Repository navigation
fix: revalidate compact cache projections across six real read clients - #115
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
串行集成核验完成:已读全部4文件diff、评论及review threads(0未解决)。精确head 本次仅Refs #76/#78/#82/#83,不关闭总体验收。将使用固定head合并并读取main实际tree;后续#112/#103需保留本修复。无生产部署/资金/真实外发。 |
…rization Preserve #112/#116 recovery history and merged #115/#117 guards. Exact combined tree 1a8a28f passed CI36404029543 and Recovery safety36404029733: 1544 core + 8 conformance, four SHA-verified artifacts with exact disjoint JUnit node IDs, zero failures/errors/skips, wheel/sdist. Both integration-test failures fixed without changing quarantine or OS-admin/console gates. Reviewed exact head. Refs #64, #65, #68, #69, #70, #81, #83, #84, #85. Full policy promotion and production field evidence remain incomplete; no production actions.
Scope
Refs #76, #78, #82, #83. Narrow C increment; do not close the umbrella acceptance issues.
Fix
discovery.get's default compact projection validator mismatch. Full and compact representations are matched exactly only after current authorization and projection; array nulls, fields and persisted Revision/signature bytes are not normalized. A stale digest cannot authorize a read.Evidence
Base
67401759a853c69fc5cb234982e1f7020b650542; feature head3e2763106e7755a60f6836476a16279e37ca5c78; expected reviewed treed6e03d603b1135d704c97b8434edb13c7454602e.Local Python 3.13.5 unit reproduction: 4 failed/8 passed before, 12 passed after. Combined Python 3.15.0rc2 / real PostgreSQL 17.11 / Valkey 8.1.1: 18 passed, 0 failed, 0 skipped, 87.27s. Six actual HTTP/PathGET/GraphQL/MCP HTTP/CLI subprocess/MCP stdio clients exercise default current, historical, meta and history projections before and after direct-grant revocation. Tests compare complete business rows and exact content-file hashes, and forbid content mutation, job notification, SMTP/Webhook/sandbox invocation on reads.
The final-head Python 3.15/PostgreSQL16/Valkey9 four core shards, exact JUnit node-ID gate, conformance and wheel/sdist are not yet verified. This PR is not ready to merge until that run and refreshed base/head/diff/reviews are checked. No skips, xfails, allowlists, larger timeouts or production bypasses.
Only four product files change. Auxiliary offline-toolchain and patch transport workflows are not included. No production deployment, Root/PIN/secrets/funds/recovery/deletion or real outbound sends. #112/#103 remain owned by A/B; refresh their actual merged/head status rather than repeat their work. Remaining C scope is indexed in
docs/C_READ_ACCEPTANCE.md.