OpenSolaris

You are not signed in. Sign in or register.

Interface Taxonomy

Copyright 1991-2006, Sun Microsystems, Inc

Table of Contents Overview Policy Synopsis
CategorySoftware
OwnerSAC
AuthorARC-Chairs
ChangesARC-Chairs
AuthoritySAC
Policy Version3.1
StatusApproved
Last ReviewedJun 14, 2006
Dec 5, 2001
EffectiveApril, 1992

The Interface Taxonomy is a classification scheme for interfaces which is used to ascribe a stability classification to an interface.

Interface taxonomy classifications are provided to give guidance to users as to the appropriateness of an interface for a given task in a specific usage environment. Project teams typically propose to the ARC a stability classification for each of their new or changed interfaces. ARC opinions identify the stability classification accepted by the committee for each interface.

The stability classification identifies:

  • who may use the interface -- that is, the architectural level at which the interface is exposed;
  • the risk of possible breakage or incompatibility; and
  • the commensurate constraints on incompatible change to the interface.

 

Audience

    This document was written for software developers who are managing stability expectations for the components and features they are developing.

    Consumers of these components and expectatons (peer developers, project and program management, ARC members and ISVs) also need to understand the concepts in this classification scheme.

    This taxonomy is used extensively by the ARCs to ensure that newly created interfaces have explicit stability expectations and that those expectations are met over time as a component evolves.


Background

    Interface taxonomy stability classifications are provided to give guidance to users as to the appropriateness of an interface for a given task in a specific usage environment. Project teams typically propose to the ARC a stability classification for each of their new or changed interfaces. ARC opinions identify the stability classification accepted by the committee for each interface.

    Stability classifications defined in this document should be spelled uniformly with initial capitals, to differentiate them from the common English words (e.g., Committed, Uncommitted, Project Private).

    The interface taxonomy stability classifications in this document may be divided into two broad, distinct groups:

    • Public: (Committed, Uncommitted, Volatile, Not-an-interface)

      With a few restrictions within Sun (see individual descriptions) Public interfaces may be used by anyone. The levels are differentiated by when the interface may change incompatibly, in terms of release vehicle type. Public interfaces are expected to be externally documented, usually in the form of manual pages, with the taxonomy classification specified.

    • Private: (Sun Private, Committed Private, Consolidation Private, Project Private)

      The levels are differentiated as to who may use the interface. There is no formal restriction as to when the interface may change, but because change is expected to be coordinated between the providers and consumers of the interfaces practical considerations exist. Private interfaces are usually not externally documented, but cases exist where customers are best served by minimal documentation. In such cases any provided documentation should make it clear that the interfaces described are Private and not for public use.


History

    Previous versions of this document focused Public commitment levels exclusively on a guarantee as to when an interface would not change incompatibly. Over time, additional commitment levels were introduced to convey intent (rather than guarantee) or restrict the source of the change. These well intentioned additions were found to be counter-productive due to multiple interpretations and misinterpretations. This revision simplifies the taxonomy, reverting back to a state closer to its original form. Appendix A presents the classification levels deprecated by this revision and provides mapping details from those deprecated levels to the current levels.

    This version also removes the association of "compatible changes" with stability/release taxonomy levels. That is, Committed/Stable interfaces could not change in a compatible way in other than a Minor release. This was intended to provide a mechanism for managing dependencies on new features (i.e., the new feature Foo(Committed) could be used in versions newer than r3.5). This capability was never effectively communicated to customers and was commonly ignored by developers, so it was dropped from this version of the taxonomy.

    The following table summarizes the mapping of "Interface Taxonomy revision 1" levels to "revision 2" levels. The details are provided in the individual rationale that follows. Note in particular the caveats and special conditions related to the deprecated Evolving classification.

    Old ClassificationNew ClassificationComments
    Public Committed Name change
    Stable Committed Name change
    Standard Committed Include a reference to the controlling specification
    Evolving Committed All ON/PSARC cases
    Evolving Uncommitted Except ON/PSARC cases
    Unstable Uncommitted Name change
    External Volatile Name change with expansion of allowed usage
    Obsolete (Obsolete) Was a classification, now a modifier
    *Private *Private Unchanged

    • Standard

      The Standard classification was historically hindered by the question of what exactly an "standards organization" is. The outside organization which controls the interface may be ISO or ANSI at one end of the spectrum and Zelda of "Zelda's Software and Tea Cozies" at the other. Where to draw the line between these two extremes often made application of Standard difficult.

      As with External, binding the classification to the organization which controlled the interface specification detracted from the central point of when the interface might change incompatibly. From this perspective, Standard was always equivalent to Committed.

      All interfaces previously classified as Standard may now be considered Committed, with the additional expectation that a reference to the organization which controls the interface specification be recorded.

    • Evolving

      Evolving has always had two contradictory attributes: it has the ability to change in a Minor release, yet third parties are encouraged to make use of the interface. This contradiction has caused significant difficulties outside of the ARC process (e.g., appcert).

      Within the ARC process, the different ARCs have been applying different interpretations of Evolving which had lead to confusion and conflicting expectations.

      PSARC (and perhaps other ARCs) focused on the text of the definition, which paints Evolving as only slightly less stable than Committed/Stable. It takes an exceptionally problematic situation to motivate incompatible change to an Evolving interface. Over the 7 years this classification level has been in existence, no Evolving interface approved by PSARC has been incompatibly changed. More importantly, the exact same discussion and conclusions would have occurred if the interface in question was Committed/Stable or Evolving. In general, Evolving was nothing more than a "Don't Panic" salve for developers of new interfaces.

      History shows that the promotion of Evolving interfaces as described in that "NOTE" in the previous definition has only rarely occurred. This has lead to a situations where many interfaces have become "effectively Committed" because many ISVs have utilized them, yet are labeled with an inappropriate "thin ice" warning.

      LSARC (and perhaps other ARCs) focused on the "Incompatible Change" attribute of Evolving, making an Evolving interface effectively an Uncommitted/Unstable interface without the somewhat pejorative implications of the (previous) Unstable label.

      All Evolving interfaces approved by PSARC may be considered Committed with the adoption of this document version. All ON-delivered documentation will be modified to reflect this change. All other Evolving interfaces should be considered Uncommitted, which is the default transition path.

    • External

      What's in a name? It seems that in the case of External, the answer is "everything". The name External was chosen for this level, because it could only be envisioned as appropriate where the interface specification was controlled by an external body. Unfortunately, it has often been interpreted as the required classification level for all interfaces where the specification was controlled by an outside body. This was never the intent as is captured in PSARC/2001/313 which originally created the External classification level.

      The change of External to Volatile is little more than a name change, accompanied by allowing interfaces controlled by the implementation provider to be labeled as Volatile. That said, it is expected that the application of Volatile to an interface controlled by the implementation provider will be an exceptionally rare event and that the classification will be temporary.

    • Obsolete

      Obsolete was moved from "classification" status to "modifier" status to help regularize the taxonomy. In concept and application it is unchanged.


Policy

  • Applies to All software produced by SMI
  • Authority SAC
  • Approval SAC
  • Effective April, 1992
  • Policy 
    • All software interfaces must be classified according to this taxonomy. Interfaces are defined as APIs, files and directory structures, file formats, protocols, (sometimes) even performance and reliability behaviors, and any other attribute upon which another component might reasonably depend.
    • An ARC must review, approve and archive the specification for all interfaces other than Project Private and Internal. Unreviewed, unapproved interfaces are assumed to be Internal. An adequate specification, suitable for archiving must exist for all interfaces submitted for review. Often Project Private interfaces are also reviewed if the presentation of them aids the understanding of the entire project or it is expected they will be promoted to a broader classification in the future.
    • Adequate customer documentation must exist for all Public interfaces. It is strongly preferred that manual pages exist for all Public interfaces (supported on Solaris), even if only significant content of those pages are SYNOPSIS and ATTRIBUTES sections and a textual pointer to other documentation. Independent of the form of documentation delivery, the interface taxonomy commitment level must be presented to the consumer.
    • In cases where the organization delivering the interface implementation does not control the interface specification, the controlling body must be be clearly cited in the documentation. In the case where a well-defined, versioned document is the specification, both the name and precise version must be be cited.
  • Details 

    Public Interface Classifications

    Committed (formerly Stable, Public; encompasses Standard, Evolving)
      Specification Open
    Incompatible Change major release (X.0)
    ARC review of Specs Yes
    Examples Compiler command line options, hardware interconnects (SBus, PCI, USB...), RPC, POSIX utilities

    We publish the specification of these interfaces, typically as manual pages or other product documentation. We also tell customers we will remain compatible with them. (Scott McNealy's principle that "Compatibility is a constraint, not a goal") The intention of a Committed interface is to enable arbitrary third parties to develop applications to these interfaces, release them, and have confidence that they will run on all releases of the product after the one in which the interface was introduced, and within the same Major release. Even at a Major release, incompatible changes are expected to be rare, and to have strong justifications.

    Committed interfaces are often proposed to be industry standards, as was the case with RPC. Also, interfaces defined and controlled as industry standards are most often treated as Committed interfaces.

    These are interfaces whose specification is often under the provider's control or which are specified by a clearly versioned document controlled by a well-defined organization. If the interface specification is not under the implementation provider's control, the provider must be willing to fork from the interface specification if required to maintain compatibility. In the case of interface specifications controlled by a standards body, the commitment must be to a clearly identified version of the specification, minimizing the likelihood of an incompatible change (but it can happen through formal spec interpretations).

    Also, if the interface specification is not under the control of the interface implementation provider, then the controlling body and/or public, versioned document must be be noted in the documentation. This is particularly important for specifications controlled by recognized standards organizations.

    Although a truely exceptional event, incompatible changes are possible in any release if the associated defect is serious enough as outlined in the EXEMPTIONS section of this document or in a Minor release by following the End of Feature process.

    Uncommitted (formerly "Unstable")
      Specification Open
    Incompatible Change minor release (x.Y), with impact assessment
    ARC review of Specs Yes
    Examples SUNW* package abbreviations, some config utils

    No guarantees are made about either source or binary compatibility of these interfaces from one Minor release to the next. The most drastic incompatible change of removal of the interface in a Minor release is allowed. Uncommitted interfaces are generally not appropriate for use by release-independent products.

    Uncommitted is not a license for gratuitous change. Any incompatible changes to the interface should be motivated by true improvement to the interface which may include justifiable ease of use considerations. The general expectation is that Uncommitted interfaces are not likely to change incompatibly and if such changes occur they will be small in impact and should often have a mitigation plan.

    Uncommitted interfaces generally fall into one of the following subcategories:

    1. Interfaces that are experimental or transitional. They are typically used to give outside developers early access to new or rapidly changing technology, or to provide an interim solution to a problem where a more general solution is anticipated.
    2. Interfaces whose specification is controlled by an outside body and the implementation provider is only willing to commit to forking until the next minor release point should that outside body introduce incompatible change. Note that this "middle of the road" approach is often the best business decision when the controlling body hasn't established a history of respecting compatibility.
    3. Interfaces whose target audience values innovation (and possibly ease of use) over stability. This attribute is often asserted for administrative interfaces for higher web tier components. Note that ARC review may request data to support such an assertion.

    A project's intention to import an Uncommitted interface from another consolidation should be discussed with the ARC early. The stability classification of the interface -- or a replacement interface -- might be raised. The opinion allowing any project to import an Uncommitted interface must explain why it is acceptable, and a contract must be put into place allowing this use. For Sun products, the similarity in the usage of Uncommitted and Consolidation Private interfaces should be noted.

    Any documentation for an Uncommitted interface must contain warnings that "these interfaces are subject to change without warning and should not be used in unbundled products". In some situations, it may be appropriate to document Uncommitted interfaces in white papers rather than in standard product documentation. When changes are introduced, the changes should be mentioned in the release notes for the affected release.

    NOTE: If we choose to offer a draft standard implementation but state our intention to track the standard (or the portions we find technically sound or likely to be standardized), we set customer expectations for incompatible changes by classifying the interface Uncommitted. The interface must be reclassified Committed when standard is final. Such an intention could be encoded "Uncommitted->Committed".)

    Volatile (encompasses External)
      Specification Open
    Incompatible Change Micro release (x.y.Z) or Patch
    ARC review of Specs A precise reference is normally recorded
    Examples Gimp user interface, IETF internet-draft

    Volatile interfaces may change at any time and for any reason.

    Use of the Volatile interface stability level allows interface providers to quickly track a fluid, rapidly evolving specification. In many cases, this is preferred to providing additional stability to the interface, as it may better meet the expectations of the consumer.

    The most common application of this taxonomy level is to interfaces that are controlled by a body other than the final implementation provider, but unlike specifications controlled by standards bodies or communities we place trust in, it can not be asserted that an incompatible change to the interface specification would be exceedingly rare. In some cases it may not even be possible to clearly identify the controlling body. Although not prohibited by this taxonomy, the Volatile classification is not typically applied to interfaces where the specification is controlled by the implementation provider.

    It should be noted that in some cases it will be preferable to apply a less fluid interface classification to an interface even if the controlling body is separate from the implementor. Use of the Uncommitted classification extends the stability commitment over micro/patch releases, allowing use of additional support models for software that depends upon these interfaces, at the potential cost of less frequent updates. Committed should be considered for required, core interfaces. If instability in the interface definition can't be reconciled with the requirement for stability, then alternate solutions should be considered.

    This classification is typically used for free or open source software (FOSS), also referred to as community software, and similar models where it is deemed more important to track the community with minimal latency than to provide stability to our customers. When applying this classification level to community software, particular attention should be paid to the considerations presented in the preceding paragraph.

    It also may be appropriate to apply the Volatile classification level to interfaces in the process of being defined by trusted or widely accepted organization. These are generically referred to as draft standards. An "IETF internet draft" is a well understood example of a specification under development.

    There may also cases where Volatile is appropriate for experimental interfaces, but in most cases Uncommitted should be considered first.

    Irrespective of the control of the specification, the Volatile classification must not be applied to "core" interfaces (those that must be used) for which no alternate (and more stable) interface exists. Volatile interfaces must also adhere to Sun internal standards in the following areas:

    • Security, Authentication
    • The existence of (perhaps vestigial) Manual Pages and conformance to Sun section numbering
    • File System Semantics (Solaris examples: /usr may be read-only, /var is where all significant run-time growth occurs, ...)

    All Volatile interfaces should be labeled as such in all associated documentation and the consequence of using such interfaces must be explained either as part of that documentation or by reference.

    Shipping incompatible change in a patch should be strongly avoided. It is not strictly prohibited for the following two reasons:

    • Since the patch provider may not be in explicit control of the changes to the upstream implementation, it cannot guarantee with reasonable assurance that an unidentified incompatibility is not present.
    • A strong business case may exist for shipping a newer version as a patch if that newer version closes significant escalations.

    In general, the intent of allowing change in a patch is to allow for change in Update Releases.

    Sun products should consider Volatile interfaces as equivalent to Consolidation Private. A contract is required for use of these interfaces outside of the supplying consolidation.

    Extreme care in the use of Volatile interfaces is required by layered or unbundled products. Layered products that depend upon Volatile interfaces must include as part of their review material how they intend to manage the dependency. It is not explicitly prohibited, but it is probable that unbundled or layered products that ship asynchronously from the Volatile interfaces upon which they depend will face nearly insurmountable difficulty in constructing a plan to manage such a dependency.

    Not-an-interface
      Specification None
    Incompatible Change Micro release (x.y.Z) or Patch
    Arc review of Specs None
    Examples CLI output, error text

    In the course of reviewing or documenting interfaces, the situation often occurs that an attribute will be present which may be inferred to be an interface, but actually is not. A couple of common examples of this are output from CLIs intended only for human consumption and the exact layout of a GUI.

    This classification is simply a convenience term to be used to clarify such situations where such confusion is identified as likely. Failure to apply this term to an attribute is no indication that said attribute is some form of interface. It only indicates that the potential for confusion was not identified.

    Private Interface Classifications

    Sun Private
      Specification Closed
    Incompatible Change minor release (x.Y)
    ARC review of Specs Yes
    Examples trap 40 (gethrtime)

    These are stable interfaces which one consolidation depends on and another consolidation provides. As changes to these interfaces must be coordinated among all providers and users of the interface, the expectation is that they are extremely stable. Some internal kernel interfaces are Sun Private interfaces.

    Sun Private interfaces are strongly discouraged. Coordinating changes to these interfaces within a consolidation is usually feasible, but coordinating changes among different consolidations released asynchronously is extremely difficult. Interface versioning is advised for Sun Private interfaces.

    Interfaces are occasionally made Sun Private in order to gain some experience with them before opening them up to wider use as Committed interfaces. Making such interfaces Consolidation Private would be preferable, however, as evolution is then far easier.

    An ARC will review and archive these interfaces, with special attention to how the interface could evolve, if necessary. Any proposed change to the interface must be ARC approved.

    Contracted Sun Private

    This stability level is the same as Sun Private, except that a contract has been put in place between the provider and consumer of the interface. The contract describes special arrangements made for the stability of the interface. This can be used, for example, to allow exposure of the interface to a Sun Partner.

    An ARC must review, approve, and archive a contract between the provider and consumer of the interface. Any change to the contract, the interface, or the specification requires reapproval.

    Committed Private
      Specification Closed
    Incompatible Change major release (X.0)
    ARC review of Specs Yes
    Examples UFS media format, Calendar Manager RPC protocol

    For some otherwise-private interfaces, we must maintain compatibility from release to release, in order to meet the customer's expectations for compatibility of the programs using these interfaces. However, we don't want customers to depend on these interfaces directly, and we don't want to directly expose these interfaces to customers. These interfaces are classified as Committed Private.

    Our commitment is that a customer's "normal" use of system facilities should not allow them to see any incompatible changes to these interfaces. Since these interfaces typically span machines by being embodied in media or protocols (and since customers cannot upgrade all their machines simultaneously), these interfaces can't be changed with the freedom of a private interface. Yet, changes to the details of the interface can be dramatic, provided the commitment to the customer is maintained. In general, Committed Private interfaces must be versioned.

    An ARC must review and archive the specification, and will at least assure that the interface can satisfy its purpose and support the evolution described in the previous paragraph. Any proposed change to or new dependency on the interface must be ARC approved.

    Contracted Committed Private

    This stability level is the same as Committed Private, except that a contract has been put in place between the provider and consumer of the interface. The contract describes special arrangements made for the stability of the interface. This can be used, for example, to allow exposure of the interface to a Sun Partner.

    An ARC must review, approve, and archive a contract between the provider and consumer of the interface. Any change to the contract, the interface, or the specification requires reapproval.

    Partner Private

    This stability level is no longer in use. Interfaces previously classified as Partner Private should be treated according to the closest matching stability level in the current taxmonomy, probably either Contracted Consolidation Private or Contracted Project Private, depending on the stability of the interface outside of the contract.

    Consolidation Private
      Specification Closed
    Incompatible Change micro release (x.y.Z) or "jumbo patch"
    ARC review of Specs Not necessary
    Examples libdeskset, kernel nameslists

    These are interfaces internal to the consolidation that one piece of a consolidation depends on and another piece of the same consolidation provides. Changes to these interfaces must be coordinated among all providers and users of the interface. Many internal kernel interfaces are Consolidation Private interfaces.

    Generally these are interfaces that have proven convenient for building the consolidation, but which change often enough that we're not willing to document them for external use nor to commit to their stability. libdeskset is an example of such an interface. Though the libkvm API is Public, the undocumented names that can be accessed through that interface are Consolidation or Project Private.

    An ARC may review and archive these interfaces, or may leave the consolidation to monitor their own internal commitments. If a Consolidation Private interface is reviewed by the ARC, ask that ARC if they want to review later changes to that interface.

    Importing the interface by any project outside the Consolidation would require negotiating a "contract" with the interface providers. An ARC must review and approve the classification change to Contracted Consolidation Private and the terms of the contract.

    Contracted Consolidation Private
    (formerly Contract Private, but so was what is now Contracted Project Private)

    This stability level is the same as Consolidation Private, except that a contract has been put in place between the provider and consumer of the interface. The contract describes special arrangements made for the stability of the interface. This can be used, for example, to allow exposure of the interface to a specific consumer in a different consolidation.

    An ARC must review, approve, and archive a contract between the provider and consumer of the interface. Any change to the contract, the interface, or the specification requires reapproval.

    Contract Private

    This stability level is no longer in use, but was in use for many years. Interfaces previously classified as Contract Private should be treated according to the closest matching stability level in the current taxmonomy, probably either Contracted Consolidation Private or Contracted Project Private, depending on the stability of the interface outside of the contract.

    Project Private
      Specification Closed
    Incompatible Change micro release (x.y.Z)
    ARC review of Specs No
    Examples Metamucil ioctls, nfssys system call, uadmin cpu control functions

    Project Private interfaces usually occur when a project must communicate between its components across a boundary in the system. For instance, Metamucil includes several new ioctls to perform operations on UFS filesystems. The Metamucil ufsdump program uses these ioctls. The ioctls are private interfaces since they are intended to be used only by the Metamucil product. If the Metamucil product needs to change these ioctls in the future, they can do so without coordinating with any other projects, since no other projects may use these ioctls. Likewise, the nfssys system call is used to communicate between the kernel- and user-level portions of NFS.

    Project Private interfaces also occur in libraries where one module needs to call a private routine in another module in the same library. These internal routines have been visible to users of the library (although normally they are named with an underscore prefix to distinguish them as private) only due to deficiencies in our library construction tools (corrected by Solaris 2.5's "symbol-hiding" loader).

    Also, Project Private interfaces may be provisional or in transition. The uadmin cpu control functions are Project Private because they will change form before appearing as Standard interfaces, and in the meantime we don't want anyone depending on them.

    Sadly, many kernel procedures are Project Private interfaces (instead of Internal interfaces) because they are visible to dynamically loaded kernel modules.

    Once an interface is classified Project Private by an ARC, changes to that interface need not be ARC approved.

    Any use of the interface from outside the project would involve negotiating a "contract" with the interface providers; an ARC must review and approve the classification change to Contracted Project Private and the terms of the contract.

    Contracted Project Private
    (formerly Contract Private, but so was what is now Contracted Consolidation Private)

    This stability level is the same as Project Private, except that a contract has been put in place between the provider and consumer of the interface. The contract describes special arrangements made for the stability of the interface. This can be used, for example, to allow exposure of the interface to a specific consumer in a different consolidation.

    An ARC must review, approve, and archive a contract between the provider and consumer of the interface. Any change to the contract, the interface, or the specification requires reapproval.

    Internal
      Specification None (or solely internal to the project)
    Incompatible Change micro release (x.y.Z)
    ARC review of Specs No ("don't ask, can't tell")
    Examples procedures internal to any program (not in lib)

    Internal interfaces are not visible by any means to customers -- or anyone outside the project's build -- without source code. Library interfaces, system calls, network protocols, and file formats cannot be internal interfaces. Internal interfaces need not be reviewed or classified by an ARC.

    Modifiers

    Modifiers may prefix a compatibility level to modify its meaning.

    Contracted

    The modifier "Contracted" may be applied to any interface classification level (although it makes little sense to apply it to Committed). It serves to indicate that one of more consummers have been granted additional privileges with respect to the use of the interface.

    Care must be taken not to overuse Contracted interfaces. By their very nature, they require more detailed and interface-specific attention than their non-contracted equivalents, so that they impose additional hidden costs on the engineering community. Although a Contracted interface may superficially appear to be a cheap answer to a design problem, it is likely that a non-contracted but more stable interface will cause fewer problems in the long run.

    The most common usage is to apply Contracted to a Project Private or Consolidation Private interface to allow a controlled set of consumers outside of the normal domain of the normal interface classification level to consume the interface subject to a set of restrictions or conditions expressed in a contract.

    Example: If a Propect Private interface needs to be used by another entity within a consolidation, but it is not appropriate for it to be used by everyone else in that consolidation, it would use Contracted Project Private with a specified list of contractees instead of the more general Consolidation Private.

    The other common usage is to allow a Sun product to use an Uncommitted or Volatile interface supplied by another consolidation.

    A boilerplate contract form exists (targeted at interface being Consolidation Private).

    The minimal requirements of a contract are that it identifies the functional supplier and proposed consumers of the interface in terms of product (not management) structure and states the process to coordinate change in the event of an incompatible change to the interface. In rare cases, the process may be as minimal as notification.

    Contracts are reviewed, approved and archived by the ARCs just as projects are.

    An interface becomes "Contracted" with the approval of the first contract. It is worth noting the intent to allow contracts to be written against an interface as part of the initial submission, but the Contracted modifier is only officially applied with approval of the first contract.

    Obsolete

    The Obsolete modifier indicates an interface that is "deprecated" and/or no longer advised for general use. An existing interface may be downgraded from some other status (such as Committed or Uncommitted) by the application of the Obsolete modifier to encourage customers to migrate from that interface before it may be removed (or incompatibly changed).

    If the interface is to be removed (or incompatibly changed) in a release where its former stability level would not have allowed such a change, a proactive program to communicate to customers the change in commitment must precede the change.

    Former
    Classification
    Release Type Obsolescence
    allowed?
    Notification
    Needed?
    Removal
    Allowed?
    Committed Major Yes Maybe* Yes
    Minor Yes Yes Yes
    Micro Yes Yes No
    Patch No -na- No
    Uncommitted Major Yes No Yes
    Minor Yes Maybe* Yes
    Micro Yes Yes No
    Patch No -na- No
    Volatile Major Yes No Yes
    Minor Yes No Yes
    Micro Yes No Yes
    Patch Yes No Yes

    ________
    [*] For some interfaces, the ARC may find such a communication program appropriate before removing an interface, even if the release level nominally allows such a change.
    ________

    The standard program to communicate a change in commitment requires:

    1. Demonstration of support by the PAC responsible for the deliverable(s) containing the interface. Such support can be demonstrated by a change to strategy document or resolutions taken in meetings and documented in the minutes.

    2. One year's notice to the customer base and the product development community of the intended obsolescence of the interface. This requirement ensures that no further commitments against the interface are created and gives those affected by future removal of the facility a chance to make alternative arrangements.

      The year must elapse after the notice and prior to the delivery of a product that contains a change incompatible with the present status of the interface.

      Acceptable means of customer notice includes letters to customers on support contracts, release notes or product documentation, or announcements to customer forums appropriate for the interface in question.

      Mail to all-smi-engineering@sun.com is considered to be the standard means of providing notice to the Sun internal product development community. Other communities using this taxonomy are expected to have their own notification distribution mechanisms.

      The notice of obsolescence is considered to be "public" information in that it is expected to be available freely to the customers. It is not intended that this require specific actions to "publish" the information, such as press releases or similar forms of publicity.

    3. Where technically feasible, inclusion in the release where the interface is declared Obsolete of a warning mechanism if the interface is used. The mechanism should produce a message of the form
      The application uses interface which has been declared obsolete and may not be present in versions of <product> of released after <date>. Please notify your support person. See XXX for more information.
      One suggested method is to use syslog(3), with a level of "LOG_WARNING". A method for turning off the warning message should also be provided. Common sense should apply in determining how often the warning should appear.
    4. Information in the User Documentation that contains the following:
      • An explanation of the meaning of Obsolete.
      • An indication of the kinds of warning messages that may appear.
      • A suggesting that the customer ask their support person to contact the vendor of any application that causes such a warning to appear.
      • General instructions for turning off the warning messages.
      • A list of the Obsolete interfaces contained in this release, the earliest that they may disappear, the kind of warning that might appear, and the method for disabling the warning.

    Proposals to downgrade an interface through this mechanism must be approved by an ARC before "core" documentation may be altered to identify the interface as Obsolete. Release notes may warn of the possibility of removal with either ARC or PAC/P-Team approval. (A warning that the interface *may* be removed in a future release could be included without ARC approval, but the ARC may not deem such notice alone as sufficient notification to customers to "start the 1-year clock".)

    A follow-on project to perform the actual feature removal in a forthcoming minor or major release (after the timeout period expires) requires architectural approval to ensure that the requirements of the obsolescence policy have been met. Provided they have been met, approval will be straightforward.


Advice


Glossary


Implementation

    Projects are expected to document all "non-Internal" and "non-Project Private" interfaces in their ARC reviews, and, for Public interfaces, cause their man pages to contain this information as well.


Conformance

    The project materials submitted for ARC approval must contain this information. Without this information, the ARCs will issue a NEED-SPEC requirement and ARC approval will not be granted without this information.


Exemptions

    Contracted Stability Levels

    Exceptions to the terms of a classification are allowed in the form of a "contract" between the provider and consumer of the interfaces. See the Policy Details for more information.

    Violating existing stability expectations

    Although being absolutely stable tends to be good thing for isotopes, relationships and interfaces, there are times when it is in the best interest of both the supplier and consumer to break a stability commitment. The following is a list of situations where the ARCs have allowed projects to violate an interface stability commitment:

    1. Security holes where the vulnerability is inherent in the interface.
    2. Data corruption (silent or otherwise) where the vulnerability is inherent in the interface.
    3. Standards violations uncovered by a change in interpretation or enhancement of conformance tests.
    4. An interface specification which isn't controlled by the final implementation provider has been changed incompatibly and the vast majority of interface consumers expect the newer interface.
    5. Not making the incompatable change would be incomprehensible to our customers. One example of this would to have not incompatably changed pcfs when Microsoft abandoned the 8.3 naming restrictions.

    Incompatible changes allowed by exception should always be delivered in the "most major" release vehicle possible. However, often the consequences of the vulnerabilities or contractual branding requirements will force delivery in a patch.

    Every effort should be made to provide prominent and clear notification to the interface consumers as far in advance of the change as is possible and it may be appropriate to provide "impact mitigation" tools.

    A process note is that it should be a rare case where an exception to the interface stability commitment level is approved through a fast-track review. Even if the need is obvious and non-controversial it is valuable that the opinion record the rationale to increase the available precedent information available.


Appeals

    Discuss at your project's ARC review.


CaseHistory

    CaseTypeNameComment
    PSARC/1992/021Unknown   Contract Private
    PSARC/1993/226OnePager "Obsolete" Interface Taxonomy addition   Obsolete
    PSARC/1994/084FastTrack Improvement of Obsolete classification   Improved Obsolete
    PSARC/1994/167FastTrack Committed Private interface classification   Committed Private
    LSARC/1993/100FastTrack ACL support for dump and restore   Deprication of Permanent, Add notation on Import, Export
    PSARC/1995/347OnePager PC Share Reservation Fcntl Interface   Clarification of Contract Private
    PSARC/1995/351FastTrack Publishing Commitment Levels   Stable, Evolving, and Unstable
    PSARC/1998/001OnePager Partner-Private Interfaces   Partner Private
    PSARC/2001/313FastTrack External Interface Taxonomy   External
    PSARC/2001/421FastTrack Contracted Stability Levels   Contracted Stability Levels
    PSARC/2005/220FastTrack New Public Taxonomy   New Public Taxonomy


ManPages

    DocumentDescription
    attributes(5)Solaris 2.6 added support for documenting stability levels


References

    Widespread application of these stability classifications allows us to create software that will reliably continue to function correctly on subsequent minor releases of the operating system (or other asynchronously-delivered software with which it interoperates). This requires that the software, particularly our unbundled software, does not depend on interfaces with inappropriate risk of instability. Publication of these stability classifications to our customers allows developers outside Sun to do the same. Of course, we must also avoid incompatible changes that renege on our commitments.

    All incompatible changes should be carefully considered and reconsidered. Alternatives that keep backward compatibility should be explored. In the past, simply asking engineers to use their best judgement and consider backwards compatibility did not achieve adequate compatibility. Some poor decisions were made and customers were greatly dissatisfied. The ARC process, and interface stability classifications in particular, attempt to prevent such errors from being made in the future. Key process steps are:

    1. establish the commitment,
    2. articulate the commitment (in the ARC review),
    3. (the ARC and the developers) review the interface and commitment, and
    4. record the approved commitment (in the SAC archives and on the ARC opinion).
    5. Then publish the commitment to customers.

    Having established a commitment, we strive to live within its boundaries in subsequent projects by carefully considering the consequences of any incompatible change and by setting customer expectations via product release numbering. Though an interface has a stability level that "allows" incompatible change in a certain level of release, the ARC will review a justification of a proposed incompatible change, to ensure that the positive effects of the incompatibility outweigh the negative for customers.

    As a sweeping generalization, Sun intends to make more functionality more stable over time. Downgrading stability classifications is retracting a commitment, and is normally not normally permitted unless the interface is being reclassified as Obsolete. This process is described under the classification "Obsolete" below.

    Customer Documentation of Interface Stability

    Solaris 2.6 created an ATTRIBUTES section near the end of each manpage, with a table that can include a brief "Stability Level". One of the few manpages that has done so in Solaris 2.6 is ufsdump(4), which says:

    ___________________________________
    | ATTRIBUTE TYPE |  ATTRIBUTE VALUE|
    |___________________________________
    | Stability Level|  Uncommitted    |
    |________________|_________________|
    
    As projects edit manpages, they must determine stability classification(s), get ARC approval, and reflect those stabilities on the manpages. If a manual page describes multiple interfaces with different stabilities, these should all be spelled out. For example:
    utility name & command line options	Committed
    Attribute=Value output format		Committed
    reported attributes			Uncommitted
    diagnostic messages			Not-An-Interface
    

    The attributes(5) manpage explains the attributes, including the (Open) Stability Levels which might appear on external manpages, and which set expectations for what kinds of changes are likely to be introduced into what types of release. These explanations include some legal "wiggle room," so they may appear more lax than this document; this document should be assumed authoritative.

    If a project team is unwilling to accept these standard boilerplate commitments, the team must obtain an ARC-approved exemption and ensure that the proposed documentation will adequately set customer expectations.

    White papers, user's guides, or other documentation describing interfaces must also include stability classifications. These documents should either explain Sun's stability classifications using the text Legal already approved or reference the attributes(5) manpage (from Solaris 2.6 or later or on docs.sun.com).


PolicyChangeLog

    VersionDateByDescription
    3.1  06/07/26  plocher  includes jek3's changes to the public stability levels:
    Committed, Uncommitted, Volatile, Not-An-Interface, Obsolete  
    2.11  03/04/23  plocher  updated comments re: engineering alias for Obsolete notifications  
    2.10  02/12/04  plocher  changed Owner=SAC  
    2.9  02/11/22  plocher  Added Owner=SAC to BPs  
    2.8  02/07/27  plocher  added Type=Policy  
    2.7  02/07/18  plocher  converted to "best practice" format  
    2.6  01/12/05  andy  changes from PSARC/2001/313 and PSARC/2001/421  
    2.5  98/05/05  markk  eliminate leading blanks  
    2.4  98/05/05  markk  corrected a bad line wrap  
    2.3  98/05/05  markk  added partner private per 1998/001  
    2.2  97/10/23  stanton  Added reference to Solaris 2.6's attributes(5) manpage.  
    2.1  96/05/06  stanton  Bumped version number to reflect important term change
    (even though it was a few versions back).  
    1.18  96/05/06  stanton  Relaxed SPF protection factor with Marty's approval.
    All Sun engineers (and probably other Sun employees) need to know.  
    1.17  96/04/25  stanton  Added more propoganda about why we bother to establish stability classifications
    for interfaces; added Considerations from projects, including library projects;
    changed "Private" back to "Closed" for specifications; added definitions.
    Evolving I/Fs are not necessarily under Sun's control or becoming Stable.  
    1.16  96/02/13  stanton  Ready for SAC review; still has open issues.  
    1.15  96/01/25  stanton  Merged in exactly the text from Mark Kampe (Jan 18, 1996).  
    1.14  95/12/08  stanton  Added definition of "Consolodation" (unapproved).  
    1.13  95/02/16  stanton  Reacting to someone's (Glenn's?) comments -- ARC approval is *always*
    required for non-private interface changes.  
    1.12  94/11/11  stanton  Extended discussion of Standard classification to address
    single-source third-party specifications.  
    1.11  94/11/11  stanton  Altered the wording to imply that Permanent is an obsolete classification.  
    1.10  94/11/01  stanton  Added Committed Private from PSARC/1994/167, and
    a note about Permanent from LSARC/1993/100.
    Also added definitions for Import and Export.  
    1.9  94/05/31  chessin  updated to include PSARC/1994/084  
    1.8  94/01/28  chessin  put in *real* definition of Obsolete, as approved by PSARC/1993/26;
    the "summary" lost significant information. Also restored SCCS keywords.  
    1.7  93/06/14  stanton  Added Contract Private (per PSARC/1992/021) to Frame and ASCII versions.
    Arguably needs definition for "import" and "export"
    since they don't mean "consume" and "produce" (respectively),
    but something closer to "utilize" and "define".  
    1.6  93/06/14  stanton  Updated to match Frame "it.doc" version 1.1 by adding Obsolete,
    approved as PSARC/1993/226. Still needs addition of Contract Private,
    approved with PSARC/1992/021.  
    1.5  92/09/03  shannon  final approved version was never checked in  
    1.4  92/04/21  lhatt  removed header and renamed file to interface.taxonomy  
    1.3  92/04/14  lhatt  Integrate changes from Bill Shannon.  
    1.2  92/04/14  lhatt  Changes from product to consolidation.  
    1.1  92/04/14  lhatt  CodeManager Uniquification: doc/interface.taxonomy/interface.taxonomy.txt
    date and time created 92/04/14 09:56:00 by lhatt