fix(evidence): bound reports and fail failed jobs

2026-07-12 06:45:19 +02:00
parent 03ee3ffda8
commit 0a2421c513
5 changed files with 97 additions and 5 deletions
@@ -155,3 +155,18 @@ job retention is safe without weakening cross-thread/process exclusion; the CLI
 double-locks. Search find/pack performs locked corpus ownership preflight immediately after config
 load, before DWH leasing, vector/searcher factories, embeddings, or schema work. Focused concurrency
 and fail-closed tests, real Docker lifecycle, scoped Ruff/diff, and the full harness pass.
+
+## Compact public Evidence reports
+
+- Public `PipelineResult.model_dump()` is now a bounded operational envelope: terminal status,
+  run/resume/publication/generation/manifest identifiers, capped changed/unchanged/removed source
+  identifiers, and aggregate document/chunk counts. Full manifests, bodies, and metadata remain
+  internal/on disk and are never serialized to CLI stdout.
+- `tht preprocess evidence` exits `1` for any durable terminal status other than `succeeded` in
+  both JSON and text modes. JSON stdout remains one pristine sanitized object; text mode emits one
+  compact stderr error without traceback, exception identity, evidence content, or credentials.
+- Tests cover a real failed acquisition job, sensitive evidence content, capped thousand-item
+  summaries, bounded report size, and smoke-compatible changed/unchanged fields.
+
+Focused tests and scoped Ruff/diff pass. The contemporaneous full suite reaches an unrelated Task 6
+DWH snapshot fixture missing its newly required workspace identity.