DanConwayDev cc5a3cbb0e fix(security): reconcile served refs with authorized events ...

Motivation: the v3 storage migration preserves legacy refs exactly, so structural Git integrity alone cannot detect refs written through the pre-v3 GRASP-06 path traversal. Operators need an online, post-migration answer without extending the production outage.

Approach: add a second startup pass that derives owner refs from the NIP-01-preferred State of the confirmed maintainer set and PR refs from accepted PR/PR Update events, including exact GRASP-06 and active-purgatory scoping. Fetch missing expected objects through the hardened repair path, repair unambiguous drift, and preserve unexplained refs with bounded manual-inspection logs.

Correctness: authoritative events are refreshed while holding the family lease, ref updates use compare-and-swap, and anything changed since the initial online snapshot is left untouched. This assumes the accepted event database and existing membership/GRASP-06 predicates are authoritative. The offline migration is deliberately unchanged, and unexplained PR refs are not auto-deleted because they may be evidence.

Validation: cargo fmt --all -- --check; cargo clippy --workspace --all-targets -- -D warnings; cargo test --locked; cargo test --lib --locked (892 passed after the final race guard).

2026-08-20 07:35:24 +00:00

..

context.rs

fix(security): reconcile served refs with authorized events

2026-08-20 07:35:24 +00:00

functions.rs

fix(purgatory): recover from abandoned Git process groups

2026-08-11 20:31:35 +00:00

loop.rs

Add naughty list for git remotes with persistent SSL/DNS errors

2026-01-10 02:15:22 +00:00

mod.rs

fix(storage): fetch full closure during repair

2026-08-18 13:29:47 +00:00

queue.rs

Add SyncQueueEntry with exponential backoff for purgatory sync

2026-01-07 11:21:26 +00:00

throttle.rs

style: satisfy the workspace clippy gate

2026-08-12 16:00:02 +00:00