zara-coding: validate repository inspection HEAD object IDs #189

New issue

Closed

opened 2026-09-08 02:03:11 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:11 +00:00

Owner

Advances #1.

RepositoryInspector.inspect() currently projects git rev-parse HEAD directly into structured repository evidence and only compares the first/second samples for equality. A stable malformed value can therefore survive inspection and enter symbolic task state.

Acceptance:

deterministic RED for malformed initial/final repository HEAD object IDs;
accept canonical full SHA-1 and SHA-256 object IDs;
fail with bounded CodingError tied to malformed repository object identity;
preserve identity-race and working-tree-race checks;
focused tests, registry compatibility, full nix flake check, generated package builds, exact-head protected merge.

Advances #1. `RepositoryInspector.inspect()` currently projects `git rev-parse HEAD` directly into structured repository evidence and only compares the first/second samples for equality. A stable malformed value can therefore survive inspection and enter symbolic task state. Acceptance: - deterministic RED for malformed initial/final repository HEAD object IDs; - accept canonical full SHA-1 and SHA-256 object IDs; - fail with bounded `CodingError` tied to malformed repository object identity; - preserve identity-race and working-tree-race checks; - focused tests, registry compatibility, full `nix flake check`, generated package builds, exact-head protected merge.

nsaspy closed this issue

2026-09-08 02:03:11 +00:00

nsaspy referenced this issue from a pull request that will close it,

2026-09-08 02:19:39 +00:00

coding: make branch creation HEAD fence atomic #386