CacheLayer 4.0 security and correctness hardening - #29

Merged

abmmhasan merged 434 commits into

mainfrom

feature/improvements

Sep 29, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 28, 2026

fix(counter): isolate keyspace and preserve exact integers
abmmhasan
committed
910f4a8
feat(redis): guard stale cleanup against concurrent replacement
abmmhasan
committed
670240a
fix(redis): make stale cleanup and tag repair compare-safe
abmmhasan
committed
5cb5136
test(counter): share concurrent initialization probe
abmmhasan
committed
e86f9c0
test(counter): cover Redis isolation precision and races
abmmhasan
committed
41e2efb
test(counter): cover Valkey isolation precision and contention
abmmhasan
committed
3787759
docs(counter): document isolated exact counter semantics
abmmhasan
committed
9980b53
docs(counter): describe isolated exact counter storage
abmmhasan
committed
ce74f1c
feat(memcached): add compare-safe value guard
abmmhasan
committed
b39a56b
fix(memcached): guard stale cleanup and status handling
abmmhasan
committed
47e783f
fix(redis-cluster): avoid racy stale cleanup and generation overwrite
abmmhasan
committed
9380a46
test(memcached): cover guarded cleanup and failure statuses
abmmhasan
committed
dd5f30a
fix(pdo): make stale reads and expiry pruning race-safe
abmmhasan
committed
9eff41b
fix(apcu): avoid racy stale cleanup and tag overwrite
abmmhasan
committed
0220d28
fix(cache): leave stale cleanup to safe maintenance
abmmhasan
committed
ebcb826
fix(cache): leave stale cleanup to safe maintenance
abmmhasan
committed
7d4a470
fix(cache): leave stale cleanup to safe maintenance
abmmhasan
committed
24e9678
fix(cache): leave stale cleanup to safe maintenance
abmmhasan
committed
30776f5
test(counter): verify Redis fixed-window expiry
abmmhasan
committed
500bbd7
test(counter): verify Valkey fixed-window expiry
abmmhasan
committed
fbda5a9
test(redis-cluster): cover safe stale and generation races
abmmhasan
committed
1cdb25a
fix(shared-memory): initialize tags under one exclusive lock
abmmhasan
committed
0f5d94e
fix(mongodb): initialize tag generations without overwrites
abmmhasan
committed
4175bb3
fix(pdo): initialize tag generations without lost races
abmmhasan
committed
4eae413
fix(node): initialize tag generations without lost races
abmmhasan
committed
81b2b8d
fix(scylla): initialize tag generations with LWT
abmmhasan
committed
1a66013
test(scylla): model conditional tag initialization
abmmhasan
committed
0c9b624
fix(apcu): remove stale helper annotation
abmmhasan
committed
c6d2fad
fix(memcached): narrow extended CAS result types
abmmhasan
committed
5a6f00a
refactor(pdo): isolate tag generation initialization
abmmhasan
committed
b6e6fb1
refactor(pdo): delegate tag generation initialization
abmmhasan
committed
bff73a5
refactor(redis): simplify tag generation initialization
abmmhasan
committed
86a78a2
test(counter): assert exact Redis counter value correctly
abmmhasan
committed
31b7671
test(redis-cluster): assert fail-open generation repair semantics
abmmhasan
committed
4c62848
test(counter): avoid forbidden process exit helper
abmmhasan
committed
11588fb
refactor(shared-memory): return locked bulk reads directly
abmmhasan
committed
089c357
style(memcached): order private helpers for PHPForge
abmmhasan
committed
8645f97
style(redis): order tag generation helpers
abmmhasan
committed
32c23c6
style(pdo): order private helpers for PHPForge
abmmhasan
committed
710ea9b
style(counter): order private helpers for PHPForge
abmmhasan
committed
4ac0dac
style(mongodb): separate tag initialization try block
abmmhasan
committed
43a0e31
style(pdo): align tag generation PHPDoc
abmmhasan
committed
2d823e4
style(cache): normalize class element separation
abmmhasan
committed
9e1a3d5
style(cache): normalize class element separation
abmmhasan
committed
e3e6bf7
style(redis-cluster): separate miss return
abmmhasan
committed
60020dc
style(node): separate bulk return
abmmhasan
committed
d2f0bbb
docs(plan): close Batch 5 and start Batch 6
abmmhasan
committed
c898d54
ci(release): add real MongoDB replica-set coverage
abmmhasan
committed
413fcec
test(mongodb): exercise real replica-set backend
abmmhasan
committed
743e54e
test(release): add PHP 8.3 core consumer smoke
abmmhasan
committed
b97f253
test(release): add real Redis Cluster smoke
abmmhasan
committed
ec5b6aa
test(release): add real Scylla CQL smoke
abmmhasan
committed
41ca8bb
test(release): add independent PSR consumer project
abmmhasan
committed
7b2172a
test(release): add PSR-6 and PSR-16 integration suites
abmmhasan
committed
dfbc4ae
ci(release): add final compatibility and backend gates
abmmhasan
committed
e23f12f
build: raise minimum PHP version to 8.4
abmmhasan
committed
a7f2261
docs: document PHP 8.4 minimum
abmmhasan
committed
a5055af
docs: align manual with PHP 8.4 floor
abmmhasan
committed
bf77824
ci(release): align release matrix with PHP 8.4 floor
abmmhasan
committed
82fe548
test(release): remove obsolete PHP 8.3 smoke
abmmhasan
committed
c57f8f8
docs(plan): adopt PHP 8.4 minimum for 4.0
abmmhasan
committed
649977e
test(release): add cross-platform core smoke
abmmhasan
committed
4352228
test(release): add clean production consumer fixture
abmmhasan
committed
c28fc0a
test(release): add clean consumer smoke
abmmhasan
committed
b57434f
ci(release): cover PHP 8.4+ platforms and consumers
abmmhasan
committed
8162756
docs(release): add 3.x to 4.0 upgrade guide
abmmhasan
committed
532347e
docs(release): link 4.0 upgrade guide
abmmhasan
committed
5ca9c2d
docs(release): point 3.x users to 4.0 migration guide
abmmhasan
committed
caca4cf
docs: align regression template with PHP 8.4 floor
abmmhasan
committed
7f49914
docs(plan): align audit notes with PHP 8.4 floor
abmmhasan
committed
f74a7df
docs(serialization): document 4.0 cache record defaults
abmmhasan
committed
65ecac2
docs(release): add 4.0 release notes
abmmhasan
committed
f20b1ed
docs(release): expose 4.0 release notes
abmmhasan
committed
b556e21
test(release): narrow Redis Cluster atomic capability
abmmhasan
committed
6daac14
test(release): assert numeric keys through public reads
abmmhasan
committed
ca91807
test(release): keep external PSR fixture outside root analysis
abmmhasan
committed
73f2234
fix(mongodb): preserve BSON binary values during normalization
abmmhasan
committed
4628a8c
test(mongodb): read contention result through fresh client
abmmhasan
committed
17c3f18
ci(release): fix Windows PSR and Scylla gates
abmmhasan
committed
9ac0059
docs: scope automatic section labels by document
abmmhasan
committed
7a8e7f4
docs: normalize RST title adornments
abmmhasan
committed
0de7331
docs: normalize RST title adornments
abmmhasan
committed
aac151c
docs: normalize RST title adornments
abmmhasan
committed
cf284b7
docs: normalize RST title adornments
abmmhasan
committed
7af7cd3
docs: normalize RST title adornments
abmmhasan
committed
062256b
docs: normalize RST title adornments
abmmhasan
committed
a13f7d0
docs: normalize RST title adornments
abmmhasan
committed
ae14bfb
docs: remove duplicated lock-provider bullets
abmmhasan
committed
aa655f1
refactor(cache): apply PHP 8.4 constructor chaining
abmmhasan
committed
048693a
refactor(tiered): apply PHP 8.4 constructor chaining
abmmhasan
committed
a8a6221
refactor(node): apply PHP 8.4 constructor chaining
abmmhasan
committed
919a79e
refactor(release): use first-class trim callable
abmmhasan
committed
2fe2a00
refactor(apcu): use PHP 8.4 array_all for batch stores
abmmhasan
committed
2218bbe
refactor(memcached): use PHP 8.4 array_all for batch stores
abmmhasan
committed
42f67d4
refactor(null): reuse common item validation
abmmhasan
committed
24ab3aa
refactor(pdo): use PHP 8.4 array_all for batch upserts
abmmhasan
committed
8acf399
refactor(php-files): use PHP 8.4 array_all for tag rotation
abmmhasan
committed
862f94c
refactor(redis-cluster): use PHP 8.4 array_all for deletes
abmmhasan
committed
6391693
refactor(cache): apply PHP 8.4 item chaining
abmmhasan
committed
4bfea77
refactor(cache): use PHP 8.4 array_any for decoded values
abmmhasan
committed
2f23263
ci(release): fix generated PSR fixture namespaces
abmmhasan
committed
d926a1c
fix(filesystem): apply Unix mode trust checks only on Unix
abmmhasan
committed
a23fa28
ci(release): stabilize Redis and Scylla backend gates
abmmhasan
committed
e5b8c11
ci(release): discover both PSR integration suites
abmmhasan
committed
09858af
ci(release): isolate no-dev platform checks and Scylla runner
abmmhasan
committed
85bcf2b
ci(release): split PSR fixtures for PHPUnit discovery
abmmhasan
committed
577cf6f
ci(release): use Ubuntu 22.04 Scylla runtime packages
abmmhasan
committed
bc8db6a
fix(psr): preserve numeric-string bulk keys and reject invalid keys
abmmhasan
committed
8b23b60
ci(release): run PSR contracts on persistent trusted-object stores
abmmhasan
committed
757a533
test(cache): assert numeric-string bulk keys stay strings
abmmhasan
committed
05040ef
ci(release): use portable Cassandra-linked Scylla driver
abmmhasan
committed
d9a6221
fix(scylla): use native execution option arrays
abmmhasan
committed
08c5164
test(release): surface real Scylla backend failures
abmmhasan
committed
f12fd1f
fix(scylla): adapt blob and bigint bindings to native driver types
abmmhasan
committed
1255916
fix(scylla): bind prepared CQL values with exact native types
abmmhasan
committed
2de1e3e
refactor(cache): isolate bulk result key preservation
abmmhasan
committed
e32869b
refactor(cache): delegate bulk result key preservation
abmmhasan
committed
bd6038d
fix(scylla): type native execution options precisely
abmmhasan
committed
de71d27
style(cache): align decoded-value branch spacing
abmmhasan
committed
ef12fc6
style(memcached): align PHPForge batch-store form
abmmhasan
committed
4a902b9
refactor(redis-cluster): use PHP 8.4 array_all for bucket saves
abmmhasan
committed
a64cead
fix(scylla): narrow native driver scalar return types
abmmhasan
committed
7da852a
style(redis-cluster): align PHPForge statement spacing
abmmhasan
committed
d9f3a85
style(cache): align PHPForge statement spacing
abmmhasan
committed
bc1078f
refactor(scylla): isolate native value normalization
abmmhasan
committed
1541206
refactor(scylla): keep adapter under PHPForge complexity cap
abmmhasan
committed
1fc9c67
fix(scylla): restore row normalization after helper extraction
abmmhasan
committed
e385f3c
style(scylla): restore private method ordering
abmmhasan
committed
9219b25
docs(plan): close CacheLayer 4.0 Batch 6 tracker
abmmhasan
committed
76a3118
docs(plan): resolve deferred and follow-up checklists
abmmhasan
committed
12ecd81
docs(plan): require Runwire 2.1 integration for 4.0
abmmhasan
committed
3bc8d06
docs(plan): track required Runwire integration batches
abmmhasan
committed
2937d90
feat(runwire): add runtime-aware memoizer policy
abmmhasan
committed
29baf5c
feat(runwire): bind runtime memoizer lifecycle
abmmhasan
committed
7f28304
feat(runwire): reset sequential persistent memoizers
abmmhasan
committed
b4e73bf
refactor(runwire): align integration with shared execution scope
abmmhasan
committed
b605e88
refactor(runwire): align integration with shared execution scope
abmmhasan
committed
7bf25e2
feat(runwire): model shared runtime execution context
abmmhasan
committed
4fb229f
feat(runwire): share runtime and execution scope
abmmhasan
committed
8c2b681
feat(runwire): support isolated request memoizers
abmmhasan
committed
337f479
feat(runwire): support isolated request memoizers
abmmhasan
committed
9d958c1
fix(runwire): safely resolve fiber execution context
abmmhasan
committed
0416ffb
feat(runwire): isolate helper memoization by shared request scope
abmmhasan
committed
b8e67e4
test(runwire): cover shared runtime request and task scopes
abmmhasan
committed
d5eee1f
fix(runwire): declare Fiber generic state
abmmhasan
committed
6ed3dbf
fix(runwire): type fiber context map by object key
abmmhasan
committed
ad3b767
style(runwire): remove unused memoizer import
abmmhasan
committed
a998ffa
docs(plan): close Runwire 7A and open 7B
abmmhasan
committed
e91f7eb
feat(runwire): expose cooperative cancellation checkpoint
abmmhasan
committed
0761721
feat(runwire): add bounded cluster polling
abmmhasan
committed
dafcc71
feat(node): expose bounded maintenance cycle
abmmhasan
committed
2104bf0
test(runwire): cover bounded polling and cooperative worker scope
abmmhasan
committed
bb28eef
test(node): cover bounded maintenance cycle
abmmhasan
committed
0e065ce
style(cluster): align bounded polling with PHPForge
abmmhasan
committed
bc641e2
feat(runwire): add host-owned worker runners
abmmhasan
committed
19a0b5c
test(runwire): cover host-owned worker integration
abmmhasan
committed
d609fe9
fix(runwire): rely on worker scope cancellation for shutdown
abmmhasan
committed
54ef776
fix(runwire): make worker loops cancellation-driven
abmmhasan
committed
97b5854

Commits on Sep 29, 2026

style(cluster): match PER brace placement
abmmhasan
committed
abae64c
docs(plan): close Runwire 7B and open 7C
abmmhasan
committed
04321c6
feat(runwire): add executable invalidation worker example
abmmhasan
committed
6488982
test(runwire): add isolated consumer fixture
abmmhasan
committed
3689b60
test(runwire): exercise isolated consumer integration
abmmhasan
committed
5d24cc8
docs(runwire): document runtime integration contract
abmmhasan
committed
d2b2568
docs(runwire): add integration guide to manual
abmmhasan
committed
c2bb8df
chore(runwire): advertise optional integration dependency
abmmhasan
committed
f7b90cf
docs(runwire): document shipped optional integration
abmmhasan
committed
5f63efd
docs(release): include Runwire 2.1 integration
abmmhasan
committed
3b2c238
docs(upgrade): add Runwire 2.1 deployment guidance
abmmhasan
committed
acf766a
fix(runwire): create executable example workspace
abmmhasan
committed
cbd4a89
ci(runwire): verify optional consumer on PHP 8.4 and 8.5
abmmhasan
committed
49fe238
test(runwire): reject stale request scopes after worker replacement
abmmhasan
committed
546273f
docs(plan): align Runwire scope wording
abmmhasan
committed
1e2c4a7
docs(cluster): link Runwire worker lifecycle
abmmhasan
committed
c9d80b9
docs(node): cover bounded and Runwire maintenance
abmmhasan
committed
3466038
test(runwire): stress persistent request memoizer cleanup
abmmhasan
committed
e6cd20c
test(runwire): add matched integration certification workload
abmmhasan
committed
c1bf6cb
test(runwire): add bounded persistent-worker soak
abmmhasan
committed
30ad36c
test(runwire): record resolved runtime capabilities
abmmhasan
committed
91cc2d4
ci(runwire): certify matched workload and persistent soak
abmmhasan
committed
e90378b
test(runwire): cover worker failure and topology fallback
abmmhasan
committed
db95deb
fix(runwire): use valid cache keys in release workloads
abmmhasan
committed
56862e5
fix(runwire): use valid cache keys in release workloads
abmmhasan
committed
0d26254
fix(runwire): retain task scope in soak workload
abmmhasan
committed
3d659d2
fix(runwire): test cancellation in request-owned scopes
abmmhasan
committed
12f4867
fix(runwire): satisfy PHPForge certification analysis
abmmhasan
committed
b5d623b
fix(runwire): keep certification operation void
abmmhasan
committed
1b6559b
docs(runwire): declare certification usage shapes
abmmhasan
committed
afdddbc
fix(runwire): normalize certification resource usage
abmmhasan
committed
cee1d9b
fix(runwire): accept getrusage array key domain
abmmhasan
committed
b8e7d36
style(runwire): adopt PHPForge callable form
abmmhasan
committed
cd24d1e
style(runwire): align soak with PHPForge
abmmhasan
committed
c1ff97b
test(runwire): keep failure fixture PHPForge-clean
abmmhasan
committed
7d2a561
style(runwire): separate intentional soak throw
abmmhasan
committed
8dd980f
docs(plan): close Runwire 2.1 release scope
abmmhasan
committed
342bb0c
docs(plan): finalize Runwire release-ready status
abmmhasan
committed
51fcba7
:memo: docs(plans): add CacheLayer 4.0 release re-audit report and update plan status
abmmhasan
committed
8ec3789
fix(atomic): discard deferred state before consume
abmmhasan
committed
2845cb6
fix(atomic): discard deferred state before consume
abmmhasan
committed
1f127ef
fix(atomic): discard deferred state before consume
abmmhasan
committed
d3ec1ff
fix(atomic): discard deferred state before consume
abmmhasan
committed
8ade101
fix(atomic): discard deferred state before consume
abmmhasan
committed
77a5421
fix(atomic): discard deferred state before consume
abmmhasan
committed
20c341c
fix(atomic): discard deferred state before consume
abmmhasan
committed
ce367b1
fix(atomic): discard deferred state before consume
abmmhasan
committed
2062a28
fix(atomic): discard deferred state before consume
abmmhasan
committed
5fc809c
fix(atomic): discard deferred state before consume
abmmhasan
committed
4df8e56
fix(redis): isolate clear domains and guard stale cleanup
abmmhasan
committed
f46f6cd
fix(traversal): bound allocation before descent
abmmhasan
committed
31a9728
fix(memoize): avoid traversing closure captures
abmmhasan
committed
a06bb3b
fix(memoize): preserve identities across isolated flushes
abmmhasan
committed
4ce8e51
fix(memoize): preserve identities across isolated flushes
abmmhasan
committed
86fa96d
fix(cache): avoid unsafe tagged stale deletion
abmmhasan
committed
a8c03b2
fix(tiered): keep L1 fenced until full reconciliation
abmmhasan
committed
b8a6375
fix(redis): redact authentication credentials in traces
abmmhasan
committed
5b1e5f6
fix(cluster): expose retained history upper boundary
abmmhasan
committed
435c1d3
fix(cluster): expose Redis stream upper boundary
abmmhasan
committed
6709389
fix(cluster): recover from empty or reset invalidation history
abmmhasan
committed
d0810a2
test(atomic): prevent deferred consume resurrection
abmmhasan
committed
8b9529a
test(atomic): cover deferred consume across expanded backends
abmmhasan
committed
e587e4e
test(atomic): cover deferred consume reconciliation
abmmhasan
committed
52b518e
test(atomic): cover deferred consume reconciliation
abmmhasan
committed
7d83409
test(atomic): cover deferred consume reconciliation
abmmhasan
committed
febf920
test(atomic): cover deferred consume reconciliation
abmmhasan
committed
bc4cea3
test(atomic): cover deferred consume reconciliation
abmmhasan
committed
3932440
test(redis): protect operational domains and concurrent replacements
abmmhasan
committed
6a90500
test(cluster): cover complete history loss and reset
abmmhasan
committed
4ccf0f1
test(tiered): keep failed L1 globally fenced
abmmhasan
committed
0222c96
test(traversal): cover wide deep and cyclic graphs
abmmhasan
committed
5f09a82
test(memoize): cover recursive captures and isolated identity flush
abmmhasan
committed
408c770
test(runwire): isolate memoizer identities across request flushes
abmmhasan
committed
c5f3c4d
test(cluster): reproduce complete PDO history loss
abmmhasan
committed
a4a8257
test(cluster): reproduce complete Redis history loss
abmmhasan
committed
84c51b2
test(redis): require sensitive auth helper parameters
abmmhasan
committed
ed201cf
test(redis): keep auth secrets out of traces
abmmhasan
committed
bbca5f2
test(valkey): preserve operational domains on clear
abmmhasan
committed
74c3663
refactor(tiered): keep monotonic L1 fence branch-light
abmmhasan
committed
bf0068a
refactor(tiered): reduce fence complexity under PHPForge
abmmhasan
committed
ac55943
fix(qa): close re-audit regression gates
abmmhasan
committed
c946ad1
fix(codec): bound value and tag graphs independently
abmmhasan
committed
306173e
docs(plan): track re-audit remediation progress
abmmhasan
committed
efb52d1
docs(plan): add re-audit remediation batch
abmmhasan
committed
9795789
docs(plan): close release re-audit remediation
abmmhasan
committed
4f4e391
docs(plan): finalize re-audit closure evidence
abmmhasan
committed
3aaa433
fix(release): close final sweep gaps
abmmhasan
committed
909f73f
docs(plan): close final release sweep
abmmhasan
committed
6984555
:sparkles: refactor(cluster): enforce cold clear on new cursor scopes and fence tiers on failure
abmmhasan
committed
73701d8
docs(release): finalize CacheLayer 4.0 documentation
abmmhasan
committed
f8c9f0e
:construction_worker: ci(workflows): add release workflow trigger and job
abmmhasan
committed
726e945
🔥 chore(ci): remove PHPForge Pint diagnostic workflow
abmmhasan
committed
b752add