Preserve final dynamic secret tags in inspection

This commit is contained in:
2026-10-27 03:02:17 +00:00
parent 896c1cde08
commit 17216a40f3
3 changed files with 63 additions and 2 deletions

View File

@@ -8,7 +8,7 @@ Comparison baseline: `0dd16aa8a935645ae2847d32edd86461dc4618f0`
Scope: the completed [implementation plan](implementation.md) and
[interface remediation roadmap](interface-remediation.md). This report records
remaining defects and newly introduced scalability problems; it does not change
the selected architecture or public contracts. All eight findings below are open.
the selected architecture or public contracts. Completion is recorded per finding.
## Architecture And Review Evidence
@@ -59,7 +59,12 @@ deferred contributor-trace and branch-local replay experiments remain separate.
## 1. Final Dynamic Field Tags Can Be Lost From Redaction
Priority: P1. Status: open.
Priority: P1. Status: complete.
Completion: final inventory/sensitivity is registered unconditionally before
freezing. `TestFinalDynamicTagRedactsEqualValuedResolution` failed before the fix
and passes afterward, protecting effective and historical public rendering.
Validation: the full ordinary suite and `git diff --check` passed.
Relevant code: `resolveLoadInput` in
[load_result.go](../../internal/engine/load_result.go), lines 56–73;