Preserve final dynamic secret tags in inspection
This commit is contained in:
@@ -8,7 +8,7 @@ Comparison baseline: `0dd16aa8a935645ae2847d32edd86461dc4618f0`
|
||||
Scope: the completed [implementation plan](implementation.md) and
|
||||
[interface remediation roadmap](interface-remediation.md). This report records
|
||||
remaining defects and newly introduced scalability problems; it does not change
|
||||
the selected architecture or public contracts. All eight findings below are open.
|
||||
the selected architecture or public contracts. Completion is recorded per finding.
|
||||
|
||||
## Architecture And Review Evidence
|
||||
|
||||
@@ -59,7 +59,12 @@ deferred contributor-trace and branch-local replay experiments remain separate.
|
||||
|
||||
## 1. Final Dynamic Field Tags Can Be Lost From Redaction
|
||||
|
||||
Priority: P1. Status: open.
|
||||
Priority: P1. Status: complete.
|
||||
|
||||
Completion: final inventory/sensitivity is registered unconditionally before
|
||||
freezing. `TestFinalDynamicTagRedactsEqualValuedResolution` failed before the fix
|
||||
and passes afterward, protecting effective and historical public rendering.
|
||||
Validation: the full ordinary suite and `git diff --check` passed.
|
||||
|
||||
Relevant code: `resolveLoadInput` in
|
||||
[load_result.go](../../internal/engine/load_result.go), lines 56–73;
|
||||
|
||||
Reference in New Issue
Block a user