open/repo-mailbox
1
0
Fork 0
Code Issues Releases 2 Activity

feat(coord-send): reject the retired ktg-plugin-marketplace address

Browse source 
Operator decision 2026-08-15: ktg-plugin-marketplace is a polyrepo
directory, not a git repo, so no session can ever hold that coord
identity naturally. catalog's H4 reply confirmed adoption was declined
and drained the 6 stray messages as a one-time settlement, not an
ongoing subscription. --to now fails loud with a pointer to catalog
instead of silently redirecting mail somewhere the sender doesn't
believe it landed - the same misdelivery defect this closes a second
time (2 messages sat undelivered 2 days on this exact misaddressing).
Only --to is retired; --from is untouched since the defect was mail
arriving there, not mail claiming to originate there.

coord-selftest.sh: 206/206 (+6, section 33).
This commit is contained in:
Kjell Tore Guttormsen 2026-08-15 20:37:11 +02:00
commit bd24b8f0e7
2 changed files with 47 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
scripts/coord-send.sh
View file

@ -156,6 +156,22 @@ if [ "$BROADCAST" -eq 0 ]; then
case "$TO" in
*/*|.|..|_*) echo "coord-send: invalid target repo name: $TO" >&2; exit 2 ;;
esac
# Retired address (operator decision 2026-08-15, catalog's H4 reply
# archived 2026-08-15T16:27:51Z): ktg-plugin-marketplace is a polyrepo
# DIRECTORY, not a git repo, so basename(git toplevel) can never resolve to
# it and no session was ever able to hold this identity naturally. REJECT,
# not a silent redirect to catalog - a redirect delivers mail somewhere the
# sender does not believe it landed, which is the same misdelivery defect
# this closes (2 messages sat undelivered 2 days on this exact
# misaddressing before catalog's H4 count caught it). Only --to is retired;
# --from is untouched, since the defect was mail ARRIVING here, not mail
# claiming to originate here.
case "$TO" in
ktg-plugin-marketplace)
echo "coord-send: ktg-plugin-marketplace is a retired coord address (it is a polyrepo directory, not a git repo - no session can ever hold that identity); send to --to catalog instead" >&2
exit 2
;;
esac
fi
if [ -z "$SUBJECT" ]; then
echo "coord-send: missing --subject" >&2; exit 2