Retention's page, after the review found the checkpoint launderable

[arpanghoshal]

Pairs with ctrlrun#205, and stacks on #34, which is still open.

#34 described retention as it was written. An independent review of the kernel then found seven defects in it, and two of them are things that page asserts.

The checkpoint. The page said a forged checkpoint is narrowed by the anchor. It was not. Supersession was decided from the union of what the provider returned and what the store's own anchors table held, so one INSERT beside the forged checkpoint row bought it, and the hash in that row was never read. The paragraph now says what is true after the fix, including the half that was always true: anyone who can write receipts can write both rows, and what narrows that is the provider, which is outside the store.

The receipts. A refused prune and a successful one left byte-identical records, and --older-than was in neither. The prune now leaves two, a request and its outcome, and the page has a short section saying so.

The "verified by" line moves to the tests that actually bind. T547b passed throughout the laundering hole, because it writes the checkpoint row and no anchors row beside it.

Also here: CLAIMS.md's line numbers follow the CLI's new lines, by scripts/repoint-claims.py; the readiness block is re-measured rather than incremented, 6,192 to 6,210, against a checkout carrying the extras CI installs and not the local one with psycopg.

all checks passed             (ruff, ruff format, 1727 passed)
snippets: 98 runnable block(s) in 198 documents, 0 failed
lint: 198 document(s), 0 finding(s)
links: 192 document(s), 0 broken, 0 planned
capabilities: 26 entries, 0 drifted copy(ies)
readiness: 0 drifted

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 4d859e74-cf3c-4b6f-b215-4298794f6ff4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}