zara-memory: bound projection cleanup evidence from forget #112

New issue

Closed

opened 2026-09-08 02:03:00 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:00 +00:00

Owner

Problem

MemoryService.forget() validates that projection_ids is a list of strings, but accepts arbitrarily many IDs and empty/unbounded ID values. A malformed backend can therefore return unbounded cleanup evidence across the plugin boundary.

Slice

deterministic RED coverage for oversized and empty projection cleanup identifiers;
cap cleanup evidence cardinality and require bounded non-empty IDs;
preserve the canonical backend boundary: this validates evidence only and does not implement forgetting itself;
exact-head compatibility, registry, plugin and Nix gates before merge.

Dependency-ready correctness slice within #7.

## Problem `MemoryService.forget()` validates that `projection_ids` is a list of strings, but accepts arbitrarily many IDs and empty/unbounded ID values. A malformed backend can therefore return unbounded cleanup evidence across the plugin boundary. ## Slice - deterministic RED coverage for oversized and empty projection cleanup identifiers; - cap cleanup evidence cardinality and require bounded non-empty IDs; - preserve the canonical backend boundary: this validates evidence only and does not implement forgetting itself; - exact-head compatibility, registry, plugin and Nix gates before merge. Dependency-ready correctness slice within #7.

nsaspy closed this issue

2026-09-08 02:03:00 +00:00