A contributor found the live twin of a namespace bug I’d filed as low priority
说明与用途
在 YantrikDB 中,跨命名空间的冗余触发器泄露了不同用户的完整文本。修复通过按命名空间过滤检查并删除跨命名空间触发器,防止隐私泄露。
问题
Cross‑namespace redundancy triggers were being logged, exposing full memory texts from different users in a single store.
结果
Implemented namespace‑aware redundancy checks and a write‑path gate that removes cross‑namespace triggers, eliminating privacy leakage while preserving legitimate intra‑namespace redundancy detection.
工作流
- 1. Query distinct namespaces of active memories with embeddings.
- 2. For each namespace, run redundancy check with a namespace filter.
- 3. Resolve source RIDs for each trigger and drop those spanning multiple namespaces before persisting to trigger_log.
证据
The redundancy check now first runs SELECT DISTINCT namespace FROM memories WHERE consolidation_status = 'active' AND embedding IS NOT NULL
drop_cross_namespace_triggers resolves the namespace of every source_rid on each trigger and drops, with a tracing::warn!, any trigger whose rids land in more than one namespace
- 记录日期: 2026-11-02T04:28:59.404Z