🧊 Coldkeep v1.10.13 — Post-Release Correctness Hardening

[franchoy]

Coldkeep v1.10.13 — Post-Release Correctness Hardening

Released: 2026-05-30

Fixes-only release closing 10 correctness gaps discovered in the adversarial post-release audit of v1.10.12. No behavior, CLI, JSON, storage format, or repository format changes beyond the specific invariants hardened below. All fixes include regression tests.

---

What changed

ID	Area	Fix
V1	Verify — packed container existence	checkContainersFileExistence extended to cover storage_blocks-referenced containers. A missing packed container file is no longer silently skipped during verification.
V2	Verify — NULL hash bypass	verifyPhysicalPayloadStage and verifyCompressedPayloadStage fail-closed on NULL hash for non-legacy packed blocks. A NULL hash no longer bypasses payload verification.
G4	GC — sealed container eligibility	GC sealed container scan adds sealing = FALSE guard. Containers actively being sealed are now correctly excluded from GC eligibility.
G2	GC — FK violation diagnostic	A foreign-key violation on container delete now returns an actionable GC diagnostic instead of a raw DB error.
V3	Schema — storage_blocks offset uniqueness	UNIQUE(container_id, container_offset) added to storage_blocks (schema version 16) with a migration preflight duplicate check. Overlapping packed-block placement is now rejected at the DB layer.
S1	Snapshot — incomplete file exclusion	snapshotSourceQuery adds lf.status = COMPLETED filter. Incomplete logical files are excluded from snapshot capture.
S2	Snapshot — cycle detection	snapshotAncestorCycleExists added; parent creation now rejects cyclic parent chains (A→B→A), not only self-references.
X1	SQLite — foreign key enforcement	ApplySQLiteSessionPragmas now also sets PRAGMA foreign_keys = ON. FK constraints are enforced on all SQLite connections.
G1 (modified)	GC — SQLite singleton invariant	SQLite live GC now fails-closed with a clear error; SQLite dry-run GC is allowed. Preserves the GC singleton invariant on SQLite.
C2	CLI — remove JSON perf spans	runRemoveCommand now passes perf spans to all emitBatchCommandReport("remove") call sites. remove --output json includes a perf_spans array.

Excluded

• C1 (duplicate singleton flag warning) — already hard-rejected in v1.10.12; no change.

---

Upgrade notes

• Schema migration to version 16 runs automatically on first open. The preflight check will abort the migration if duplicate (container_id, container_offset) pairs exist in storage_blocks; in that case the repository should be inspected before upgrading.
• No CLI, JSON output (other than the perf_spans addition to remove), or storage format changes.
• PostgreSQL and SQLite both supported; no backend default change.

---

What is not in this release

Engine extraction, catalog abstraction, new product features, and broad refactors are deferred. Release evidence closure and README/CHANGELOG cleanup are scoped to v1.10.14.

<hr /><em>This discussion was created from the release <a href='https://github.com/franchoy/coldkeep/releases/tag/v1.10.13'>🧊 Coldkeep v1.10.13 — Post-Release Correctness Hardening</a>.</em>