Refuse prune apply when requested image inventories are unavailable
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 02:00:50 +02:00
parent 0349a08e1b
commit f637989a69
4 changed files with 58 additions and 4 deletions

View file

@ -25,6 +25,11 @@ priority: high
Implemented scripts/refresh_live_images.py and make live-images-refresh. Publication validates exports before mutation, locks concurrent writers, retains all previous cluster entries, and fsyncs an atomic replacement. Offline tests prove repeatability, multi-cluster retention, and preservation on missing, empty, or malformed input.
The local prune CLI was additionally hardened on 2026-09-05 to refuse apply
before credential lookup if any explicitly requested export is missing,
unreadable, empty, or comment-only. Regression coverage includes a valid file
alongside a bad one, proving partial coverage cannot authorize deletion.
## Install production projection and rollout refresh
```task