not required. */
+export interface IManagedNftTransitionRelease<TPolicy extends TManagedNftPolicy = IManagedNftPolicy> {
+  identity: IManagedNftIdentity;
+  transition: IManagedNftTransition<TPolicy>;
+}
+
 export interface IManagedNftStatus<TPolicy extends TManagedNftPolicy = IManagedNftPolicy> {
   identity: IManagedNftIdentity;
   state: 'idle' | 'applied' | 'failed-owned' | 'released' | 'retained';
@@ -91,6 +99,7 @@ export type TManagedNftCommands<TPolicy extends TManagedNftPolicy = IManagedNftP
   reconcilePolicy: { params: IManagedNftTransition<TPolicy>; result: IAppliedManagedNftPolicy<TPolicy> };
   inspectPolicy: { params: Record<string, never>; result: IManagedNftStatus<TPolicy> };
   releasePolicy: { params: IAppliedManagedNftPolicy<TPolicy>; result: { released: true } };
+  releasePolicyTransition: { params: IManagedNftTransitionRelease<TPolicy>; result: { released: true } };
   detachPolicy: { params: IAppliedManagedNftPolicy<TPolicy>; result: { detached: true } };
   closeOwner: { params: Record<string, never>; result: { released: true } };
 };