Skip to content

fix(read): block v8 score replay - #145

Merged
AsperforMias merged 1 commit into
hikariming:devfrom
AsperforMias:fix/deny-v8-public-read
Jul 20, 2026
Merged

fix(read): block v8 score replay#145
AsperforMias merged 1 commit into
hikariming:devfrom
AsperforMias:fix/deny-v8-public-read

Conversation

@AsperforMias

@AsperforMias AsperforMias commented Jul 20, 2026

Copy link
Copy Markdown
Collaborator

What changes

  • Public score reads now accept only canonical v9 rows; v8 cannot appear in profiles, score APIs, search, leaderboards, facets, badges, sitemap inputs, related accounts, repositories, or follows.
  • Synchronous quick scan remains the preferred path and materializes v9 before score and roast.
  • Verified v5/v5/v3 remains an explicit read-only fallback only after the quick collector fails.
  • The MCP score path follows the same rule.

Safety

  • No score, roast, or collection version was bumped: runtime remains v9/v9/v4.
  • The release guard rejects restoring v8 to the public read order.
  • A defensive API test verifies that an accidental v8 detail is never replayed.

Verification

  • pnpm test (66 files, 500 tests)
  • pnpm typecheck
  • pnpm lint
  • pnpm versions:check
  • pnpm build

@AsperforMias
AsperforMias requested a review from hikariming as a code owner July 20, 2026 20:44
@vercel

vercel Bot commented Jul 20, 2026

Copy link
Copy Markdown

@AsperforMias is attempting to deploy a commit to the hikariming's projects Team on Vercel.

A member of the Team first needs to authorize it.

@AsperforMias
AsperforMias merged commit e72a6e5 into hikariming:dev Jul 20, 2026
1 of 2 checks passed
@AsperforMias
AsperforMias deleted the fix/deny-v8-public-read branch July 20, 2026 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant