fix(acceptance): keep safe fleet metadata clear of sensitive report fields

This commit is contained in:
2026-10-03 23:58:47 +08:00
parent 19e9913f30
commit 3f6083ff02
6 changed files with 37 additions and 5 deletions
@@ -38,7 +38,7 @@ function io(context, module, proof) {
}
async function request(method, path, body, label, { token, conflict, file } = {}) {
const entry = { method, path, label, actor: token ? 'PDA' : 'PLATFORM', body: clone(body), status: 'SENDING' }
if (file) entry.file = { name: file.name, type: file.type, sha256: createHash('sha256').update(file.content).digest('hex'), bytes: file.content.length }
if (file) entry.file = { name: file.name, type: file.type, sha256: createHash('sha256').update(file.content).digest('hex'), sizeBytes: file.content.length }
proof.requests.push(entry)
// A failed write must stop before HTTP. Keep the durable SENDING record if the process dies in flight.
await checkpoint(proof)