Harden change scanning and backup diagnostics #7

Merged

kleb merged 18 commits from feature/safe-change-scanning into main

2026-07-31 07:07:02 +02:00

kleb commented

2026-07-30 20:06:38 +02:00

Owner

Summary

fail closed when image capture does not have an immutable capture point, fix ext4 1 KiB mapping, tighten NTFS sparse coverage and dm-era parsing, and add per-volume capture outcomes
introduce repository format v4 with restartable legacy image integrity auditing, read-only legacy repositories, and guarded restores for unproven images
add redacted durable Activity storage, request correlation, paged run detail, source preflight, persistent operator errors, and the connected first-backup workflow
bound CBT verification and upload state, stream index publication, and preserve existing FastCDC boundaries

Validation

go test ./...
go test -race ./internal/activity ./internal/progress ./internal/runhistory ./internal/capture/image ./internal/repo
go vet ./internal/capture/image ./internal/capture/fstree ./internal/capture/cbt ./internal/ext4 ./internal/ntfs ./internal/activity ./internal/progress ./internal/runhistory ./internal/service ./internal/web ./internal/repo
Linux internal/service cross-compile
npm run check
npm run e2e (15 tests)

Platform gates

Linux coordinated dm-era/LVM acceleration, NTFS journal subtree reuse, encrypted checkpoint spilling, and formal large-scale memory qualification remain disabled until their platform fixtures pass.

## Summary - fail closed when image capture does not have an immutable capture point, fix ext4 1 KiB mapping, tighten NTFS sparse coverage and dm-era parsing, and add per-volume capture outcomes - introduce repository format v4 with restartable legacy image integrity auditing, read-only legacy repositories, and guarded restores for unproven images - add redacted durable Activity storage, request correlation, paged run detail, source preflight, persistent operator errors, and the connected first-backup workflow - bound CBT verification and upload state, stream index publication, and preserve existing FastCDC boundaries ## Validation - `go test ./...` - `go test -race ./internal/activity ./internal/progress ./internal/runhistory ./internal/capture/image ./internal/repo` - `go vet ./internal/capture/image ./internal/capture/fstree ./internal/capture/cbt ./internal/ext4 ./internal/ntfs ./internal/activity ./internal/progress ./internal/runhistory ./internal/service ./internal/web ./internal/repo` - Linux `internal/service` cross-compile - `npm run check` - `npm run e2e` (15 tests) ## Platform gates Linux coordinated dm-era/LVM acceleration, NTFS journal subtree reuse, encrypted checkpoint spilling, and formal large-scale memory qualification remain disabled until their platform fixtures pass.

kleb added 1 commit

2026-07-30 20:06:38 +02:00

Harden change scanning and backup diagnostics 84904e3ee5

kAgent commented

2026-07-30 20:06:39 +02:00

Collaborator

kReview review

Verdict: no findings

No findings to address in the reviewed diff.

Low risk: no concrete correctness, security, or data-integrity defects are provable from the supplied diff.

Reviewed by kReview at ba852dac0c. This comment is conservative and based only on the PR diff and metadata.

Est. cost ~$30.15 total (5.7M in / 107.7k out) · this run ~$1.02 (179.5k in / 4.5k out) / gpt-5.6-sol.

## kReview review **Verdict:** no findings No findings to address in the reviewed diff. Low risk: no concrete correctness, security, or data-integrity defects are provable from the supplied diff. _Reviewed by kReview at `ba852dac0c`. This comment is conservative and based only on the PR diff and metadata._ _Est. cost ~$30.15 total (5.7M in / 107.7k out) · this run ~$1.02 (179.5k in / 4.5k out) / gpt-5.6-sol._

kleb added 1 commit

2026-07-30 20:45:38 +02:00

Address change scanning review findings f8ed49de25

kleb added 1 commit

2026-07-30 20:53:19 +02:00

Fix run metric and history error handling 335197f4bf

kleb added 1 commit

2026-07-30 21:00:11 +02:00

Reject nested dm-era records ac626cd067

kleb added 1 commit

2026-07-30 21:05:07 +02:00

Keep legacy image counters aggregate 179f441b2c