Loading page...Загружаем страницу...正在加载页面...
AtlasRepo

A contributor found the live twin of a namespace bug I’d filed as low priority

说明与用途

在 YantrikDB 中,跨命名空间的冗余触发器泄露了不同用户的完整文本。修复通过按命名空间过滤检查并删除跨命名空间触发器,防止隐私泄露。

问题

Cross‑namespace redundancy triggers were being logged, exposing full memory texts from different users in a single store.

结果

Implemented namespace‑aware redundancy checks and a write‑path gate that removes cross‑namespace triggers, eliminating privacy leakage while preserving legitimate intra‑namespace redundancy detection.

工作流

  • 1. Query distinct namespaces of active memories with embeddings.
  • 2. For each namespace, run redundancy check with a namespace filter.
  • 3. Resolve source RIDs for each trigger and drop those spanning multiple namespaces before persisting to trigger_log.

证据

The redundancy check now first runs SELECT DISTINCT namespace FROM memories WHERE consolidation_status = 'active' AND embedding IS NOT NULL

来源

drop_cross_namespace_triggers resolves the namespace of every source_rid on each trigger and drops, with a tracing::warn!, any trigger whose rids land in more than one namespace

来源

  • 记录日期: 2026-11-02T04:28:59.404Z