#411 dogfood fix: drain fallback for principal-less paths #413

Merged

Cordy merged 5 commits from kd-fallback into main

2026-09-03 20:24:56 +00:00

Cordy commented

2026-09-03 20:22:56 +00:00

Owner

First real drain on cairn-enc failed on three pre-per-user-homes relics at the backend root: per-user custody has no principal to resolve for them ("encrypt: no authenticated user in context").

Such objects now re-encrypt directly to the active deployment-level recipients (Drainer.Fallback, built from the active recovery/deployment identities). Today they open only via the retiring recovery key, so this preserves exactly their current access — on the new key. Space and home paths keep the normal custody-re-resolution route.
A file sitting directly under /home no longer resolves its own name as a username — per-user custody is never asked to mint keys for a bogus principal (edge exposed by the /home/Mülltrennung.docx ghost).
Tests: fallback rewrite (root object + root-level owner sidecar bypass the encrypt decorator, decrypt with the new recovery key), missing-fallback failure path, updated userForPath cases.

First real drain on cairn-enc failed on three pre-per-user-homes relics at the backend root: per-user custody has no principal to resolve for them ("encrypt: no authenticated user in context"). - Such objects now re-encrypt **directly to the active deployment-level recipients** (`Drainer.Fallback`, built from the active recovery/deployment identities). Today they open only via the retiring recovery key, so this preserves exactly their current access — on the new key. Space and home paths keep the normal custody-re-resolution route. - A file sitting directly under `/home` no longer resolves its own name as a username — per-user custody is never asked to mint keys for a bogus principal (edge exposed by the `/home/Mülltrennung.docx` ghost). - Tests: fallback rewrite (root object + root-level owner sidecar bypass the encrypt decorator, decrypt with the new recovery key), missing-fallback failure path, updated `userForPath` cases.

Cordy added 5 commits

2026-09-03 20:22:57 +00:00