-
Notifications
You must be signed in to change notification settings - Fork 0
fix(data-integrity): reject non-JSON primitive snapshot values #231
Copy link
Copy link
Open
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: operationsOperability, observability, readiness, SLO, backup, or retentionOperability, observability, readiness, SLO, backup, or retentionarea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Description
Activity
Metadata
Metadata
Assignees
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: operationsOperability, observability, readiness, SLO, backup, or retentionOperability, observability, readiness, SLO, backup, or retentionarea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Current authoritative state
This non-JSON primitive defect is repaired on canonical Draft PR #218 /
fix/document-snapshot-cycle-217. Protected shipped truth remainsmain@3b38ead2d00f44eb578d0689087b9293b3dabe1e; current exact Draft head iseafd5462db71654e7fa85fd3aa8804d7c51c55f6, 23 ahead / 0 behind from that exact merge base with only four intended snapshot files changed.Current validation accepts only JSON-compatible primitive leaves (
null, boolean, string, finite number) plus already-validated arrays/plain objects and rejectsundefined, functions, symbols, bigint and non-finite numbers through stable payload-redacted errors. Representative RED isaeacdb0d96f5938f3e3b60dd2f8c1f8f6d7135ff. Exact-head CI32101276070, Security32101276077, and SAST32101276001are completed / success; formal submitted reviews are 0.The repair is active-PR truth only. Keep #218 Draft/unmerged while #118 owns
v0.6.0operational acceptance and independent latest-push approval plus every applicable central gate remain incomplete. Do not create a competing snapshot writer, transfer predecessor evidence, self-approve, weaken gates, move protected main, or fabricate release identity.