[Debt] Adopt the Core recovery ledger for governed connector synchronization #15

New Issue

2026-08-03T02:11:45+02:00

zemion commented

2026-08-03 02:11:45 +02:00

Parent: GovOPlaN/govoplan#36.

Objective

Require connector-owned external mutations and synchronization cursors to use the Core recovery contract.

Acceptance criteria

Connector operation metadata declares recovery mode, idempotency support, verification, and compensation/forward-recovery behavior.
Synchronization request hash, source revision/cursor, dry-run evidence, and lease fence are durable before effects.
Partial and outcome-unknown provider results remain operator-visible and cannot be blindly retried.
The contract works with Connectors enabled alone and with each optional consumer absent.
Conformance tests cover crash, retry, stale-fence, tamper, and provider rejection.

Parent: GovOPlaN/govoplan#36. ## Objective Require connector-owned external mutations and synchronization cursors to use the Core recovery contract. ## Acceptance criteria - [ ] Connector operation metadata declares recovery mode, idempotency support, verification, and compensation/forward-recovery behavior. - [ ] Synchronization request hash, source revision/cursor, dry-run evidence, and lease fence are durable before effects. - [ ] Partial and outcome-unknown provider results remain operator-visible and cannot be blindly retried. - [ ] The contract works with Connectors enabled alone and with each optional consumer absent. - [ ] Conformance tests cover crash, retry, stale-fence, tamper, and provider rejection.

zemion added the module/connectors

area/security codex/ready

priority

p2

labels 2026-08-03 02:11:45 +02:00

zemion added

and removed

labels 2026-08-03 05:02:27 +02:00

zemion commented

2026-08-03 05:44:29 +02:00

Implemented and pushed the governed connector recovery adoption.\n\n- Core 842be5e adds atomic terminal commits so domain rows and recovery checkpoints share one transaction.\n- Connectors dfa717b fences sanctions/feed acquisitions before provider I/O, records revisions/cursors and dry-run evidence, supports idempotent replay, atomically commits immutable snapshots, and exposes a forward-recovery contract for future external mutations.\n- Meta 484f2af records connectors.sync.read-snapshot as adopted. External mutation remains explicitly planned because no production connector currently writes to a provider.\n\nVerification: 28 Connectors tests plus 3 subtests; 10 Core recovery tests; Ruff; manifest/architecture/dependency checks; backend/migration suites; and all 46 WebUI module permutations passed.

Implemented and pushed the governed connector recovery adoption.\n\n- Core `842be5e` adds atomic terminal commits so domain rows and recovery checkpoints share one transaction.\n- Connectors `dfa717b` fences sanctions/feed acquisitions before provider I/O, records revisions/cursors and dry-run evidence, supports idempotent replay, atomically commits immutable snapshots, and exposes a forward-recovery contract for future external mutations.\n- Meta `484f2af` records `connectors.sync.read-snapshot` as adopted. External mutation remains explicitly planned because no production connector currently writes to a provider.\n\nVerification: 28 Connectors tests plus 3 subtests; 10 Core recovery tests; Ruff; manifest/architecture/dependency checks; backend/migration suites; and all 46 WebUI module permutations passed.

zemion removed the

status

in-progress

codex/ready labels 2026-08-03 05:44:33 +02:00

zemion closed this issue

2026-08-03 05:44:33 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-connectors#15