vrr/codeburn
2
0
Fork 0
mirror of https://github.com/AgentSeal/codeburn.git synced 2026-08-29 18:33:01 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 8

docs(hermes): record restore wipe-both ledger contract

Browse source 
Owner ruling: state.db restored from backup without wiping the ledger
re-credits regrowth. Wipe both stores or accept the overcount. A
high-water-mark guard is rejected because it would eat 150→0→40 resets.
This commit is contained in:
Aditya Vikram Singh 2026-08-23 23:25:04 +05:30
parent 066e10a3b5
commit 82b3b70aaa
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
src/hermes-session-ledger.ts
View file

@ -12,9 +12,10 @@ import type { CachedCall, ProviderSection } from './session-cache.js'
// - Reset 150 → 0 → 40 is in contract: an all-zero (or shrinking) snapshot
// advances last-seen without a negative observation; later growth is new
// spend on the observation day.
// - Restoring `state.db` from a backup is OUT OF CONTRACT. The cursor resets
// with the restored row; later regrowth is emitted again and lifetime
// overcounts. There is no high-water-mark guard.
// - Restores are out of contract: state.db restored from backup without
// wiping the ledger ⇒ regrowth is re-credited; wipe both or accept it.
// A post-reset high-water-mark guard is rejected: it would eat genuine
// 150→0→40 resets, which are treated as new spend by design.
// - Recovery horizon is the warm session-cache baseline. `seedHermesCursorsFromProviderSection`
// copies cached lifetime totals into missing cursors so growth *since the
// last warm parse* is recovered. Growth dropped *before* that parse stays