Preflight comparison transaction names

This commit is contained in:
2026-08-13 03:09:00 +00:00
parent 707db5394c
commit 0314a302f1
4 changed files with 78 additions and 2 deletions

View File

@@ -21,6 +21,12 @@ For replacement, it moves the prior bundle to a private sibling backup,
reauthorizes that moved entry, and restores it if installing the new bundle
fails.
Planning also validates the final component and the bounded fixed names used
for private staging and backup siblings. A destination that cannot form those
names is rejected before publication creates a missing parent directory; a
maximum-length valid destination remains usable because transaction siblings do
not incorporate its basename.
The new bundle is committed only after the staged directory has been installed
at the target. From that point its artifact paths are authoritative: a failure
to remove the retained sibling backup does not roll back the new bundle.