13
87%
main: 98%

Ran 12 Jul 2026 06:19AM UTC

Jobs 1

Files 100

Run time 7s

Badge

Embed ▾

pending completion

Build # 13

Build Type

Pull #1

circleci

Committed by

corebreaker

Commit Message

Enforce ACL + integrity on kind/exists and pin the KDF cost parameters

Address the PR review: `kind`/`exists` now authorize `Rights::Access` and verify the integrity tag on the *target* vnode itself, matching `load`/`fetch`/`get`, so existence and kind can no longer be probed past a `Rights::None` ACL and a tampered kind tag on the vnode's own entry is caught. `ls` gains an explicit doc note that per-child kinds are read without a per-child ACL/integrity check (a deliberate listing trade-off). `derive_kek` pins the Argon2id cost parameters explicitly (m = 19 MiB, t = 2, p = 1 — the values `Argon2::default()` already used, so existing databases stay readable) rather than relying on a library default a dependency bump could silently change.

Add permissions tests covering the new kind/exists access enforcement and target-vnode integrity verification.

Pull Request Pull Request #1: Initial developments

Coverage Stats

7803 of 8998 relevant lines covered (86.72%)

1132542.31 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	13.1	12 Jul 2026 06:19AM UTC	100	86.72	CircleCI Job

corebreaker / arbordb / 13
87%
main: 98%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 13

corebreaker / arbordb / 13 87% main: 98%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 13

corebreaker / arbordb / 13
87%
main: 98%

README BADGES
x