#235: keep page_links rows pointing at purged pages (recorded decision) #256

Merged

fable-5 merged 1 commits from feat/235-page-links-purge-decision into main 2026-07-30 23:10:51 +02:00

Conversation 0 Commits 1 Files Changed 2 +14 -1

fable-5 commented 2026-07-30 22:18:49 +02:00

Collaborator

Copy Link

Stacked on #255 (#234) -> #254 (#233). Deliberately a decision, not a behaviour change (issue #235, I-24).

Decision: rows are KEPT as an accepted residue. The page_links row is only the index of a wikilink whose text (slug = title) remains visible in the linking page's own content either way — deleting the index row would remove nothing the system still shows (content, content cache, source page's search index) while breaking the deliberate phantom-link re-resolution. Reasoning lives in operations.md's purge section; residual-risk comment goes on #231 and the #229 deletion chapter gets a pointer after merge.

Stacked on #255 (#234) -> #254 (#233). Deliberately a decision, not a behaviour change (issue #235, I-24). Decision: rows are KEPT as an accepted residue. The page_links row is only the index of a wikilink whose text (slug = title) remains visible in the linking page's own content either way — deleting the index row would remove nothing the system still shows (content, content cache, source page's search index) while breaking the deliberate phantom-link re-resolution. Reasoning lives in operations.md's purge section; residual-risk comment goes on #231 and the #229 deletion chapter gets a pointer after merge.

fable-5 added 3 commits 2026-07-30 22:18:50 +02:00

#233: prune conversion job payloads for every job kind ... ff505bc752

The raw input/result bytes of import/export conversion jobs were kept
forever; a deleted classified page could live on inside its last export.
A new daily conversion-payload-prune job nulls both once a finished
(succeeded or failed) job passes conversion.payloadRetentionDays
(instance setting, default 30) — the row survives for status/audit.
PENDING and RUNNING rows keep their payload, so the worker's stale-lock
recovery path is untouched; a hand-requeued pruned job fails finally
via conversionInputOf instead of crashing the worker.

The input column becomes nullable; the migration backfills by clearing
payloads of jobs already finished longer ago than the default period
(recent results stay downloadable until they age out).

Job-count fence in system.spec: 7 -> 8 (new scheduler registration).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168Ph5uBmHm8X28CSVpbpnJ

#234: retention for mail_outbox ... 69d9072d2c

Sent mails were kept forever, and digest bodies name page titles and
actors — an unbounded copy of content-adjacent data. A new daily
mail-outbox-retention job deletes SENT rows (by sentAt) and permanently
FAILED rows (by nextAttemptAt, the last attempt's stamp) once they pass
mail.outboxRetentionDays (instance setting, default 30). PENDING rows —
including failed-but-retryable ones — stay the retry loop's alone.

Decision recorded (security.md §Privacy, residual-risk note for #231):
digest mails keep carrying page titles for now — there is no per-page
classification marking yet to key a suppression on (ADR 0022 / M32
revisits), and a VS-NfD reference configuration can leave SMTP
unconfigured entirely.

Job-count fence in system.spec: 8 -> 9.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168Ph5uBmHm8X28CSVpbpnJ

#235: keep page_links rows pointing at purged pages — recorded decision ... 9a43a2f6bb

The row is only the index of a wikilink whose text (slug = title)
remains visible in the linking page's own content either way; deleting
the index would remove nothing the system still shows while breaking
phantom-link re-resolution. Kept as an accepted residue, reasoning in
operations.md (deletion/purge section) and recorded on #231.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0168Ph5uBmHm8X28CSVpbpnJ

fable-5 referenced this pull request 2026-07-30 22:20:56 +02:00

[VS-NfD] Maintain the residual-risk list #231

fable-5 merged commit 9a43a2f6bb into main 2026-07-30 23:10:51 +02:00

fable-5 referenced this pull request 2026-07-30 23:11:09 +02:00

[VS-NfD] Decide the fate of `page_links` rows pointing at purged pages #235

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area:auth

  

area:docs

  

area:export

  

area:ops

  

area:storage

  

area:supply-chain

  

auth

Authentication, permissions, quotas

  

backend

API server (apps/api)

  

blocked

Blocked on external dependency/infrastructure

  

collab

Collaboration server (apps/collab)

  

deployment

Docker, CI/CD, hosting

  

docs

Documentation

  

effort:L

  

effort:M

  

effort:S

  

frontend

SPA (apps/web)

  

plugins

Plugin system and SDK

  

qa

Tests, fixtures, e2e

  

vs-nfd

  

vs-nfd:blocker

No Label

area:auth

area:docs

area:export

area:ops

area:storage

area:supply-chain

auth

backend

blocked

collab

deployment

docs

effort:L

effort:M

effort:S

frontend

plugins

qa

vs-nfd

vs-nfd:blocker

Milestone

Clear milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

No Assignees

1 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stwaidele/dorfteich#256

No description provided.