fix(score): publish attachments through private bounded storage - #1241

Draft

seonghobae wants to merge 169 commits into

fix/score-attachment-publication-1239

Commits on Aug 16, 2026

test(score): require bounded validated PDF reads
seonghobae
committed
f83a1ba
refactor(core): expose bounded score reader module
seonghobae
committed
d659d9d
refactor(core): preserve public API through root module
seonghobae
committed
fc1af87
fix(score): bound stored PDF reads before allocation
seonghobae
committed
1df5fe0
fix(score): use bounded native PDF reader
seonghobae
committed
521fe12
style(score): keep bounded reader rustfmt-clean
seonghobae
committed
ca20dc5
docs(changelog): record bounded stored-score reads
seonghobae
committed
e6d31ee
fix(core): preserve desktop-core package contract
seonghobae
committed
051e39d
test(score): cover non-file stored score reads
seonghobae
committed
c11af77
test(score): prove same-descriptor growth detection
seonghobae
committed
f86e266

Commits on Aug 26, 2026

merge(develop): refresh bounded score PDF read lane
seonghobae
committed
faf565d

Commits on Aug 31, 2026

chore(ci): refresh bounded PDF exact-head gates
seonghobae
committed
c2c86b8

Commits on Sep 19, 2026

test(score): require bounded private attachment publication
seonghobae
committed
f8ba40d
fix(score): add private bounded attachment publisher
seonghobae
committed
6e8c3a6
fix(score): export attachment storage boundary
seonghobae
committed
d40f6e1
fix(score): wire bounded private attachment publication
seonghobae
committed
6eaa94f
test(score): pin Tauri attachment storage wiring
seonghobae
committed
ea00f0c
docs(score): trace private attachment publication boundary
seonghobae
committed
737526d
ci(score): add exact-head native storage regressions
seonghobae
committed
9584ab3
ci(score): scope native lane to owned score tests
seonghobae
committed
bcb6c2e
test(score): use valid UUIDv4 attachment ids
seonghobae
committed
69463eb
fix(score): close Windows stage handle before publication
seonghobae
committed
82496a0
docs(score): record Windows publication handle boundary
seonghobae
committed
b54151e
docs(score): add authoritative storage references
seonghobae
committed
a2e2d55
test(score): preserve replaced stage during Windows cleanup
seonghobae
committed
a7373ca
fix(score): bind Windows stage cleanup to file identity
seonghobae
committed
4997646
docs(score): trace Windows stage identity repair
seonghobae
committed
880ec6b
merge(develop): restack bounded score-read owner non-force
seonghobae
committed
1f48774
merge(score): non-force restack attachment storage on read owner
seonghobae
committed
7d30d14
test(score): require owned attachment deletion boundary
seonghobae
committed
06cc24a
fix(score): bind attachment deletion to owned OS authority
seonghobae
committed
09610fb
test(score): expose Windows stage cleanup pathname race
seonghobae
committed
89f136e
fix(score): delete Windows stages through owned handles
seonghobae
committed
d36969b
test(score): verify Windows ACL inheritance on publication
seonghobae
committed
579a67d
docs(score): record Windows ACL inheritance acceptance
seonghobae
committed
48e6195
test(score): reproduce final publication identity swap
seonghobae
committed
3274560
fix(score): attest final attachment object identity
seonghobae
committed
91c2403
docs(score): trace final publication identity contract
seonghobae
committed
18ab865
test(score): distinguish absent attachment removal
seonghobae
committed
9ba8c0b
fix(score): classify removal absence without masking unsafe states
seonghobae
committed
4e1c019
fix(score): expose removal resolution authority
seonghobae
committed
551f11c
test(score): use valid score identities in retention regressions
seonghobae
committed
a989e0e
fix(score): preserve unsafe removal resolution errors
seonghobae
committed
3c7e82a
ci(score): include retention authority regressions
seonghobae
committed
7fab4fd
docs(score): trace removal absence classification
seonghobae
committed
f98e5a4
test(score): require an existing retention workspace
seonghobae
committed
22749b8
fix(score): require retention workspace before absence
seonghobae
committed
6444f21
docs(score): trace retention resolution RED to GREEN
seonghobae
committed
3632524
test(score): prove restart readback across process boundary
seonghobae
committed
297327d
ci(score): run restart readback acceptance
seonghobae
committed
0e4070e
docs(score): trace successful restart readback acceptance
seonghobae
committed
89a3909
test(score): reproduce process-killed staging orphan
seonghobae
committed
2c55e34
test(score): execute interruption recovery regression
seonghobae
committed
45ae83d
fix(score): recover process-abandoned staging under workspace lease
seonghobae
committed
ad2c463
fix(score): route attachment publication through crash recovery
seonghobae
committed
a1f21f1
test(score): gate recovery module and process-kill regression
seonghobae
committed
f4962d2
docs(score): record process-abandoned staging recovery
seonghobae
committed
a49e978
docs(score): trace process-abandoned staging recovery
seonghobae
committed
8ce7971
test(score): prove lease contention and conservative recovery
seonghobae
committed
17717ab
test(score): prove live-writer exclusion across processes
seonghobae
committed
abed538
test(score): require metadata durability before attachment acceptance
seonghobae
committed
5450dbb
fix(score): order attachment lifecycle behind project persistence
seonghobae
committed
48d7784
docs(score): trace metadata-first detach ordering
seonghobae
committed
26e8292
docs(score): fix Win32 disposition reference
seonghobae
committed
5944ecf
docs(score): restore exact ACL API reference
seonghobae
committed
bbfa0b5

Commits on Sep 20, 2026

test(score): require restart recovery inventory
seonghobae
committed
7979ea2
test(score): execute recovery inventory contract
seonghobae
committed
25fcd0a
fix(score): expose stable published-object inventory
seonghobae
committed
a9acc39
fix(score): re-export recovery inventory contract
seonghobae
committed
f7b3191
fix(score): resolve inventory through canonical reader owner
seonghobae
committed
1765fa0
docs(score): trace restart object inventory boundary
seonghobae
committed
362d335
ci(score): track recovery inventory traceability
seonghobae
committed
4c72d9e
test(score): reject stale recovery receipt after same-id republish
seonghobae
committed
4d8d6c1
test(score): isolate ABA receipt regression
seonghobae
committed
c1a4c78
refactor(core): adopt shared content identity kernel
seonghobae
committed
843704b
feat(score): expose content-bound recovery receipts
seonghobae
committed
3dc2cf7
fix(score): bind recovery mutation to content receipt
seonghobae
committed
4b75169
test(core): retain shared content identity vectors
seonghobae
committed
000dcd4
ci(score): own recovery content receipt regression
seonghobae
committed
cec2a62
docs(score): trace recovery object receipt boundary
seonghobae
committed
b252cac
test(score): create recovery workspace before publication
seonghobae
committed
ee7995e
docs(score): record recovery fixture RCA
seonghobae
committed
43fd466
test(score): reproduce post-link interruption recovery
seonghobae
committed
1ce4bb8
fix(score): recover verified post-link publication state
seonghobae
committed
48a7ccf
docs(score): trace post-link crash recovery
seonghobae
committed
b24770d
ci(score): own post-link recovery traceability
seonghobae
committed
943256e
docs(score): currentize post-link crash recovery
seonghobae
committed
5ef0ab4
docs(score): currentize recovery inventory semantics
seonghobae
committed
f8dca4e
test(score): require successful-publication durability boundary
seonghobae
committed
49e886f
fix(score): gate publication success on metadata durability
seonghobae
committed
76efc35
fix(score): route publication through durability wrapper
seonghobae
committed
18d74a4
ci(score): own publication durability regressions
seonghobae
committed
e208821
fix(ci): restore exact checkout action pin
seonghobae
committed
0c99ef6
docs(score): trace successful-publication durability boundary
seonghobae
committed
84e51ad
fix(score): keep metadata barrier inside storage lease
seonghobae
committed
2804d00
fix(score): hold storage lease through durability barrier
seonghobae
committed
542b46d
fix(score): keep publication transaction in storage owner
seonghobae
committed
8371642
test(score): bind durability barrier to storage lease
seonghobae
committed
f923474
docs(score): bind durability barrier to storage lease
seonghobae
committed
800d775
test(score): expose Unix stage cleanup pathname race
seonghobae
committed
92b34e5
fix(score): pin Unix stage cleanup authority
seonghobae
committed
46ff8f9
test(score): route Unix stage cleanup contract through owner CI
seonghobae
committed
a4b753f
chore(score): remove unowned test path
seonghobae
committed
5dfea0e
ci(score): execute Unix stage cleanup contract
seonghobae
committed
6965c05
docs(score): trace Unix stage cleanup authority
seonghobae
committed
4224dfb
ci(score): own Unix cleanup traceability
seonghobae
committed
cd9b105
test(score): require stage identity continuity during recovery
seonghobae
committed
aa3b05f
fix(score): bind recovery cleanup to admitted stage content
seonghobae
committed
a0e4f62
test(score): match recovery cleanup call signature
seonghobae
committed
c2634de
docs(score): trace admitted-stage cleanup continuity
seonghobae
committed
41c43d4
test(score): add interrupted-stage fault recovery evidence
seonghobae
committed
a5e1abd
test(score): require owner execution of fault recovery evidence
seonghobae
committed
f7ed8d6
ci(score): execute fault recovery regression
seonghobae
committed
077512d
docs(score): trace interruption and permission recovery evidence
seonghobae
committed
687f702
ci(score): track fault recovery traceability
seonghobae
committed
d041047
test(score): cover Windows ACL-denied recovery
seonghobae
committed
3bee635
ci(score): own Windows ACL recovery regression
seonghobae
committed
78b775b
docs(score): trace Windows ACL recovery evidence
seonghobae
committed
abadc9d
ci(score): track Windows ACL recovery traceability
seonghobae
committed
117ebf8
test(score): add kernel write-failure recovery evidence
seonghobae
committed
22779b7
ci(score): execute kernel write-failure recovery regression
seonghobae
committed
c1ff55f
docs(score): trace kernel write-failure recovery contract
seonghobae
committed
9251cfa
test(score): reproduce real macOS ENOSPC publication failure
seonghobae
committed
64466c7
ci(score): execute capacity-exhaustion recovery regression
seonghobae
committed
16f559c
test(score): synchronize fixed-volume exhaustion fixture
seonghobae
committed
b692215
test(score): repair macOS capacity image provisioning
seonghobae
committed
3c64fb3
docs(score): trace actual ENOSPC recovery evidence
seonghobae
committed
1841375
test(score): define owner-only fault injection feature
seonghobae
committed
e5323d3
test(score): require publisher termination checkpoint before metadata barrier
seonghobae
committed
8142720
test(score): run publisher termination regression in native owner lane
seonghobae
committed
a23313b
fix(score): expose deterministic pre-barrier termination checkpoint
seonghobae
committed
5a571e8
docs(score): trace real publisher pre-barrier termination boundary
seonghobae
committed
c12bf5d
fix(score): fail closed if fault injection reaches release builds
seonghobae
committed
61f94a4
test(score): prove fault injection cannot ship in release builds
seonghobae
committed
03b6b3c
docs(score): bind termination fault injection to release exclusion
seonghobae
committed
0be5683
test(score): require real publisher termination at all publication boundaries
seonghobae
committed
8f31869
refactor(score): share owner-only termination checkpoint within storage boundary
seonghobae
committed
1a38146
fix(score): expose real publisher termination boundaries around publication
seonghobae
committed
1f1377c
docs(score): trace real publisher termination across publication boundaries
seonghobae
committed
ffb426f
test(score): require desktop executable termination recovery
seonghobae
committed
81096cc
test(score): execute desktop termination owner contract
seonghobae
committed
d2cf4e0
fix(score): gate desktop termination harness behind owner feature
seonghobae
committed
8170def
fix(score): add owner-only desktop package fault harness
seonghobae
committed
c63002d
fix(score): keep fault harness out of default desktop targets
seonghobae
committed
a832db1
fix(score): bind termination regression to owner harness binary
seonghobae
committed
6080fc2
test(score): own desktop-package fault harness in native gate
seonghobae
committed
e66decc
fix(ci): select owner harness binary for desktop termination test
seonghobae
committed
0fd8867
fix(score): drive package harness from core owner regression
seonghobae
committed
8dbbbbc
fix(score): keep package harness regression in core owner lane
seonghobae
committed
949b62d
fix(ci): isolate desktop fault harness from Tauri main target
seonghobae
committed
c670904
docs(score): trace desktop-package termination harness RCA
seonghobae
committed
1d0bb71
test(score): require receipt-bound detach deletion
seonghobae
committed
d8f38b8
fix(score): bind detach deletion to content receipt
seonghobae
committed
c8dbe1c
test(score): currentize retention contract for receipt delete
seonghobae
committed
a24637f
test(score): require receipt commands in Tauri manifest
seonghobae
committed
dc19a7e
fix(score): register receipt-bound Tauri detach
seonghobae
committed
e342708
test(score): expose stale project-context score mutations
seonghobae
committed
470aceb
fix(score): invalidate stale project-context score operations
seonghobae
committed
7dfa1c6
docs(score): trace project-context freshness boundary
seonghobae
committed
bc74d9b
test(score): isolate project-context regression state
seonghobae
committed
a7634e4
ci(score): own project-context traceability
seonghobae
committed
70c4ceb
fix(score): clear stale project visuals before paint
seonghobae
committed
e95de49
docs(score): record pre-paint project-context boundary
seonghobae
committed
d2c58b6
test(score): cover detach selection race
seonghobae
committed
721bddc
fix(score): clear current selection after accepted detach
seonghobae
committed
9f63bd5
docs(score): trace detach selection freshness
seonghobae
committed
0062f1f
test(score): preserve same-song updates across async attachment work
seonghobae
committed
8dd038b
fix(score): persist from latest same-song snapshot
seonghobae
committed
8529ec0
docs(score): trace same-song snapshot freshness
seonghobae
committed
b29b7b5