Glossary
Nexus-specific vocabulary, one or two lines per term. Each entry links to the page that owns the full contract; that page stays authoritative when the two disagree. Standard DataFusion, Arrow, and SQL terms are intentionally not defined here.
Planning and lowering
- Candidate — a complete DataFusion physical plan (or subtree) that
normalization recognizes as potentially executable natively. Every candidate
receives a structured outcome in the
PlanningReport. - Whole relational candidate — relational selection replaces a complete candidate or none of it; Nexus does not extract arbitrary fragments. The one narrow exception is the certified mixed boundary.
- Lowering — translating a recognized candidate into the engine's
QueryPlanIR after DataFusion physical planning has already fixed operator decisions. See Native Lowering & Final Plans. - IR (
QueryPlan) — the engine's closed, DataFusion-free intermediate representation. Unlike DataFusion's openExecutionPlantrait, it is an owned type the engine fully controls. See Why two crates. - Scan facts — the format-neutral description of a source scan (files, schema, pruning facts) that lowering hands to the engine in place of DataFusion source nodes. See The design contract.
- GPU island — an explicit GPU execution fragment entered through a
specialized SQL call (
cugraph_*,cuvs_*), as opposed to GPU work selected from a relational candidate. Counted together with native fragments in coverage results. - Certified mixed boundary — the single supported exception to
whole-candidate replacement: a final CPU
ILIKEfilter over one local-Parquet source, certified by an exact shape-and-ownership proof. See Selection, fallback, and mixed execution. - Final-plan requirement / disposition — a requirement (such as
NoDataFusionCpu) is checked against the exact completed plan; the disposition (DataFusion,Native,Mixed, or terminalRejected) is derived by walking that plan. See Baseline preservation. - Execution domain — which runtime executes each part of the completed
plan: GPU-native fragments and islands versus DataFusion CPU operators. This
is what
nexus_explain_coveragereports before execution.
Admission and runtime
- Admission — the runtime gate that turns a native plan into one bounded
GPU execution: capability-first, rejected locally with structured reasons,
never entered by
EXPLAIN. See Admission & Memory Governance. - Attempt — one bounded native execution of one admitted query on one
selected device. Its evidence is sealed into a
QueryAttemptReport. See Admission & Memory Governance. - Capability proof (
QueryPlanCapabilityProof) — engine-issued, opaque evidence that one exactQueryPlanis executable, carrying its required device capabilities and allocation owners. Callers cannot construct one. See From plan proof to admission. - Admission ticket — a planner-created, lazy admission request; device and grant acquisition wait until the first native stream is polled. See Admission & Memory Governance.
- Grant (
MemoryGrant) — the immutable device-byte budget an attempt receives at commit. It is the ceiling of the attempt's allocation domain and never grows, shrinks, borrows, or moves to another device. See Device profiles and grants. - Ledger (
DeviceLedger) — the per-device integer accounting authority for grants, cache charges, protection, and attempt slots. It is capacity arithmetic, not a residency oracle. See Device profiles and grants. - Envelope (
AdmissionEnvelope) — the physical resources built around a committed grant: attempt lane, root stream, allocation domain, and worker scope. Execution sees it only complete. See Transaction and release lifecycle. - Protection — the queue-fairness reserve for an older waiter that has been overtaken too often: one future slot plus released bytes toward its floor on one compatible ledger. It is not priority or preemption. See Queue and placement.
- Allocation domain — the device-memory accounting scope an attempt allocates within, capped by its grant; each device's resident cache has its own shared domain outside any grant. See Admission and Cache Design.
- Bounded execution — execution that must establish its device-memory bound before GPU work begins; a shape that cannot prove the bound is rejected at planning or admission, never partially run. See Admission & Memory Governance.
Data and caching
- Workspace overlay — a mutable DataFusion catalog layered over a read-only source catalog, giving interactive DDL and short names without teaching the source catalog to accept views. See Lakehouse and workspace boundary.
- Residency — the lifecycle of GPU-cached values:
AttemptOwned -> Evictable <-> Pinned -> Destroyed, with every resident byte charged to the device ledger. See Cache Design. - Provenance — the recorded origin of a GPU-resident value: the device, stream, and producing source or graph contract. Interop hands values forward only within a matching provenance domain instead of round-tripping through host memory. See cuGraph SQL path.
Diagnostics and errors
PlanningReport— the public, structured planning evidence: one outcome per candidate (Selected,NotSupported,NotSelectedByCost). Assert it instead of printed plan text. See Selection, fallback, and mixed execution.- Retry advice — the sealed recovery signal in
QueryAttemptReport, derived only after terminal outcome and GPU cleanup. The engine never retries from it; callers satisfy its prerequisite and submit a new attempt. See Retry and recovery. - Code / kind / status — the three projections of one error identity:
codeis the most specific stable id,kinda coarse grouping,statusthe source condition (Permanent,Temporary,Persistent). See One identity, several projections.