admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

Bind DOC0 upload receipts to the original request #424

Merged
admin merged 1 commits from codex/doc0-upload-snapshot into main 2026-11-02 07:26:06 +00:00
Conversation 0 Commits 1 Files Changed 2
+44
admin commented 2026-11-02 07:24:27 +00:00
Owner
Copy Link
Copy Source

Problem and change

The internal DOC0 client compared an upload receipt against the caller-owned input after awaiting the request. If that input changed during dispatch, a receipt for a different tenant or project could be accepted. Snapshot the original metadata and bytes before dispatch, enforce the size limit before copying, and retain the validated client configuration.

Validation

  • Reproduced the scope and configuration mutation failures before the fix.
  • 31 focused client/coordinator tests passed, including rejection and matching receipt controls.
  • Full suite: 1291 passed, 197 skipped. Typecheck, lint (8 existing warnings), and production build passed.

The client is internal; this does not enable customer uploads or establish production authorization.

## Problem and change The internal DOC0 client compared an upload receipt against the caller-owned input after awaiting the request. If that input changed during dispatch, a receipt for a different tenant or project could be accepted. Snapshot the original metadata and bytes before dispatch, enforce the size limit before copying, and retain the validated client configuration. ## Validation - Reproduced the scope and configuration mutation failures before the fix. - 31 focused client/coordinator tests passed, including rejection and matching receipt controls. - Full suite: 1291 passed, 197 skipped. Typecheck, lint (8 existing warnings), and production build passed. The client is internal; this does not enable customer uploads or establish production authorization.
admin added 1 commit 2026-11-02 07:24:28 +00:00
fix: bind DOC0 upload receipts to original request
CI (SIAX Cloud) / integration (push) Skipped
Details
CI (SIAX Cloud) / sonar (push) Skipped
Details
masterplan-lock / check (push) Successful in 3s
Details
CI (SIAX Cloud) / sonar (pull_request) Skipped
Details
masterplan-lock / check (pull_request) Successful in 5s
Details
CI (SIAX Cloud) / security (push) Successful in 22s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 22s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 25s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 32s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 35s
Details
CI (SIAX Cloud) / quality (push) Successful in 47s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m18s
Details
c1244a298c
CODEOWNERS rules requested review from sax3l 2026-11-02 07:24:28 +00:00
admin merged commit f11ec2384a into main 2026-11-02 07:26:06 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
sax3l
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#424