#247 residual: adjudicate lost bindings and apps.ready; make membership-isolation mutation fail #263
Labels
No labels
code-review
correctness
dos
performance
security
severity/high
severity/low
severity/medium
tech-debt
Kind/Breaking
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
Reviewed
Confirmed
Reviewed
Duplicate
Reviewed
Invalid
Reviewed
Won't Fix
Status
Abandoned
Status
Blocked
Status
Need More Info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
h-dv/code-index#263
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The headline package-anchor fix in #247 is already on master as
cbbdc04aba. This issue preserves its unfinished acceptance evidence separately from that implemented behavior.The commit records a historical census of -252 phantoms, +948 correct bindings and -128 correct bindings. Those are the implementing commit's measurements, not a fresh reconstruction of its before/after census.
Remaining work:
Acceptance: persist the occurrence-level census and source evidence; state unsupported cases explicitly; preserve the Flask url_for module-level target and the Ruby/PHP source-root controls. Do not infer correctness from net resolved counts or synthetic precision_gate results. Do not silently move the protected corpus baseline.
The new Python import-identity work under #246/#250/#251 is a separate comparison against
017c6d8. It must not be cited as having re-run this historical census.package_root_ofreturns EMPTY when a SRC_DIRS name is the first path component, sosrc/- andlib/-headed trees can anchor no qualifier — #175's own repro still fails because of it #247views.serveandstorage.request.COOKIES#250Released in v0.28.2 through #266. The historical acceptance was reconstructed with separate actual binaries at
05a3816andcbbdc04, using all nine pinned corpus heads. The 379 historical losses classify as 301 false bindings removed and 78 correct coverage losses; this corrects the old 252/128 split. All nine apps.ready sites have exact occurrence/target/source evidence. The 78 coverage losses and four locally derived apps.ready false bindings still present are explicitly recorded as unsupported; the report does not claim they were repaired. The 47 Flask url_for module targets and Ruby/PHP controls are preserved.The four-crate membership fixture reproduces the relevant re-export chain. The actual M5 membership/anchor-conflation mutation fails that intended test; exact source restoration and normal package-identity tests pass. Native Windows and Linux CI passed, and the published v0.28.2 artifacts and all-nine corpus projections were independently verified. This historical reconstruction is separate from #246's Python before/after comparison.
Historical census and source evidence. Closing the acceptance work requested by this issue.
Release workflow: all 11 jobs passed. The actual published
0.28.2 (76e8967)Linux CLI reproduces the complete nine-repository final projection; both MCP transports and the published-v0.28.1 upgrade checks passed.