zara-calendar: bind create/update verification to intended event state #58

New issue

Closed

opened 2026-09-08 02:02:53 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:02:53 +00:00

Owner

Problem

CalendarDomain.create() and update() currently verify an accepted write when the observed event version matches provider evidence, but do not prove the observed event fields match the event state Zara intended to create/update. A backend can acknowledge a request, return a matching version for different event content, and Zara will report verified.

Required behavior

create verification must compare observed normalized writable event fields with the intended normalized event payload while allowing provider-assigned event ID/version
update verification must compare observed event state with the normalized expected merged state, not version evidence alone
provider acknowledgement/version evidence alone is never success
deterministic regressions cover mismatched title/times/attendees or equivalent writable fields
full registry/source/install/Nix gate remains green

No Zara Core changes.

## Problem `CalendarDomain.create()` and `update()` currently verify an accepted write when the observed event version matches provider evidence, but do not prove the observed event fields match the event state Zara intended to create/update. A backend can acknowledge a request, return a matching version for different event content, and Zara will report `verified`. ## Required behavior - create verification must compare observed normalized writable event fields with the intended normalized event payload while allowing provider-assigned event ID/version - update verification must compare observed event state with the normalized expected merged state, not version evidence alone - provider acknowledgement/version evidence alone is never success - deterministic regressions cover mismatched title/times/attendees or equivalent writable fields - full registry/source/install/Nix gate remains green No Zara Core changes.

nsaspy closed this issue

2026-09-08 02:02:53 +00:00

nsaspy referenced this issue

2026-09-08 02:20:15 +00:00

Add short-lived zara-context provider #505