Raised at crates/baley/src/update/deliver.rs:299 as high by openai, ruled downgraded.
Claim. Fix (3)'s unconditional rollback can delete a newer owner replacement.
Failure scenario. After the fresh observation, the owner replaces the stable link with regular file A. The updater exchanges A into its temporary path and detects the conflict. Before restoration, the owner atomically installs regular file B at the stable path. restore_operations exchanges A with B, then removes the temporary path now containing B. The latest owner-installed binary is deleted and the obsolete A is restored.
Filed by Cadence. Fingerprint b25c3d18b7f63876 over (file, claim).
Raised at crates/baley/src/update/deliver.rs:299 as high by openai, ruled downgraded.
Claim. Fix (3)'s unconditional rollback can delete a newer owner replacement.
Failure scenario. After the fresh observation, the owner replaces the stable link with regular file A. The updater exchanges A into its temporary path and detects the conflict. Before restoration, the owner atomically installs regular file B at the stable path. restore_operations exchanges A with B, then removes the temporary path now containing B. The latest owner-installed binary is deleted and the obsolete A is restored.
Filed by Cadence. Fingerprint
b25c3d18b7f63876over (file, claim).