feat(recovery): execute time-bounded physical basebackup tar - #235

Draft

seonghobae wants to merge 58 commits into

fix/recovery-evidence-weakref-coverage-b84f0c9from

feat/postgres-physical-basebackup-b84f0c9

Commits on Aug 17, 2026

test(recovery): specify bounded physical basebackup executor
seonghobae
committed
5db90fb
feat(recovery): execute bounded physical basebackup tar
seonghobae
committed
5fd4545
test(recovery): remove unused physical backup import
seonghobae
committed
b7694a1
test(recovery): reject foreign-owned basebackup output
seonghobae
committed
b7ba6bf
fix(recovery): require process-owned basebackup output
seonghobae
committed
0ec2d3f
test(recovery): reject basebackup ownership drift
seonghobae
committed
915292a
fix(recovery): reject basebackup ownership drift
seonghobae
committed
6fe12fa

Commits on Aug 18, 2026

Commits on Aug 19, 2026

test(recovery): reject absent basebackup executable authority
seonghobae
committed
df8bded
fix(recovery): require retained basebackup executable authority
seonghobae
committed
1fc732e
test(recovery): isolate basebackup FD race from host binary
seonghobae
committed
e430702
test(recovery): isolate ownership contract from host binary
seonghobae
committed
26681ae
test(recovery): make basebackup execution tests hermetic
seonghobae
committed
918bb7b
test(recovery): cover retained executable metadata failure
seonghobae
committed
22f15f3
test(recovery): expose physical backup shared-offset race
seonghobae
committed
e755f4b
fix(recovery): isolate physical backup output offset
seonghobae
committed
e855eaf
test(recovery): cover physical backup offset isolation failure
seonghobae
committed
7858aed
merge: validate physical backup offset isolation with coverage root
seonghobae
committed
c9e071b
test(recovery): expose silent basebackup invalidation failure
seonghobae
committed
5c63e76
fix(recovery): fail closed on basebackup invalidation loss
seonghobae
committed
eaf1749
test(recovery): cover basebackup rewind invalidation failure
seonghobae
committed
94cec82
test(recovery): require durable basebackup invalidation
seonghobae
committed
7cf3c2e
fix(recovery): durably sync failed basebackup cleanup
seonghobae
committed
190db5f
test(recovery): reject mutable app-owned basebackup executable
seonghobae
committed
284c9ff
test(recovery): model root-owned basebackup authority
seonghobae
committed
8a1fd2c
fix(recovery): require root-owned basebackup executable
seonghobae
committed
9f37a99
test(recovery): align invalidation failure contracts
seonghobae
committed
5a52b62
docs(recovery): correct basebackup boundedness contract
seonghobae
committed
9607d9c
test(recovery): define physical backup byte ceiling
seonghobae
committed
fe82ea2
feat(recovery): cap physical backup output bytes
seonghobae
committed
2d7358a
fix(recovery): retain output pipe identity
seonghobae
committed
4d0c06d
test(recovery): reject caller-expanded backup output
seonghobae
committed
9bdf3cf
fix(recovery): enforce byte ceiling at finalization
seonghobae
committed
b39dcb0
test(recovery): prove over-budget producer release
seonghobae
committed
99d7e0e
test(recovery): reject non-executable basebackup authority
seonghobae
committed
f99d3fd
fix(recovery): require executable basebackup inode
seonghobae
committed
b95531d
test(recovery): reject setid pg_basebackup authority
seonghobae
committed
96cfcc4
fix(recovery): reject setid pg_basebackup executable
seonghobae
committed
f992936
test(recovery): cover physical backup fault boundaries
seonghobae
committed
da13f70
test(recovery): cover pipe creation failure
seonghobae
committed
60a5f4e

Commits on Aug 20, 2026

test(recovery): reject read-only physical backup output authority
seonghobae
committed
3b1ff02
fix(recovery): preserve physical backup output capability mode
seonghobae
committed
0657159
test(recovery): expose physical backup pump fd reuse
seonghobae
committed
133f04a
fix(recovery): keep pump read descriptor single-owned
seonghobae
committed
17c7775
test(recovery): reject symlink basebackup executable
seonghobae
committed
a4e019c
fix(recovery): reject symlink basebackup executable
seonghobae
committed
2795f86
test(recovery): bound basebackup executable open
seonghobae
committed
75f455f
fix(recovery): bound basebackup executable open
seonghobae
committed
d85107f

Commits on Sep 3, 2026

chore(pr235): reconcile physical basebackup with current #233
seonghobae
committed
6b42cdf

Commits on Sep 4, 2026

chore(pr235): restack physical basebackup on current recovery root
seonghobae
committed
ae1ae89