feat(deletion): add durable whole-community deletion - #4425

Open

kalvinnchau wants to merge 53 commits into

mainfrom

am/community-deletion-safety-79536ff

Commits on Aug 10, 2026

feat: add durable community deletion worker

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
am
committed
fd6437e
wip: checkpoint deletion remediation lanes

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
am
committed
7239517
test: cover deletion lifecycle safety boundaries
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
fb2c881
fix: harden deletion executor lease handling

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
am
committed
460f8f5
fix(relay): restore community write fence on persistent ingest

authored and
am
committed
bf3c302
fix: close community deletion serving-write races

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
am
committed
ea2a253
fix(e2e): make live relay checks topology-correct

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
am
committed
d6e7e23
fix(deletion): make community erasure resumable

authored and
am
committed
072ad22
fix(deletion): resume an uncheckpointed first object

authored and
am
committed
5d96da2
test(deletion): exercise crash resume through drained stage
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
3b6d718
fix: preserve admitted git writes through quiescing
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
5c7ecb7
fix: bind deletion approval to frozen inventory digest
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
230634a
fix: bind community deletion execution to approval
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
7fbb841
test: derive owner-limit fixtures from production cap
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
26548f3
chore: keep deletion regressions out of github actions
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
8b4ed65
fix: freeze destructive deletion evidence
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
541ea2e
refactor: remove unused deletion retention scaffolding
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
f9484b6
refactor: defer deletion worker helm packaging
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
b6f4aa5
fix(deletion): support desired-state schema deployments
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
225860e
fix: authorize nip-rs rows during community purge
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
56a4443
refactor: narrow community deletion to operator execution
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
4e78f12
feat: scale community deletion to large tenant buckets

kalvinnchau
authored and
am
committed
dc18d7c
fix: close community deletion safety races
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
7fa2087
fix: scope community deletion storage inventory
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
7e49183
fix: decouple deletion operator commands
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
0830c75
test: restore topology-safe live relay fixtures
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
3174b82
fix: advance community deletion migration to 0028
npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
committed
ca8b5c4
refactor: decouple deletion safety from migration revisions
am
committed
1e3b629
fix: preserve admitted leases through quiescing
am
committed
45e1df8
fix: return typed invite fence errors
am
committed
9ef2454
test: isolate quiesced invite migration database
am
committed
dbee894
fix: isolate community deletion fences

cid
authored and
am
committed
d4acfd4
test: harden community writer inventory

cid
authored and
am
committed
f7110fe
fix: compose writer connection guards

cid
authored and
am
committed
0f0023b
test: close writer scanner escapes

cid
authored and
am
committed
1d46d0f
test: inventory sql execution APIs

cid
authored and
am
committed
3e08cf7
test: classify query builder writes

cid
authored and
am
committed
986ca27
test: calibrate writer pool hooks

cid
authored and
am
committed
251f02b
test: bind dynamic sql fingerprints

cid
authored and
am
committed
2108c97
test: exercise unsafe hook defaults

cid
authored and
am
committed
fbc17e3
test: bind scanner to execution state

cid
authored and
am
committed
22aa23f
test: reject conditional mutating builders

cid
authored and
am
committed
21ae0b0
test: reconstruct builder sql exactly

cid
authored and
am
committed
326c400
test: classify builder mutations by sql ast

authored and
am
committed
9204c8c
test: recurse through builder mutation ast

authored and
am
committed
3f45b51
fix: restore bounded deletion retries

authored and
am
committed
c71a69a
fix: migrate bounded retry state additively

authored and
am
committed
3a2979a
fix: ignore observational row drift before fencing

authored and
am
committed
38316df
chore: reconcile deletion migration numbering

cid
authored and
am
committed
eef2ff7
chore: narrow community deletion scope

cid
authored and
am
committed
2c10597
fix: send policy close on community deletion

cid
authored and
am
committed
9d0c58c
fix: close community deletion release gates

cid
authored and
am
committed
8b0f0bf
chore: remove deletion scanner tooling

cid
authored and
am
committed
8a4bf86