| 1 | # Census overlay db-region-forward-2 (db region forward plan 2: the console and CLI for carlos db query and query --at; spec docs/superpowers/specs/2026-10-22-db-region-forward-design.md rev 6, §13), loaded LAST in TestPlan14RootReadCensus, after s3-change-index, the overlay main loads last at 26fbd042 (merged into this branch). Every row carries rev3=census-ruling-db-region-forward-2, accepted in full by the census owner on #280, 2026-10-22 (docs/superpowers/notes/census-proposal-db-region-forward-2.md). |
| 2 | # The scanner names two new reads (dbforward.go dbQueryForward, the CLI reading a refused reads-route answer; apidbforward.go readDBReadBody, the console reading the request body to EOF, Astra round 1 P1) and four changed legacy units (cmd/console serve, NewServer, dbdoor doorError, the deployment-buckets module). None of the reads route's own units (handleAPIDBRead, admitDBRead, streamDBRead, the line writer, dbfCall, readDBResult, cancelDBRead, announceDBRead, dbResidency, dbForwardEvidence, NewHTTPServer) is named by the scanner, so they have no rows: an inventory row with no scanned read is stale. The changed units are re-frozen at main's disposition with this branch's change appended. Frozen declarations change, so the seal moves; s3-change-index's is checked first. |
| 3 | @legacy cc2c295871b0179cc5a567dda7c21703bc2b850dd7203f75e7765a9667c652ca dbforward.go dbQueryForward legacy accepted-legacy accepted-legacy;rev3=census-ruling-db-region-forward-2;basis=root-input (J4, as main's db.go units); the carlos CLI on a person's machine, as the person (no box unit): new, reads at most 64 KiB of a refused reads-route answer from the console (io.ReadAll over the HTTP response body, not a file) to print the console's own sentence; decides nothing for root file:ReadAll@1371 f91b8efa4589dda452e7f0afd24ae36ede82d6ca1c2f538d04ae286dd9785f9c |
| 4 | dbforward.go dbQueryForward legacy accepted-legacy accepted-legacy;rev3=census-ruling-db-region-forward-2;basis=root-input (J4, as main's db.go units); the carlos CLI on a person's machine, as the person (no box unit): new, reads at most 64 KiB of a refused reads-route answer from the console (io.ReadAll over the HTTP response body, not a file) to print the console's own sentence; decides nothing for root file:ReadAll@1371 f91b8efa4589dda452e7f0afd24ae36ede82d6ca1c2f538d04ae286dd9785f9c |
| 5 | @legacy 7f48f405e21b6558b208c0dac2058c799f62a8ba3a7587c468da403ca7cad56f cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added data-literal@4077,data-literal@5178,data-literal@5415 20c743c7d49fa060f0a7b219b11ffafa67058f21da06491d09cb0f6ae4ddf2e1 |
| 6 | cmd/console/main.go serve legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console service wires the optional callback signer and starts the claim-guarded queue worker. The same three data path literals move; it does not add a privileged reader.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=passes CARLOS_CONSOLE_NAME to NewServer as Config.ConsoleName, the name the console's emails use; the same three /data literals at the same offsets; no read added;rev3=PROPOSED-s3-change-index;identity=the console (cmd/console serve under console.service, user carlos-console);basis=arms the record view when CARLOS_CHANGE_INDEX=read (armChangeIndex) for the run and seed sweeps and starts its backstop loop; the same three /data literals at the same offsets; no read added;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=parses CARLOS_DB_FORWARD (dbForward) into Config.DBForward and builds its http.Server with console.NewHTTPServer, the same two timeouts; the same three /data literals at the same offsets; no read added data-literal@4077,data-literal@5178,data-literal@5415 20c743c7d49fa060f0a7b219b11ffafa67058f21da06491d09cb0f6ae4ddf2e1 |
| 7 | @legacy d23473f35e8e007e1bd715e73f98fbceb35770ab698f7a853ca80c722c5c632c internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console construction adds queue and notification state. The existing logs/data route literal moves; it is not a filesystem read.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=sets consoleNameCfg from Config.ConsoleName and the challengeSem send bound, and registers the four /auth/email routes; no goroutine; the one data-literal is still the logs/data route pattern, moved; the record-write census re-digests the same unit;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=sets the forwarded db read's open-read limits (dbReads, held by each read's request) and its timing (dbf); no goroutine and no store call; the one data-literal is still the logs/data route pattern, moved; the record-write census re-digests the same unit data-literal@9622 7493342296b6dfa6bc6d2e68e3789fad49e400dbb32a012cee09e215089aa473 |
| 8 | internal/console/server.go NewServer legacy accepted-legacy accepted-legacy;rev3=PROPOSED-scan-demand-revival;basis=Console construction adds queue and notification state. The existing logs/data route literal moves; it is not a filesystem read.;rev3=PROPOSED-email-signin;identity=the console (cmd/console serve under console.service, user carlos-console);basis=sets consoleNameCfg from Config.ConsoleName and the challengeSem send bound, and registers the four /auth/email routes; no goroutine; the one data-literal is still the logs/data route pattern, moved; the record-write census re-digests the same unit;rev3=census-ruling-db-region-forward-2;identity=the console (cmd/console serve under console.service, user carlos-console);basis=sets the forwarded db read's open-read limits (dbReads, held by each read's request) and its timing (dbf); no goroutine and no store call; the one data-literal is still the logs/data route pattern, moved; the record-write census re-digests the same unit data-literal@9622 7493342296b6dfa6bc6d2e68e3789fad49e400dbb32a012cee09e215089aa473 |
| 9 | @legacy 4d8782e50f00b1a71c2d81670b2bf635d377a3558a2de83caea8466e49d10e6a internal/dbdoor/client.go doorError legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-db-region-forward-2;identity=the carlos CLI on a person's machine, as the person;basis=decodes the db region forward marker's three additive fields (forward, region, forward_ops) beside error, from the same bounded 64 KiB read of a refusal body; no read added file:ReadAll@54 ece2358548f5a71233da653f300a0fe02259ba8e6ee8ece13817c9c9de40311a |
| 10 | internal/dbdoor/client.go doorError legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-db-region-forward-2;identity=the carlos CLI on a person's machine, as the person;basis=decodes the db region forward marker's three additive fields (forward, region, forward_ops) beside error, from the same bounded 64 KiB read of a refusal body; no read added file:ReadAll@54 ece2358548f5a71233da653f300a0fe02259ba8e6ee8ece13817c9c9de40311a |
| 11 | @legacy a292bb0af2a46e04e78ebf736edc83b743b9033bc6055ef438ae4624b4858006 infra/modules/deployment-buckets/main.tf external legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-db-region-forward-2;basis=the db-reads/ lifecycle rules (db region forward spec §5.7, J4): two rules beside geoip-noncurrent on the deployment bucket's lifecycle configuration, prepared and not applied until Paul approves docs/superpowers/notes/db-reads-lifecycle-approval.md; no read, no IAM change file:external@0 a37eced3f29fd23ca8a98192bc1b0cf03cfec3506bd24b7e5a2361bd339fe66a |
| 12 | infra/modules/deployment-buckets/main.tf external legacy accepted-legacy accepted-legacy;rev3=J4;basis=root-input;rev3=census-ruling-db-region-forward-2;basis=the db-reads/ lifecycle rules (db region forward spec §5.7, J4): two rules beside geoip-noncurrent on the deployment bucket's lifecycle configuration, prepared and not applied until Paul approves docs/superpowers/notes/db-reads-lifecycle-approval.md; no read, no IAM change file:external@0 a37eced3f29fd23ca8a98192bc1b0cf03cfec3506bd24b7e5a2361bd339fe66a |
| 13 | @legacy de376f23aabdc190c4bf285137afc7f2bcfd0d955d8106bde05f45869b94d957 internal/console/apidbforward.go readDBReadBody legacy accepted-legacy accepted-legacy;rev3=census-ruling-db-region-forward-2;basis=root-input (J4, as main's console request-body reads); the console (cmd/console serve under console.service, user carlos-console): new (Astra round 1, P1), reads one forwarded-read request body to EOF, at most 264 KiB (io.ReadAll over http.MaxBytesReader, not a file), under the admission read deadline, then requires exactly one JSON value; decides nothing for root file:ReadAll@352 f8bd84a1b06f080ae412014479fa179e5a412c873d07a61b8f693ea410fc5653 |
| 14 | internal/console/apidbforward.go readDBReadBody legacy accepted-legacy accepted-legacy;rev3=census-ruling-db-region-forward-2;basis=root-input (J4, as main's console request-body reads); the console (cmd/console serve under console.service, user carlos-console): new (Astra round 1, P1), reads one forwarded-read request body to EOF, at most 264 KiB (io.ReadAll over http.MaxBytesReader, not a file), under the admission read deadline, then requires exactly one JSON value; decides nothing for root file:ReadAll@352 f8bd84a1b06f080ae412014479fa179e5a412c873d07a61b8f693ea410fc5653 |
| 15 | @coverage . 26350e7914330de5cab9499733965c03a33751624a83ae7e4eedf8fbf941917d |
| 16 | @coverage cmd/console a7910675d8296aa8632b1b33921416979be0bd3700ca256476beb257b2ffd50d |
| 17 | @coverage infra/modules/deployment-buckets 5bcd66547eff581fe8d7d6a1b828cb057ecc5aa2cbed728104bc1b0a5e88b8f8 |
| 18 | @coverage internal/console b4f28c64a152cfcdd10e8dced6dcfe13f0b866e33219748bec5d12a7453b17f6 |
| 19 | @coverage internal/dbdoor 0a454a4ba2d1c49b6aa73ad2ecbfa63b31e2e5ae8f7e17705760392145fbce34 |
| 20 | @coverage internal/release 2cea0c5733427905430dd3d54546f95e59d51bae28945ad3c2fd1402bfa1e270 |
| 21 | @coverage internal/dbreads 90d668e0638c8e4e4d2345deb0204243d8a6e893c8b53d09d0ec0bc25d7d772d |
| 22 | |
amadan