A contributor found the live twin of a namespace bug I’d filed as low priority

Описание и применение

В YantrikDB обнаружена утечка данных из разных пространств имён при проверке избыточности. Исправление добавляет фильтрацию по пространству имён и удаляет кросс‑namespace триггеры, защищая конфиденциальность пользователей.

Задача

Cross‑namespace redundancy triggers were being logged, exposing full memory texts from different users in a single store.

Результат

Implemented namespace‑aware redundancy checks and a write‑path gate that removes cross‑namespace triggers, eliminating privacy leakage while preserving legitimate intra‑namespace redundancy detection.

Рабочий процесс

• 1. Query distinct namespaces of active memories with embeddings.
• 2. For each namespace, run redundancy check with a namespace filter.
• 3. Resolve source RIDs for each trigger and drop those spanning multiple namespaces before persisting to trigger_log.

Доказательства

The redundancy check now first runs SELECT DISTINCT namespace FROM memories WHERE consolidation_status = 'active' AND embedding IS NOT NULL

Источник

drop_cross_namespace_triggers resolves the namespace of every source_rid on each trigger and drops, with a tracing::warn!, any trigger whose rids land in more than one namespace

Источник