Files
Dicklesworthstone 78d25b7fd1 fix(search+storage): embedder verification, quality-eval sanitization, and FTS5 duplicate recovery
The remainder of the batch: search/embedder safety, report sanitization, and
FrankenSQLite storage-integrity handling, with supporting observability.

- daemon/worker + search/model_manager: reject unverified native embedder
  topologies (regression test) so an unrecognized native backend cannot be
  resolved and used silently.
- search_quality_eval: sanitize document refs again at the scoring boundary so a
  caller cannot preserve raw paths, whitespace, or injection punctuation in a
  report; the real-binary gate plants private markers to prove redaction.
- storage/sqlite + search/storage_integrity: the frankensqlite loader discards
  the stale rootpage-zero duplicate while retaining the independently reloadable
  canonical FTS5 table, handling both hydrated and cold retained-table cases.
- indexer (mod/semantic), operations_dashboard, subsystem_coverage_matrix, lib,
  and the html-export / cdn-fallback e2e specs updated in step; ERROR_CODES and
  VERSION_HISTORY (schema v5 upgrade test) refreshed; Cargo.toml bumped.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-22 12:45:58 -04:00
..