eric/ConfigKit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Track hidden changes behind redaction

Browse Source
This commit is contained in:
Eric Rakestraw
2026-10-09 12:24:01 +00:00
parent e5dddef204
commit 756149beaa
4 changed files with 145 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/roadmap/implementation.md
View File

@@ -252,7 +252,7 @@ preserving an absent reported side.
## Stage 6 — Distinguish hidden changes from unchanged masked content
Status: planned. Scope: one flag threaded through the existing paired traversal.
Status: complete. Scope: one flag threaded through the existing paired traversal.
1. Have paired preparation return `HiddenChanged` alongside the safe nodes and
each side's redaction state. At directly masked frontiers compare raw nodes
@@ -272,6 +272,12 @@ Validate: `go test ./internal/engine -run 'Diff|Secret|Sensitivity'` and the
everyday check. Done: the flag communicates withheld change without claiming
that every masked child changed or revealing additional change details.
Evidence: the focused engine tests and `./scripts/check.sh` passed. Tests cover
changed raw values behind identical markers, mixed and public-only changes,
unchanged masked mapping and sequence members, masked additions/removals,
sequence-length changes, structural fallback, and equal values with differing
classification but no changed region.
## Stage 7 — Assemble the complete engine diff operation
Status: planned. Scope: internal-facing records, serialization, and real loads.