cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test(cv-import): qualify regression and hand off conditional acceptance

Browse Source
This commit is contained in:
cesnimda
2026-10-26 19:09:43 +01:00
parent b62962c68a
commit ef425c288b
11 changed files with 438 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/cv-import/SECURITY.md
+1 -1
View File
@@ -14,7 +14,7 @@
| Stale/lost writes | Canonical expected revision, existing atomic transaction/history/children/projection, lease-conditioned publication/status, idempotent apply | Actual MariaDB stale/rollback/idempotency, RD21 regressions; successful response follows durable commit |
| Privacy/retention | Original source private/no-store/nosniff, authenticated blob preview, safe owned paths, bounded sanitized parser errors, cleanup retry and reparse/root checks | Retention/orphan/cancel/expiry tests; account export/delete reuse existing owners |
Original import files and extraction evidence last up to seven days (one day for failed/cancelled/discarded work), plus up to the hourly sweep interval while the application is running. Startup sweep catches expired work after downtime. Pending work is revoked before deletion; failed deletion retains the reference for retry. Original source becomes unavailable after expiration. Approved canonical facts, review history and approved evidence snippets follow existing account-retention/deletion policy; they are not silently deleted with the temporary source. Operators must account for normal backup retention separately.
Original import files, raw extracted text and document-block JSON last up to seven days (one day for failed/cancelled/discarded work), plus up to the hourly sweep interval while the application is running. Startup sweep catches expired work after downtime. Pending work is revoked before deletion; failed deletion retains the reference for retry. Original source becomes unavailable after expiration. Unapplied structured candidates are cleared. Applied runs retain their structured candidate (including unselected extracted fields/evidence), decision acknowledgement and approved canonical facts/history under existing account-retention/deletion policy; they are not deleted with the temporary source. This audit-history retention must be included in privacy review; account deletion removes it. Operators must account for normal backup retention separately.
No production services, Docker configuration, MariaDB schema, filesystem, model cache, Ollama model or deployment was changed. Test containers use owned disposable identities and synthetic documents. Test service port is loopback-only. New dependencies were installed only into isolated development runtimes and hash-verified wheel contexts. Current dependency checks: npm 881 dependencies / zero reported vulnerabilities, NuGet API no reported vulnerable packages, CV-import Python lock 48 dependencies / zero skipped / zero reported vulnerabilities. Evidence: `.artifacts/cv-import/{npm-audit-01.json,dotnet-audit-01.json,pip-audit-01.json}`. Advisory queries are point-in-time checks, not proof against all vulnerabilities.