Step 3: Candidate pipeline

Build and verify one complete candidate without durable output

Goal

Build and verify one complete candidate without durable plaintext or GitHub publication.

Scope

Implement the candidate artifact contracts: the snapshot layout under packages/rsdb/generated/<database>/, safe path-component name checks, the canonical manifest, the exact database.sql review archive, and the secret scan.

Normalize only the temporary directory and the Step 0 unstable fields. Compare all other bytes.

Verify each candidate with the shared verifier's candidate source before the candidate leaves /tmp. The step never loads, bundles, or executes candidate TypeScript.

Tests

Safe and unsafe database names.
Stable ordering, boundaries, byte ranges, and hashes.
Exact preservation of DDL statement bytes.
Two unchanged pulls produce equal canonical manifests.
An AUTO_INCREMENT change remains visible.
Every secret pattern blocks the candidate without exposing the match.
Candidate metadata contains every table, view, and column.
Candidate verification occurs before the candidate leaves /tmp.
Candidate verification never loads candidate TypeScript.
Cleanup occurs after success, permanent error, and retryable error.

Production gate

Extend the tracer to create and verify one candidate. Return only counts, timings, and hashes. Remove all plaintext before the step returns.

Stop if output exceeds 70% of any current Function or /tmp limit. Also stop if Step 0 normalization does not explain every unchanged-run difference.

Step 3: Candidate pipeline

Build and verify one complete candidate without durable output

Goal

Build and verify one complete candidate without durable plaintext or GitHub publication.

Scope

Normalize only the temporary directory and the Step 0 unstable fields. Compare all other bytes.

Verify each candidate with the shared verifier's candidate source before the candidate leaves /tmp. The step never loads, bundles, or executes candidate TypeScript.

Tests

Safe and unsafe database names.
Stable ordering, boundaries, byte ranges, and hashes.
Exact preservation of DDL statement bytes.
Two unchanged pulls produce equal canonical manifests.
An AUTO_INCREMENT change remains visible.
Every secret pattern blocks the candidate without exposing the match.
Candidate metadata contains every table, view, and column.
Candidate verification occurs before the candidate leaves /tmp.
Candidate verification never loads candidate TypeScript.
Cleanup occurs after success, permanent error, and retryable error.

Production gate

Extend the tracer to create and verify one candidate. Return only counts, timings, and hashes. Remove all plaintext before the step returns.

Stop if output exceeds 70% of any current Function or /tmp limit. Also stop if Step 0 normalization does not explain every unchanged-run difference.

Step 3: Candidate pipeline

Build and verify one complete candidate without durable output

Goal

Build and verify one complete candidate without durable plaintext or GitHub publication.

Scope

Normalize only the temporary directory and the Step 0 unstable fields. Compare all other bytes.

Verify each candidate with the shared verifier's candidate source before the candidate leaves /tmp. The step never loads, bundles, or executes candidate TypeScript.

Tests

Safe and unsafe database names.
Stable ordering, boundaries, byte ranges, and hashes.
Exact preservation of DDL statement bytes.
Two unchanged pulls produce equal canonical manifests.
An AUTO_INCREMENT change remains visible.
Every secret pattern blocks the candidate without exposing the match.
Candidate metadata contains every table, view, and column.
Candidate verification occurs before the candidate leaves /tmp.
Candidate verification never loads candidate TypeScript.
Cleanup occurs after success, permanent error, and retryable error.

Production gate

Extend the tracer to create and verify one candidate. Return only counts, timings, and hashes. Remove all plaintext before the step returns.

Stop if output exceeds 70% of any current Function or /tmp limit. Also stop if Step 0 normalization does not explain every unchanged-run difference.

Step 3: Candidate pipeline

Build and verify one complete candidate without durable output

Goal

Build and verify one complete candidate without durable plaintext or GitHub publication.

Scope

Normalize only the temporary directory and the Step 0 unstable fields. Compare all other bytes.

Verify each candidate with the shared verifier's candidate source before the candidate leaves /tmp. The step never loads, bundles, or executes candidate TypeScript.

Tests

Safe and unsafe database names.
Stable ordering, boundaries, byte ranges, and hashes.
Exact preservation of DDL statement bytes.
Two unchanged pulls produce equal canonical manifests.
An AUTO_INCREMENT change remains visible.
Every secret pattern blocks the candidate without exposing the match.
Candidate metadata contains every table, view, and column.
Candidate verification occurs before the candidate leaves /tmp.
Candidate verification never loads candidate TypeScript.
Cleanup occurs after success, permanent error, and retryable error.

Production gate

Extend the tracer to create and verify one candidate. Return only counts, timings, and hashes. Remove all plaintext before the step returns.

Stop if output exceeds 70% of any current Function or /tmp limit. Also stop if Step 0 normalization does not explain every unchanged-run difference.

Search documentation

Search documentation

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Search documentation

Goal

Scope

Tests

Production gate

Search documentation

Goal

Scope

Tests

Production gate