From 5639d67928543d488deb1c9dc91aa3740d80ad44 Mon Sep 17 00:00:00 2001 From: Umang Date: Fri, 31 Jul 2026 15:26:47 -0500 Subject: [PATCH] Fix authoritative verification documentation --- docs/SUBMISSION_CHECKLIST.md | 2 +- script/verify_recovery.sh | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/SUBMISSION_CHECKLIST.md b/docs/SUBMISSION_CHECKLIST.md index 4e09337..6ed1f23 100644 --- a/docs/SUBMISSION_CHECKLIST.md +++ b/docs/SUBMISSION_CHECKLIST.md @@ -329,7 +329,7 @@ particular, read the erratum atop ```bash claim_pattern='exactly[ -]?once|effectively[ -]?once|once-only[[:space:]]+(execution|processing|delivery)|(complete|full|exhaustive)[[:space:]]+(upstream[[:space:]]+)?(event[[:space:]]+)?capture|captur(e|es|ed|ing)[[:space:]]+(all|every)[[:space:]]+(upstream[[:space:]]+|public[[:space:]]+|GitHub[[:space:]]+)?events?|(complete|full|exhaustive)[[:space:]]+enrichment([[:space:]]+coverage)?|enrich(es|ed|ing)?[[:space:]]+(all|every)[[:space:]]+(actors?|repositories|entities)|sampling[[:space:]]+becomes[[:space:]]+coverage|100%[[:space:]]+(capture|enrichment|coverage)' -git grep -nEI "$claim_pattern" -- . +git grep -nI -i -E "$claim_pattern" -- . ``` **The rule: every prose hit must explicitly reject the guarantee.** The regex assignment diff --git a/script/verify_recovery.sh b/script/verify_recovery.sh index 943bff8..9a92e29 100755 --- a/script/verify_recovery.sh +++ b/script/verify_recovery.sh @@ -44,8 +44,9 @@ # to, and a container-killing tool there invites someone to wire it into compose or CI. # # COST: kills and restarts the running db, web and worker containers, and writes to the -# *development* databases. It never touches the test databases, never removes a volume, and -# never runs db:drop or db:reset. Do not run it against a stack someone else is using. +# *development* databases. Its test-isolation phase prepares and exercises only the isolated +# test databases; the verifier's own SQL never targets them. It never removes a volume or runs +# db:drop or db:reset. Do not run it against a stack someone else is using. # # Nothing in the repository executes this file. spec/docker_compose_spec.rb asserts that, so # "CI never runs the verification" is a red test rather than a promise.