feat(deletion): add durable whole-community deletion - #4425

Open

kalvinnchau wants to merge 52 commits into

mainfrom

am/community-deletion-safety-79536ff

Commits on Aug 7, 2026

feat: add durable community deletion worker

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
9d59cd5
wip: checkpoint deletion remediation lanes

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
f2726d5
test: cover deletion lifecycle safety boundaries

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
3a909ae
fix: harden deletion executor lease handling

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
71e0593
fix(relay): restore community write fence on persistent ingest

authored and
cid
committed
47cd6e7
fix: close community deletion serving-write races

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
db15c2b
fix(e2e): make live relay checks topology-correct

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
10b8b16
fix(deletion): make community erasure resumable

authored and
cid
committed
a2c3bd4
fix(deletion): resume an uncheckpointed first object

authored and
cid
committed
b5b5a3f
test(deletion): exercise crash resume through drained stage

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
bb61cc1
fix: preserve admitted git writes through quiescing

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
da48fa4
fix: bind deletion approval to frozen inventory digest

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
82417b9
fix: bind community deletion execution to approval

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
2ee7b14
test: derive owner-limit fixtures from production cap

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
3cdde4c
chore: keep deletion regressions out of github actions

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
a48ac27
fix: freeze destructive deletion evidence

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
6c986fb
refactor: remove unused deletion retention scaffolding

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
8960db5
refactor: defer deletion worker helm packaging

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
9067523
fix(deletion): support desired-state schema deployments

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
8000c64
fix: authorize nip-rs rows during community purge

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
514c35b
refactor: narrow community deletion to operator execution

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
fb8abe6
feat: scale community deletion to large tenant buckets

kalvinnchau
authored and
cid
committed
885fa46
fix: close community deletion safety races

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
113e9d0
fix: scope community deletion storage inventory

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
c9eb043
fix: decouple deletion operator commands

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
2a57c28
test: restore topology-safe live relay fixtures

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
e24a265
fix: advance community deletion migration to 0028

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
644d41e
refactor: decouple deletion safety from migration revisions

am
authored and
cid
committed
c9e0ac8
fix: preserve admitted leases through quiescing

am
authored and
cid
committed
a90a685
fix: return typed invite fence errors

am
authored and
cid
committed
0be02cf
test: isolate quiesced invite migration database

am
authored and
cid
committed
14ea1d5
fix: isolate community deletion fences
cid
committed
75405c5
test: harden community writer inventory
cid
committed
2e31670
fix: compose writer connection guards
cid
committed
b3a40e2
test: close writer scanner escapes
cid
committed
5a02401
test: inventory sql execution APIs
cid
committed
a792771
test: classify query builder writes
cid
committed
b6150da
test: calibrate writer pool hooks
cid
committed
0a5900e
test: bind dynamic sql fingerprints
cid
committed
2615b21
test: exercise unsafe hook defaults
cid
committed
79788c2
test: bind scanner to execution state
cid
committed
9b5ce0f
test: reject conditional mutating builders
cid
committed
e63a1da
test: reconstruct builder sql exactly
cid
committed
0c57e99
test: classify builder mutations by sql ast

cid
and
kalvinnchau
committed
36c806f
test: recurse through builder mutation ast

cid
and
kalvinnchau
committed
732a2ad
fix: restore bounded deletion retries

cid
and
kalvinnchau
committed
c58eddf
fix: migrate bounded retry state additively

cid
and
kalvinnchau
committed
b6e0482
fix: ignore observational row drift before fencing

cid
and
kalvinnchau
committed
3b7b99f
chore: reconcile deletion migration numbering
cid
committed
3981fc6
chore: narrow community deletion scope
cid
committed
96553ca
fix: send policy close on community deletion
cid
committed
95278db
fix: close community deletion release gates
cid
committed
9289922