zara-coding: require canonical repository-relative changed-path evidence #128

New issue

Closed

opened 2026-09-08 02:03:02 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:02 +00:00

Owner

Problem

build_repository_evidence() rejects absolute/traversing/duplicate changed paths, but accepts non-canonical relative aliases such as ./src/app.py or src//app.py. Those aliases can describe the same repository path with different strings, bypass duplicate/coherence reasoning and project ambiguous symbolic repository_changed_path facts.

Required behavior

changed-path evidence must be canonical repository-relative POSIX paths;
reject dot/root aliases and redundant separators/dot components;
alias duplicates cannot project as distinct symbolic facts;
preserve existing 100-entry bound, NUL/traversal rejection, dirty-state coherence, and network-free tests;
full compatibility/registry/plugin/Nix package gates stay green.

Tracks repository evidence integrity under #1.

## Problem `build_repository_evidence()` rejects absolute/traversing/duplicate changed paths, but accepts non-canonical relative aliases such as `./src/app.py` or `src//app.py`. Those aliases can describe the same repository path with different strings, bypass duplicate/coherence reasoning and project ambiguous symbolic `repository_changed_path` facts. ## Required behavior - changed-path evidence must be canonical repository-relative POSIX paths; - reject dot/root aliases and redundant separators/dot components; - alias duplicates cannot project as distinct symbolic facts; - preserve existing 100-entry bound, NUL/traversal rejection, dirty-state coherence, and network-free tests; - full compatibility/registry/plugin/Nix package gates stay green. Tracks repository evidence integrity under #1.

nsaspy closed this issue

2026-09-08 02:03:02 +00:00

nsaspy referenced this issue

2026-09-08 02:19:54 +00:00

zara-coding: validate collected repository root shape #435