mirror of
https://github.com/tdurieux/anonymous_github.git
synced 2026-11-14 08:17:26 +01:00
106 lines
3.4 KiB
JSON
106 lines
3.4 KiB
JSON
{
|
|
"verifiedAt": "2026-11-03T20:14:27.415992+00:00",
|
|
"deployment": "beta.durieux.me",
|
|
"image": "sha256:e4c0f3bdc8311851f11a584616771d22a1eb5dcda2d44d115be0101c57674df2",
|
|
"changes": [
|
|
"Shared source lookup retains the local lifecycle fence; authorization runs in producers before reading upstream/legacy bytes and on reader release after lookup/waits.",
|
|
"Shared result lookup retains the local lifecycle fence; authorization runs before releasing transformed/cached results. Source readers were already authorized.",
|
|
"Live validation optionally repeats file and ZIP reads three times and asserts identical output."
|
|
],
|
|
"security": [
|
|
"No positive authorization TTL or cross-request permission cache.",
|
|
"HEAD/304 checks retained.",
|
|
"Revocation during fills rejects source release.",
|
|
"New test revokes immediately after source authorization and rejects result release in changed, unchanged, binary and admission modes.",
|
|
"Resource lifecycle and cache-revision fences remain."
|
|
],
|
|
"authorizationCalls": {
|
|
"warmSharedSource": {
|
|
"before": 2,
|
|
"after": 1
|
|
},
|
|
"coldSharedSource": {
|
|
"before": 3,
|
|
"after": 2
|
|
},
|
|
"warmSharedTransformedFile": {
|
|
"before": 4,
|
|
"after": 2
|
|
}
|
|
},
|
|
"comparison": [
|
|
{
|
|
"route": "/api/repo/:id/file/*path",
|
|
"before": {
|
|
"serverMs": [
|
|
1609,
|
|
1499,
|
|
1437
|
|
],
|
|
"medianServerMs": 1499,
|
|
"authorizationMs": [
|
|
1502.2027520000001,
|
|
1469.515018,
|
|
1393.3808279999998
|
|
]
|
|
},
|
|
"after": {
|
|
"serverMs": [
|
|
784,
|
|
813,
|
|
733
|
|
],
|
|
"medianServerMs": 784,
|
|
"authorizationMs": [
|
|
691.0036620000001,
|
|
785.951564,
|
|
706.085898
|
|
]
|
|
},
|
|
"medianLatencyReductionPercent": 47.7
|
|
},
|
|
{
|
|
"route": "/api/repo/:id/zip",
|
|
"before": {
|
|
"serverMs": [
|
|
8306,
|
|
7593,
|
|
7536
|
|
],
|
|
"medianServerMs": 7593,
|
|
"authorizationMs": [
|
|
7947.5725219999995,
|
|
7503.062327,
|
|
7435.104037000001
|
|
]
|
|
},
|
|
"after": {
|
|
"serverMs": [
|
|
4152,
|
|
4018,
|
|
4044
|
|
],
|
|
"medianServerMs": 4044,
|
|
"authorizationMs": [
|
|
3870.61723,
|
|
3928.9969919999994,
|
|
3955.438313
|
|
]
|
|
},
|
|
"medianLatencyReductionPercent": 46.7
|
|
}
|
|
],
|
|
"validation": {
|
|
"targetedRaceIntegration": "passed, server 16.421s; cache, shared results, HTTP representations, admission fallback, metadata contracts",
|
|
"goVetServer": "passed",
|
|
"liveBeforeChecks": 130,
|
|
"liveAfterChecks": 130,
|
|
"allLiveChecksPassed": true,
|
|
"exactRepeatedOutput": "passed for all three file and ZIP responses in each run",
|
|
"temporaryKeysRevoked": true,
|
|
"temporaryRepositoriesRemoved": true
|
|
},
|
|
"limitations": "Three serial samples per endpoint before and after, on beta with existing upstream/source caches. External GitHub latency can vary; these are not load-test percentiles. First response includes new result-cache work.",
|
|
"remainingBottleneck": "ZIP processes entries serially, retaining source/result release authorization per entry. Further concurrency requires bounded buffers and explicit pre-emission revision/revocation semantics. Preview discovery remains separately expensive.",
|
|
"productionChanged": false
|
|
} |