fix: Artemis drift at source - #41

Merged

raisedadead merged 41 commits into

mainfrom

fix/artemis-drift-at-source

Aug 17, 2026

Commits on Aug 17, 2026

docs: design the fix for drift at its source
raisedadead
committed
3de628c
docs: ground the domain layout and correct blast cap
raisedadead
committed
020e7d0
fix(gc): read live aliases in the sweep keyspace
raisedadead
committed
9fcad98
fix(cli): reject unknown subcommands and stray args
raisedadead
committed
94acced
fix(gc): record the tombstone row before moving bytes
raisedadead
committed
a5ed663
fix(gc): make a zero blast cap refuse, not unleash
raisedadead
committed
5b9bb0f
fix(handler): build public URLs from config
raisedadead
committed
11eb897
feat(pg): record a pending row when a deploy starts
raisedadead
committed
7e26730
feat(handler): register the deploy session at init
raisedadead
committed
1059c6d
feat(gc): expire abandoned deploy sessions
raisedadead
committed
7a92fde
fix(drift): alert on accruing reclaimable drift
raisedadead
committed
a5884ce
test(gc): pin both key renderers to one layout
raisedadead
committed
183bdb6
docs: record what the drift sprint shipped
raisedadead
committed
a779ece
test(handler): run the pending fixture on the prod format
raisedadead
committed
0acc548
docs: refresh onboarding for the drift sprint
raisedadead
committed
937e315
test(cli): align boot fixtures with the alias keyspace
raisedadead
committed
f733478
fix(drift): stop the blast cap silencing the report
raisedadead
committed
96d1022
fix(cli): name the failing subcommand on stderr
raisedadead
committed
b093460
docs: correct blast cap and new url env vars
raisedadead
committed
b534f7c
fix(gc): reap the oldest across both delete sources
raisedadead
committed
04f48cf
fix(gc): refuse a site token outside the site segment
raisedadead
committed
9f90a06
fix(handler): record tombstones before moving bytes
raisedadead
committed
5fa5317
fix(auth): give the scope guard an honest signature
raisedadead
committed
030a9c6
fix(auth): classify secondary throttles as rate limits
raisedadead
committed
a4c3abc
refactor(gc): one owner for oldest-first cap selection
raisedadead
committed
bb61e8b
fix(gc): cap the purge and survive per-site failures
raisedadead
committed
2e15f45
fix(gc): give both gc jobs explicit run budgets
raisedadead
committed
4c1cb7d
fix(backfill): render R2 keys from the configured layout
raisedadead
committed
5c97934
refactor(pg): one implementation for the site lock
raisedadead
committed
778f00b
fix(auth): bound the in-process identity caches
raisedadead
committed
5c1cc74
fix(server): give upload and finalize a deadline
raisedadead
committed
7036f49
chore: delete the dead background-plane code
raisedadead
committed
82fe408
chore(repo): drop dead valkey store, fix op tags
raisedadead
committed
fc0e5b6
docs(registry): correct what happens after delete
raisedadead
committed
a69bd6a
docs: date the design-doc claims to what shipped
raisedadead
committed
e6361f3
docs: bring the architecture up to the shipped code
raisedadead
committed
ce4bc43
docs: drop the reading step for the deleted section
raisedadead
committed
8eabe10
chore: drop orphaned test fixtures
raisedadead
committed
eb8f44b
fix(auth): classify 429s and close review findings
raisedadead
committed
6b1ad31
docs: correct the reaping-order recovery claims
raisedadead
committed
51848ad
docs: record wave outcome and open decisions
raisedadead
committed
96919c4