-
Notifications
You must be signed in to change notification settings - Fork 0
fix(reliability): reject accessor-backed document snapshot JSON without invoking getters #219
Copy link
Copy link
Open
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: operationsOperability, observability, readiness, SLO, backup, or retentionOperability, observability, readiness, SLO, backup, or retentionarea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Description
Activity
Metadata
Metadata
Assignees
Labels
area: authAuthentication, authorization, identity, or tenant isolationAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainCI, GitHub Actions, checks, release, or supply chainarea: operationsOperability, observability, readiness, SLO, backup, or retentionOperability, observability, readiness, SLO, backup, or retentionarea: securitySecurity boundary, hardening, or vulnerability preventionSecurity boundary, hardening, or vulnerability preventionbugSomething isn't workingSomething isn't workingpriority: mediumNormal-priority or P2 workNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmentOpen issue has an organization taxonomy assignmenttype: bugDefect or incorrect behaviorDefect or incorrect behavior
Current authoritative state
This accessor-safety defect is repaired on canonical Draft PR #218 /
fix/document-snapshot-cycle-217. Protected shipped truth remainsmain@3b38ead2d00f44eb578d0689087b9293b3dabe1e; current exact Draft head iseafd5462db71654e7fa85fd3aa8804d7c51c55f6, 23 ahead / 0 behind from that exact merge base with only four intended snapshot files changed.Current snapshot validation uses own keys/descriptors and never evaluates accessors; hostile reflection/proxy failures become stable payload-redacted
RangeErrorboundaries. Representative accessor RED is5e054c157a0b5c7c592185e62689d5bdec0da29d. Exact-head CI32101276070, Security32101276077, and SAST32101276001are completed / success; formal submitted reviews are 0.The repair is active-PR truth only. Keep #218 Draft/unmerged while #118 owns
v0.6.0operational acceptance and independent latest-push approval plus every applicable central gate remain incomplete. Do not create a competing snapshot writer, transfer predecessor evidence, self-approve, weaken gates, move protected main, or fabricate release identity.