Use stable verified Notarius reference snapshots

This commit is contained in:
2026-09-16 17:53:29 +00:00
parent 5202f16972
commit e13d87a077
8 changed files with 469 additions and 101 deletions

View File

@@ -123,7 +123,14 @@ has been introduced. Existing credential-redaction tests remain green.
## Stage 3 — Replace Run-Local Reference Snapshots with Stable Verified Snapshots
Status: Not started
Status: Complete (2026-09-16)
Completion: Replaced run-ID reference copies with confined, content-addressed
session snapshots; added canonical cache path ownership, verified reuse,
reconstruction and regular-file repair, unsafe-conflict failures, narrow cleanup
of invalid new writes, and shared post-run verification. Removed the obsolete
run-local reference helper. Verified the required artifacts/stage/fileops/
pathsafe tests and race tests for artifacts/stage.
Read: `internal/artifacts/paths.go` and its tests;
`internal/stage/extract_references.go`, `extract.go`, `extract_resume.go`,