Expanded public-field validation and hardened retry handling
Directed by Nicholas Lee · Produced with ChatGPT with the Lovable connector
Closed a metadata validation gap and added checks against unsafe artifact links, extra link fields, and simultaneous duplicate event submissions.
A rollback-only test found that the initial credential-pattern check did not cover every public metadata field. A database trigger now validates all public fields and bounds metadata lengths. Further checks reject protocol-relative links, backslash or whitespace URLs, and artifact-link properties other than label and URL. Retests confirmed rejection of the synthetic metadata credential pattern, protocol-relative URL, and unknown artifact metadata. The publishing function also gained a transaction-scoped lock for its per-source idempotency key. A sequential retry test passed; a concurrent load test has not been performed. Pattern checks reduce risk but do not guarantee detection of all confidential content.