fix(hardening): production-hardening audit batches A–D (28-finding sweep) - #250

Merged

pilotspacex-byte merged 14 commits into

mainfrom

fix/prod-hardening-batch-a

Jul 9, 2026

Commits on Jul 9, 2026

fix(security): bound client-controlled allocation counts (DoS class)
TinDang97
committed
66147de
fix(cluster): bound gossip PING task leak + non-blocking accept send
TinDang97
committed
85c2ed7
refactor(vector): fence experimental DiskANN cold tier + drop dead vector WAL
TinDang97
committed
1d2baad
fix(hardening): APPEND 512MB cap + reject FT.* in MULTI on prod handlers
TinDang97
committed
5611272
fix(vector): abort GraphUnion merge on recall==0.0 total collapse
TinDang97
committed
0065f02
fix(vector): tombstone secondary fields on DEL + FT.INFO num_docs accuracy
TinDang97
committed
f01bef8
fix(txn): route MULTI SORT/GEORADIUS STORE destination by its own shard
TinDang97
committed
8ba54fa
fix(net): bound TLS handshake + cluster-bus body reads against slow-loris
TinDang97
committed
981d55a
fix(xshard): bound cross-shard reply await against a wedged target shard
TinDang97
committed
34666a5
fix(aof): stop legacy replay at mid-stream corruption instead of resyncing
TinDang97
committed
a8803f0
fix(checkpoint): exponential backoff on failed Finalize to stop WAL flooding
TinDang97
committed
2fd78ef
fix(net): bind monoio central listener via SO_REUSEPORT
TinDang97
committed
7c2883c
docs(changelog): stamp production-hardening entries with PR #250
TinDang97
committed
f1d6b15
fix(hardening): address CodeRabbit review follow-ups on the 28-finding sweep
TinDang97
committed
05c90fd