- impl EngineWindowState on PgLoBackend: ensure_gc_schema creates
gc_window only (never gc_pins, never the embedder's liveness
table), window_stage upserts idempotent per (key, deadline),
window_take is the one atomic DELETE ... RETURNING step over the
<= boundary with the 42P01 -> empty virgin-take split
- nothing of EngineFleetState exists on this engine (ADR-012 §5's
pg-lo row: fleet pins live on the kv host, sweep lock no); the
one-window-host dormancy posture is recorded in the impl doc
- five contract tests mirror the postgres/sqlite suites (schema-only
+ row shape, stage idempotence/restage, take-exact-set/never-twice,
the <= boundary with nanosecond slack, both virgin shapes);
env-driven, skipping cleanly server-less, green live against the
harness server
Verification: cargo test (default + --features pg-lo, server-less
and live), clippy -D warnings (default, pg-lo, + the pure builds
"pg-lo,mem" and "postgres,pg-lo"), cargo fmt --check, cargo doc --no-deps