Preserve header sensitivity across colliding path shapes
This commit is contained in:
@@ -692,3 +692,18 @@ unsafe evidence query, or release gate. Reviewed behavioral coverage in
|
||||
No runtime code changed in this documentation unit, so the race suite was not
|
||||
rerun. No environmental limitation affected validation; checks ran on
|
||||
Linux/amd64 only. Publication and release preparation remain outside this work.
|
||||
|
||||
## Post-implementation remediation evidence
|
||||
|
||||
The subsequent review found coverage gaps beyond the original stage validation;
|
||||
the [remediation record](remediation.md#shared-source-version-review-2026-10-15)
|
||||
owns their status. Stage 9–12 evidence now also includes
|
||||
`TestSourceVersionEvidenceClassificationKeepsCollidingShapes` and
|
||||
`TestFacadeSourceVersionEvidenceRedactsCollidingShapes`. Both failed before the
|
||||
shape-collision fix and pass afterward. Classification preserves original
|
||||
mapping-key and sequence-index candidates independently without erasing payload
|
||||
classification. Focused source-version/sensitivity/history tests,
|
||||
`GOTOOLCHAIN=local ./scripts/check.sh`, and
|
||||
`GOTOOLCHAIN=local GOPROXY=off go test -race ./...` passed on
|
||||
`go1.26.9 linux/amd64`. Existing historical/dependency propagation and neighboring
|
||||
public-value coverage remain green; no new sensitivity policy was introduced.
|
||||
|
||||
@@ -162,7 +162,14 @@ issues remain. Findings 1 and 2 above remain completed historical findings.
|
||||
|
||||
### 3. Preserve distinct semantic shapes during evidence classification (P1)
|
||||
|
||||
Status: open.
|
||||
Status: complete. Original evidence shapes are classified independently before
|
||||
their results enter the existing pointer-based sensitivity/dependency closure.
|
||||
Evidence no longer overwrites payload candidates. New engine and public
|
||||
regressions failed before the fix and pass afterward, covering both acquisition
|
||||
orders, schema tags, predicate observation of both shapes, and unchanged final
|
||||
payload. Focused source-version/sensitivity/history tests, the everyday check,
|
||||
and the full race suite passed on `go1.26.9 linux/amd64`. The implementation
|
||||
plan records the additional Stage 9–12 regression evidence.
|
||||
|
||||
Affected: `classifySecretPathsWithEvidence` and `addSecretEvidencePath` in
|
||||
[secret.go](../../internal/engine/secret.go), lines 78–104 at `020d720`.
|
||||
|
||||
Reference in New Issue
Block a user