DanConwayDev 471bca6598 Merge #a54fbcf9: Fix audit repository scoping and stale Git ref detecti… ...

Fix audit repository scoping and stale Git ref detection

nostr:nevent1qgsx2lyl2e4zvfadwcvkd9fkrcwczj7mf858hy85mwqclwgut8wpg2spz3mhxue69uhhyetvv9ujumn8d96zuer9wcq3yamnwvaz7tm8d96xummnw3ezucm0d5q3kamnwvaz7tmwva5hgtnyv9hxxmmwwashjer9wchxxmmdqqs22naulxs7eh7h7avmv8svxpw7f9r0z63ywe2v04a9ddmgpdh5rrcsx9r5q

PR-Author: DanConwayDev's Agent
nostr:npub1v47f74n2ycn66asev62nv8sas99akj0g0wg0fkup37u3ckwuzs4q7cwtp0

PR description:

The read-only audit probe could choose state from an unrelated repository sharing the same identifier. It also accepted extra Git branches and tags, allowing stale refs to pass even when the selected state was empty.

This PR:
- Requires an exact branch/tag match in both read-only and write probes, excluding HEAD, Nostr refs and peeled tag entries.
- Resolves confirmed state authors from the selected repository coordinate before choosing the newest state. It handles reciprocal legacy/indexed roles and lead forwarding; unresolved lead paths fail the check.
- Keeps state ordering as newest timestamp, then lowest event ID.

The two commits separate ref comparison from authority scoping. Authority is derived from announcements visible on the probed relay; this does not add cross-relay discovery or change server authorization.

Validation: 95 audit tests passed (5 ignored), plus 55 tests in the local-relay integration target. The end-to-end regression hosts unrelated same-identifier repositories, then injects stale refs. Workspace all-target Clippy and formatting pass.

2026-09-18 09:04:42 +01:00

..

common

test: poll wait_for_event_served at a fixed interval over one connection

2026-09-17 18:22:34 +00:00

lifecycle

fix(lifecycle): preserve NIP-01 ordering through deletion and rollback

2026-09-17 15:38:24 +00:00

sync

test(sync): await connection attempts instead of status notifications

2026-09-17 18:22:34 +00:00

archive_grasp_services.rs

test: replace fixed sleeps with observable waits in purgatory sync and archive tests

2026-09-17 18:22:34 +00:00

audit_probe_state.rs

fix(audit): scope state to the selected repository's maintainers

2026-09-17 16:32:16 +00:00

base_path.rs

feat(http): support path-mounted GRASP services

2026-08-18 11:36:24 +00:00

cors.rs

remove depricated audit mode label ci / production ~> isolated / shared

2025-12-03 11:38:07 +00:00

docs_export.rs

feat(cli): export deterministic documentation schema

2026-08-28 15:28:21 +00:00

fixture_lifecycle.rs

test: cancel proxy connections when fixtures stop

2026-09-12 14:48:26 +00:00

git_clone.rs

remove depricated audit mode label ci / production ~> isolated / shared

2025-12-03 11:38:07 +00:00

git_response_streaming.rs

test(git): synchronize streaming assertions with explicit gates

2026-09-12 14:48:16 +00:00

grasp06_pr_hosting.rs

docs: point GRASP references at Nostr Git

2026-09-04 13:59:46 +00:00

nip01_compliance.rs

remove depricated audit mode label ci / production ~> isolated / shared

2025-12-03 11:38:07 +00:00

nip05_identity.rs

feat(http): support path-mounted GRASP services

2026-08-18 11:36:24 +00:00

nip11_document.rs

remove depricated audit mode label ci / production ~> isolated / shared

2025-12-03 11:38:07 +00:00

nip34_announcements.rs

test: remove test covered elsewhere

2025-12-23 14:00:50 +00:00

nip77_negentropy.rs

test: migrate tests and grasp-audit to rust-nostr 0.45.0-alpha.1

2026-06-16 11:31:26 +00:00

outbound_policy.rs

feat(sync): keep GRASP-08 private services out of public sync

2026-08-15 14:34:01 +00:00

private_mode.rs

fix(private-repos): restore self-subscription in private mode

2026-08-15 20:58:41 +00:00

purgatory_persistence.rs

test(sync): simulate downtime in checkpoint integration test

2026-09-12 13:47:01 +00:00

purgatory_sync.rs

test: replace fixed sleeps with observable waits in purgatory sync and archive tests

2026-09-17 18:22:34 +00:00

purgatory.rs

fix: rewrite deletion integration tests to avoid shared-state side effects

2026-02-23 13:42:57 +00:00

push_authorization.rs

refactor(auth): make current maintainer authority explicit

2026-08-29 21:20:49 +00:00

relay_identity.rs

test: preserve subprocess and recovery fixture listeners

2026-09-12 14:48:16 +00:00

relay_message_rate.rs

refactor(relay): retire overrides supplied by the upgraded SDK

2026-09-17 13:44:47 +00:00

relay_response_latency.rs

fix(http): avoid delayed-ACK stalls in small relay responses

2026-09-14 10:05:18 +00:00

relay_subscription_state.rs

fix(relay): admit repository-scale live coverage

2026-08-08 10:05:49 +00:00

repository_creation.rs

remove depricated audit mode label ci / production ~> isolated / shared

2025-12-03 11:38:07 +00:00

state_authorization.rs

fix(auth): root state validity at active lead

2026-08-29 20:18:22 +00:00

sync.rs

test(sync): reuse repository identity across relay fixtures

2026-09-15 07:45:52 +00:00

test_filter_support.rs

test: route integration-test git subprocesses through hermetic helper

2026-08-01 16:16:26 +00:00

websocket_metrics.rs

fix(metrics): record WebSocket connection durations

2026-08-07 17:14:31 +00:00