Current authoritative state
Protected shipped truth is exact main@3b38ead2d00f44eb578d0689087b9293b3dabe1e. This detached-autosave evidence resource defect is repaired on canonical Draft PR #184 / branch fix/autosave-array-key-preflight-183, which explicitly Closes #183. Current exact Draft head is 62f406c2321492ce3161d2f72f45794bdfde9034; the branch is synchronized with protected main and remains Draft/unmerged.
Implemented active-PR contract
isDeeplyFrozenDocumentJson() now rejects impossible array child counts before explicit whole-array Reflect.ownKeys() enumeration, accounts for already-inspected/pending/candidate children against the 1,000,000-value budget, rejects non-empty children beyond the nesting ceiling before child-descriptor reads, and reads intrinsic array length without invoking a caller get trap. Adjacent same-owner hardening preflights mandatory evidence members/frozen state before whole-record enumeration and rejects impossible digest length before regex scanning.
Accepted dense-array/object semantics, holes/extra/symbol/accessor rejection, aliases/cycles, depth, finite-number/negative-zero, schema and detached-clone validation remain preserved. Failures remain payload-redacted and framework-neutral. No transport, authorization, tenancy, durable persistence, credentials, migrations, retention, deployment, durable audit, Yjs/provider, network/model or durable PDF authority moved into Inkspan.
Verification / integration boundary
#184 records the RED/GREEN lineage and exact-head tests for array/traversal preflight and evidence-record hardening. Current exact-head workflows/reviews/threads and live governance must be refetched before any lifecycle action; predecessor evidence does not transfer.
Keep this issue open until #184 integrates under then-live protected-main governance. #184 remains Draft/unmerged while #118 owns exact protected v0.6.0 publication/provenance acceptance. Do not create a competing autosave-evidence writer, self-approve, weaken gates, move protected main, or represent this active-PR behavior as shipped.
Current authoritative state
Protected shipped truth is exact
main@3b38ead2d00f44eb578d0689087b9293b3dabe1e. This detached-autosave evidence resource defect is repaired on canonical Draft PR #184 / branchfix/autosave-array-key-preflight-183, which explicitlyCloses #183. Current exact Draft head is62f406c2321492ce3161d2f72f45794bdfde9034; the branch is synchronized with protected main and remains Draft/unmerged.Implemented active-PR contract
isDeeplyFrozenDocumentJson()now rejects impossible array child counts before explicit whole-arrayReflect.ownKeys()enumeration, accounts for already-inspected/pending/candidate children against the 1,000,000-value budget, rejects non-empty children beyond the nesting ceiling before child-descriptor reads, and reads intrinsic array length without invoking a callergettrap. Adjacent same-owner hardening preflights mandatory evidence members/frozen state before whole-record enumeration and rejects impossible digest length before regex scanning.Accepted dense-array/object semantics, holes/extra/symbol/accessor rejection, aliases/cycles, depth, finite-number/negative-zero, schema and detached-clone validation remain preserved. Failures remain payload-redacted and framework-neutral. No transport, authorization, tenancy, durable persistence, credentials, migrations, retention, deployment, durable audit, Yjs/provider, network/model or durable PDF authority moved into Inkspan.
Verification / integration boundary
#184 records the RED/GREEN lineage and exact-head tests for array/traversal preflight and evidence-record hardening. Current exact-head workflows/reviews/threads and live governance must be refetched before any lifecycle action; predecessor evidence does not transfer.
Keep this issue open until #184 integrates under then-live protected-main governance. #184 remains Draft/unmerged while #118 owns exact protected
v0.6.0publication/provenance acceptance. Do not create a competing autosave-evidence writer, self-approve, weaken gates, move protected main, or represent this active-PR behavior as shipped.