A boot its caller may end before it completes — GeoLeaf.mount()'s handle, unmounted while its
application was starting, or a later mount() taking over (app/mount.ts).
Ending is the caller's act: it has already signalled it (geoleaf:boot:aborted, reason
"unmounted") and settled what it owes its own caller. The boot only has to stop — at its next
checkpoint, after each step that awaits, and between two modules — and to signal nothing more:
no failure, no reveal, no second abort.
A boot its caller may end before it completes —
GeoLeaf.mount()'s handle, unmounted while its application was starting, or a latermount()taking over (app/mount.ts).Ending is the caller's act: it has already signalled it (
geoleaf:boot:aborted, reason"unmounted") and settled what it owes its own caller. The boot only has to stop — at its next checkpoint, after each step that awaits, and between two modules — and to signal nothing more: no failure, no reveal, no second abort.