12e043e2
docs: settle the seven questions raised by review
- Read contract keeps pinned ?rev= and the approved/draft split. The review UI needs blob->render at arbitrary revs regardless, so pinning is nearly free and makes X-Agent-Base auditable. - Materialized checkout dropped. One read path over git objects for approved head, pinned revs and proposal branches alike, which removes atomic swap, rev stamps, a cache directory and two crash-repair rows. Cost is bounded: vault.Scan touches the filesystem twice and vault.FromPages already accepts pre-loaded pages. - Volume is tens of documents a day, so warren's batch index rebuild is absorbed unchanged and incremental indexing is explicitly not built. - One agent token plus mandatory provenance. The refs rule is the boundary that bounds damage; per-space scoping defers to a column and a filter. - Human pushes are validated too, with a skip-validation push option. The risk is a typo corrupting the global ID registry, not malice. - External corpora left unspecified; global IDs are the only forward compatibility needed. - Name confirmed as spec.sr.ht.
bigbes <bigbes@gmail.com> — 2026-07-22 07:19:53 UTC
Commit 12e043e26812d9e5bd37d4b93684830f714ca71c —
view raw patch
Parent(s):
f0dcfb4d
| File | Status | + | − |
|---|---|---|---|
docs/DESIGN.md
|
M | +119 | -95 |