amadan
census: the hostfiles envelope for superseded() skipping a path past the cap (envelope-only; no unit or seal change)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+2
−2
internal/provision/testdata/plan14-root-reads-hostfiles-cap-236.tsv+2 −2
diff --git a/internal/provision/testdata/plan14-root-reads-hostfiles-cap-236.tsv b/internal/provision/testdata/plan14-root-reads-hostfiles-cap-236.tsv| index c8ef74001..af181f95f 100644 |
| --- a/internal/provision/testdata/plan14-root-reads-hostfiles-cap-236.tsv |
| +++ b/internal/provision/testdata/plan14-root-reads-hostfiles-cap-236.tsv |
| @@ -1,2 +1,2 @@ |
| -# Plan 14 census overlay hostfiles-cap-236 (amadan #236, owner region HA, basis moves' review of a8cebad and Paul's ruling of 2026-10-15; loaded after seeded-instances): the hostfiles path cap exempts skipped entries (RestorableWithinCap), because Restore never touches a skipped path, so a manifest written before the cap that holds one stays readable and a moves recovery that selects it is not stranded. Live entries and tombstones past the cap are still refused. StageDelete of a path past the cap is a no-op, so the inherited skipped entry stays. Only manifestWithinCap's body (and its exported name), checkManifest and StageDelete change; Open, OpenAt and Commit are byte-identical. Envelope-only: no root-read unit changed or was added, nothing runs as root that did not before, and no registry, /data, release or claim read was added, so the legacy seal stands. The removePastCap unit that census ruling hostfiles-cap-236 (platform-1e) accepted was never merged and is withdrawn. |
| -@coverage internal/hostfiles ede7e8c84eeae1b7b79e7f217d436c2b854858d33f28b030feeea1149038baaa |
| +# Plan 14 census overlay hostfiles-cap-236 (amadan #236, owner region HA, basis moves' review of a8cebad and Paul's ruling of 2026-10-15; loaded after seeded-instances): the hostfiles path cap exempts skipped entries (RestorableWithinCap), because Restore never touches a skipped path, so a manifest written before the cap that holds one stays readable and a moves recovery that selects it is not stranded. Live entries and tombstones past the cap are still refused. StageDelete of a path past the cap is a no-op, so the inherited skipped entry stays. Only manifestWithinCap's body (and its exported name), checkManifest, superseded (it skips a path past the cap) and StageDelete change; Open, OpenAt and Commit are byte-identical. Envelope-only: no root-read unit changed or was added, nothing runs as root that did not before, and no registry, /data, release or claim read was added, so the legacy seal stands. The removePastCap unit that census ruling hostfiles-cap-236 (platform-1e) accepted was never merged and is withdrawn. |
| +@coverage internal/hostfiles d5e64f802e6200bcdb839a96b277100929a47bf3b3cb3dcbe87d807a74957f5b |