audit: repair canonical document ID collisions #204

Closed

nsaspy wants to merge 4 commits from fix/canonical-document-id-integrity into main

nsaspy commented

2026-09-04 22:14:35 +00:00

Owner

What this does

adds repository-wide canonical document-ID uniqueness validation on top of the existing Org :ID: audit
checks filename/title canonical-ID agreement
makes canonical-ID collisions a global changed-document gate so legacy collisions cannot remain hidden outside the current diff
preserves the existing validator implementation as validate-docs-core.py and keeps the public scripts/validate-docs.py interface stable

Why

STAR-RESEARCH-042 was assigned to both the existing Bixby OAuth research and the new runtime component-handles research. A broader audit also found other reused human-facing IDs. This PR intentionally starts red so the validator enumerates the complete collision set; the follow-up commits on this same branch will renumber the non-canonical claimants while preserving stable Org :ID: values and approval history.

## What this does - adds repository-wide canonical document-ID uniqueness validation on top of the existing Org `:ID:` audit - checks filename/title canonical-ID agreement - makes canonical-ID collisions a global changed-document gate so legacy collisions cannot remain hidden outside the current diff - preserves the existing validator implementation as `validate-docs-core.py` and keeps the public `scripts/validate-docs.py` interface stable ## Why `STAR-RESEARCH-042` was assigned to both the existing Bixby OAuth research and the new runtime component-handles research. A broader audit also found other reused human-facing IDs. This PR intentionally starts red so the validator enumerates the complete collision set; the follow-up commits on this same branch will renumber the non-canonical claimants while preserving stable Org `:ID:` values and approval history.

nsaspy added 4 commits

2026-09-04 22:14:35 +00:00