Skip to content

mirror_worker: remove undeployed state fallbacks - #294

Open
lukevalenta wants to merge 1 commit into
mainfrom
lvalenta/validate-legacy-witness-retries
Open

lukevalenta wants to merge 1 commit into
mainfrom
lvalenta/validate-legacy-witness-retries

Conversation

@lukevalenta

@lukevalenta lukevalenta commented Sep 22, 2026

Copy link
Copy Markdown
Contributor

The mirror and witness state formats introduced by #288 and #289 have never been deployed, so no persisted records can predate the retry fingerprint or source checkpoint fields.

This removes compatibility code for those hypothetical records:

  • Replay a witness response only when the fingerprint of the full add-checkpoint request matches the accepted request.
  • Require pending witness state to contain its publication fields.
  • Require committed state to contain the source checkpoint note rather than reconstructing it from the served mirror checkpoint.

Removing the size/hash/checkpoint-text fallback addresses #288 (comment): a retry can no longer bypass normal old_size and consistency-proof validation through that path.

@lukevalenta
lukevalenta marked this pull request as draft September 22, 2026 20:18
@lukevalenta lukevalenta self-assigned this Sep 22, 2026
@lukevalenta lukevalenta changed the title mirror_worker: validate legacy witness retries mirror_worker: remove undeployed state fallbacks Sep 22, 2026
@lukevalenta
lukevalenta force-pushed the lvalenta/validate-legacy-witness-retries branch from 850b20b to e7050f3 Compare September 22, 2026 20:20
@lukevalenta
lukevalenta marked this pull request as ready for review September 22, 2026 20:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant