feat(deletion): add durable whole-community deletion - #4425

Open

kalvinnchau wants to merge 53 commits into

mainfrom

am/community-deletion-safety-79536ff

Commits on Aug 7, 2026

feat: add durable community deletion worker

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
2b0055b
wip: checkpoint deletion remediation lanes

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
d47e4cc
test: cover deletion lifecycle safety boundaries

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
7791382
fix: harden deletion executor lease handling

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
6c71a3b
fix(relay): restore community write fence on persistent ingest

authored and
cid
committed
4e8d883
fix: close community deletion serving-write races

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
7cd7a71
fix(e2e): make live relay checks topology-correct

npub122y0pqkertljmedu303rl0aqrj3w8pvu43t6jxm6875lzg6f2pwqegc3xc
authored and
cid
committed
8b17619
fix(deletion): make community erasure resumable

authored and
cid
committed
bc1547b
fix(deletion): resume an uncheckpointed first object

authored and
cid
committed
9a9ea72
test(deletion): exercise crash resume through drained stage

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
70df23b
fix: preserve admitted git writes through quiescing

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
86a164a
fix: bind deletion approval to frozen inventory digest

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
64ddf8b
fix: bind community deletion execution to approval

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
e5cf349
test: derive owner-limit fixtures from production cap

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
79fadb9
chore: keep deletion regressions out of github actions

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
256d80e
fix: freeze destructive deletion evidence

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
c606669
refactor: remove unused deletion retention scaffolding

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
9de48b1
refactor: defer deletion worker helm packaging

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
c08678e
fix(deletion): support desired-state schema deployments

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
11bedf9
fix: authorize nip-rs rows during community purge

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
c8d17f4
refactor: narrow community deletion to operator execution

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
9a0e3d9
feat: scale community deletion to large tenant buckets

kalvinnchau
authored and
cid
committed
d51c7d2
fix: close community deletion safety races

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
f4384f9
fix: scope community deletion storage inventory

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
36dabb4
fix: decouple deletion operator commands

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
3cbba4b
test: restore topology-safe live relay fixtures

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
1a2c2e4
fix: advance community deletion migration to 0028

npub1dccv64krpcpse5cmkzfeh998cftungyatw3djt8jwdw6g43f7fyqzzmrf7
authored and
cid
committed
bfb90c0
refactor: decouple deletion safety from migration revisions

am
authored and
cid
committed
7aced35
fix: preserve admitted leases through quiescing

am
authored and
cid
committed
1fa514b
fix: return typed invite fence errors

am
authored and
cid
committed
f4ab399
test: isolate quiesced invite migration database

am
authored and
cid
committed
8b2b912
fix: isolate community deletion fences
cid
committed
ccff069
test: harden community writer inventory
cid
committed
7f45361
fix: compose writer connection guards
cid
committed
8c38495
test: close writer scanner escapes
cid
committed
1e92d50
test: inventory sql execution APIs
cid
committed
39a65ea
test: classify query builder writes
cid
committed
d2d175b
test: calibrate writer pool hooks
cid
committed
9cae585
test: bind dynamic sql fingerprints
cid
committed
98e9028
test: exercise unsafe hook defaults
cid
committed
5d4dc84
test: bind scanner to execution state
cid
committed
c82ae3e
test: reject conditional mutating builders
cid
committed
f4d7cce
test: reconstruct builder sql exactly
cid
committed
c7529a9
test: classify builder mutations by sql ast

cid
and
kalvinnchau
committed
4605e92
test: recurse through builder mutation ast

cid
and
kalvinnchau
committed
497b9f4
fix: restore bounded deletion retries

cid
and
kalvinnchau
committed
01da678
fix: migrate bounded retry state additively

cid
and
kalvinnchau
committed
8ec0933
fix: ignore observational row drift before fencing

cid
and
kalvinnchau
committed
e933239
chore: reconcile deletion migration numbering
cid
committed
a62e9ae
chore: narrow community deletion scope
cid
committed
8938d58
fix: send policy close on community deletion
cid
committed
d894f6d
fix: close community deletion release gates
cid
committed
4da21a3
chore: remove deletion scanner tooling
cid
committed
359d840