fix(memory-get): honor provenance sensitivity redaction#12
Merged
Conversation
Contributor
|
Thank you for your contribution to MOOTx01. Before it can be merged we need you to sign our Contributor License Agreement. You can read it here: CLA.md. To sign, post a comment on this pull request with exactly the following text: I have read the CLA Document and I hereby sign the CLA You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot. |
bob-codedaptive
pushed a commit
that referenced
this pull request
Jul 6, 2026
…19/#33) #12: Cap concurrent proxy frame threads at 16. A burst of stdin frames beyond this waits for an existing worker to finish before spawning. Prevents unbounded thread count from a fast stdin producer (Rust). #19/#33: Add ReindexGuard actor to prevent concurrent moot_reindex runs. A second call while reindex is running returns "already running" instead of spawning a duplicate detached Task. Guard clears on completion or error (Swift). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
bob-codedaptive
pushed a commit
that referenced
this pull request
Jul 7, 2026
…#12) The #83 fix removed the HLC comparison entirely, causing older remote records to unconditionally overwrite newer local edits. The comparison is now restored using a dedicated _ck_sync_meta side table owned by ConvergenceKit: - On inbound LWW, reads the local sync_hlc from the side table. If the remote HLC is older, the remote record is skipped. - After a successful upsert, writes the remote HLC + metadata to the side table for future comparisons. - The side table is backend-agnostic (CREATE TABLE IF NOT EXISTS works on SQLite, PG, and InMemory). This replaces the prior approach of merging _sync* columns into application rows, which broke on schema-enforced backends. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Rebased replacement for PR #3 (which had merge conflicts from a messy branch history).
moot_memory_getnow rejects Restricted/Secret provenance-sensitivity drawerswith the standard "Memory not found" shape, closing the bypass where a caller
could use a surfaced ID from
moot_memory_searchto read redacted content verbatimRust-only. Swift parity should follow.
🤖 Generated with Claude Code