-
Notifications
You must be signed in to change notification settings - Fork 0
fix(reliability): validate runtime image configuration before extension setup #215
Copy link
Copy link
Open
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: dataDatabase, schema, migration, ETL, or lineageDatabase, schema, migration, ETL, or lineagearea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Description
Activity
Metadata
Metadata
Assignees
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: dataDatabase, schema, migration, ETL, or lineageDatabase, schema, migration, ETL, or lineagearea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Current authoritative state
This defect is repaired on canonical single-writer Draft PR #216 /
fix/image-config-runtime-validation-215. Protected shipped truth and the frozenv0.6.0candidate remainmain@3b38ead2d00f44eb578d0689087b9293b3dabe1e; current exact Draft head is85aac6e55b4839b456b6ed464dbab78fd9d402c6. Fresh ancestry resolves protected main as merge base, 15 commits ahead / 0 behind, with onlysrc/extensions/buildExtensionsRuntimeBoundary.test.ts,src/extensions/imageConfigRuntime.test.ts, andsrc/extensions/kit.tschanged.The active implementation fail-closes malformed top-level build options and nested
ImageConfig, uses bounded own-key/descriptor reflection before value reads, validatesmaxSizeBytes/maxDimensionas non-negative safe integers with zero preserving documented disable semantics, validatesqualityas finite[0,1], and preserves valid/default extension, image, paste/drop/upload, package and host-composition behavior. Transport, persistence, authorization, tenancy, credentials, network/model/provider policy, deployment, migration, retention and durable audit remain host-owned.Test-first lineage and exact-head proof
RED lineage includes malformed-container/value head
3995d336c4a8aa06b4632732fadc48816683165a. Current synchronized exact head85aac6e55b4839b456b6ed464dbab78fd9d402c6has repository CI32101702170, Security Scan32101702155, and SAST Semgrep32101702154completed / success. Formal submitted reviews are 0; repository technical success is not qualifying independent approval and does not replace separately applicable central workflows.Integration boundary
The defect is repaired on active Draft #216 but is not protected-main shipped behavior. Keep #216 Draft/unmerged while #118 owns exact
v0.6.0publication/provenance/digest acceptance and while qualifying independent latest-push approval plus every applicable central required workflow remain unsatisfied. Any head/base/ruleset movement requires fresh exact evidence; do not create a competingkit.tswriter, self-approve, weaken gates, transfer predecessor evidence, move protected main, or fabricate release identity.