TapTap bb54113254 docs: all-or-nothing TOCTOU caveat and two-section manifest budget ...

The walker's all-or-nothing guarantee holds only while the destination is not
concurrently modified (rehearsal and delete are separate walks).  The
protected-prefix list shares the 16 MB MAX_MANIFEST_BYTES budget with the
keep-set and each section is capped at MAX_MANIFEST_ENTRIES; an over-budget
frame is rejected on the receiver with STATUS_ERROR rather than truncated.

2026-09-06 23:10:42 +02:00

..

client

fix: read scanner io_error before destroy (-m UAF); refuse an empty keep-set from an errored scan

2026-09-06 23:10:32 +02:00

server

feat: split delete-manifest frame into keep-set + protected prefixes; enforce --max-delete and --force on the receiver

2026-09-06 21:50:02 +02:00

shared

docs: all-or-nothing TOCTOU caveat and two-section manifest budget

2026-09-06 23:10:42 +02:00