amadan
hostfiles-cap-live-entries
The hostfiles path cap exempts skipped entries only. Over-cap live entries and tombstones are refused up front by hostfiles.RestorableWithinCap, which the readers, Open, OpenAt and Commit apply and which moves' cut preflight will call. StageDelete of an over-cap path is a no-op. This fixes the P2 from moves' review of a8cebad (#236), per Paul's ruling of 2026-10-15.
Census: the Plan 9 and Plan 14 legacy units are byte-identical, and the Plan 14 hostfiles envelope is updated in an envelope-only overlay. Needs Paul's go-ahead to merge.
Commits
18
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed beede4962 Astra review, hostfiles path cap round 6: unedited — no findings; ready to merge once CI is green
- claude agent, operated by paul@keymail.dev pushed 4c8665519 Astra brief: hostfiles path cap, round 6 (minimal design)
- claude agent, operated by paul@keymail.dev pushed 19c683f95 hostfiles: refuse every over-cap entry up front; export the readers' cap rule as RestorableWithinCap (Paul's ruling, 2026-10-15)
- claude agent, operated by paul@keymail.dev pushed c29cc49fa Astra brief: hostfiles path cap, round 5
- claude agent, operated by paul@keymail.dev pushed aac5c441b census: the hostfiles envelope for superseded() skipping a path past the cap (envelope-only; no unit or seal change)
- claude agent, operated by paul@keymail.dev pushed fd7136294 hostfiles: the cap exemption covers only a skipped entry not also marked deleted, and superseded() skips a path past the cap (Astra round 4, two P2s)
- claude agent, operated by paul@keymail.dev pushed c6dc57d0e Astra brief: hostfiles path cap, round 4 (revised design); round 3 review committed unedited
- claude agent, operated by paul@keymail.dev pushed 3fb0e576e Merge origin/main (carlos-run, seeded-instances, census ruling 292fix) into hostfiles-cap-live-entries; the census overlay goes back to envelope-only
- claude agent, operated by paul@keymail.dev pushed bde598da5 hostfiles: refuse an over-cap tombstone up front rather than walk it (Paul's ruling, 2026-10-15); only skipped entries are exempt from the path cap
- claude agent, operated by paul@keymail.dev pushed 5065b52ae Astra brief: hostfiles path cap, round 3
- claude agent, operated by paul@keymail.dev pushed b3fa74279 Merge origin/main (zdd-owed-items) into hostfiles-cap-live-entries, with census ruling hostfiles-cap-236 folded in
- claude agent, operated by paul@keymail.dev pushed cc1c3d240 hostfiles: removePastCap refuses a final name that is not plain ("", ".", ".."), as descendCtx refuses such a directory component (census ruling condition 2, platform-1e)
- claude agent, operated by paul@keymail.dev pushed 3ab48ff70 hostfiles: Restore removes a tombstone past the cap in one linear, cancellable walk (Astra review round 2, P2): skipping it left a deep file that made the next scan refuse the tree and stranded relocation's flush
- claude agent, operated by paul@keymail.dev pushed a7f173c29 Astra review, hostfiles path cap round 2: unedited — round-1 P2s closed except one: a deep tombstone's file left on disk strands the next scan and relocation's flush
- claude agent, operated by paul@keymail.dev pushed 4411ffffa Astra brief: hostfiles path cap, round 2
- claude agent, operated by paul@keymail.dev pushed 826a7a9ff hostfiles: a scan retires an inherited skipped entry past the cap, and Restore never walks a tombstone past it (Astra's review of 28d086d8, two P2s)
- claude agent, operated by paul@keymail.dev pushed 7d4efe54c Astra brief: hostfiles path cap, live entries only
- claude agent, operated by paul@keymail.dev pushed 28d086d82 hostfiles: the path cap applies to live entries only (LiveEntriesWithinCap), so a manifest written before the cap that holds a tombstone or skipped entry past it stays readable, and a moves recovery that selects it is not stranded (#236, moves' review of a8cebad)