Coldkeep v1.13.3 — Read-Side Contract Cleanup

Coldkeep v1.13.3 — Read-Side Contract Cleanup

Coldkeep v1.13.3 stabilizes the read-side contract surface for stats, inspect, snapshot show, and snapshot diff.

This release started as a read-side contract cleanup release and also includes release-gate blocker remediations discovered during the final PRE_RELEASE_CHECKLIST.md Profile A validation, including a production storage correctness fix for concurrent store convergence.

Highlights

• Documented the current read-side ownership and contract boundaries for:

  • stats
  • inspect
  • snapshot show
  • snapshot diff

• Added focused read-side taxonomy boundary tests.

• Added public CLI preservation tests for read-side JSON and error behavior.

• Reviewed backend compatibility and dependency-direction seams.

• Added the v1.13.4 handoff plan:

  • v1.13.4 — Read-Side Dependency Direction and Result Ownership Review

• Fixed PostgreSQL catalog contract test isolation uncovered during the release gate.

• Fixed a real concurrent-store correctness issue in the storage layer where unsafe completed-chunk reuse could occur when packed/legacy companion mappings were incomplete or inconsistent.

• Added regression coverage for invalid packed/legacy companion mappings.

Correctness and compatibility

This release preserves:

• CLI behavior
• JSON output shape
• JSON error envelopes
• exit-code behavior
• command routing
• engine routing
• schema and migrations
• storage and repository format
• backend defaults
• SQLite compatibility
• PostgreSQL compatibility

Validation

The final release gate completed successfully after blocker remediation.

Validation included:

• PRE_RELEASE_CHECKLIST.md Profile A
• full Go test suite
• full race suite
• go vet ./...
• golangci-lint run ./...
• codec-specific race matrices for plain and aes-gcm
• PostgreSQL-backed validation
• integration correctness and stress suites
• long-run adversarial validation
• G14-G17 adversarial gate
• smoke matrix for both codecs
• legacy compatibility checks
• local cross-platform approximation
• snapshot release gate
• full CI enforcement audit
• benchmark matrix review

The local benchmark matrix recorded worker-4 variance on virtualized hardware according to checklist guidance; this was documented and not treated as a release blocker.

Notes for maintainers

v1.13.3 makes the current read-side contract safer to reason about without broad routing or API changes.

The main follow-up is intentionally deferred to:

v1.13.4 — Read-Side Dependency Direction and Result Ownership Review

That release should continue from the documented ownership seams around engine result ownership, direct observability paths, snapshot package coupling, renderer coupling, and CLI JSON assembly boundaries.