zara-memory: reject malformed scope values structurally #133

New issue

Closed

opened 2026-09-08 02:03:02 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:02 +00:00

Owner

Problem

MemoryService._validate_scope_owner() performs membership against SCOPES before validating the scope type. Unhashable/non-text values can therefore leak raw Python exceptions instead of MemoryError.

Acceptance

deterministic RED test covers malformed scope inputs before backend dispatch;
malformed scopes fail with structured MemoryError;
supported text scopes remain unchanged;
full compatibility/registry/plugin/package gates pass before merge.

Bounded local hardening under #7; no missing backend capabilities are emulated.

## Problem `MemoryService._validate_scope_owner()` performs membership against `SCOPES` before validating the scope type. Unhashable/non-text values can therefore leak raw Python exceptions instead of `MemoryError`. ## Acceptance - deterministic RED test covers malformed scope inputs before backend dispatch; - malformed scopes fail with structured `MemoryError`; - supported text scopes remain unchanged; - full compatibility/registry/plugin/package gates pass before merge. Bounded local hardening under #7; no missing backend capabilities are emulated.

nsaspy closed this issue

2026-09-08 02:03:02 +00:00