fix: reject malformed generated roots

2026-07-31 19:25:44 -05:00
parent f710a8d7fb
commit 98046a76a2
4 changed files with 28 additions and 10 deletions
@@ -209,8 +209,11 @@ pnpm install
 # Missing dependencies exit 42; stale/foreign apps/web/.next state exits 43.
 # The web build certifies its exact standalone symlink manifest; added, removed,
 # retargeted, or manifest-only-tampered generated links also exit 43. This detects
-# accidental/independent drift, not a same-UID actor that can rewrite both records
-# consistently (CWE-345); an external trust anchor is required for that boundary.
+# accidental, independent, stale, and foreign-residue mutation—the class exposed by
+# a five-month-stale .next that produced 19 phantom TS2307 errors.
+# It does NOT defend against a same-UID actor that can rewrite both manifest and
+# marker consistently (CWE-345). RM-59 tracks the required executor/spine-side
+# trust anchor outside worktree authority.
 pnpm preflight

 # Optional local queue service only. This does not start PostgreSQL.