Home Search Pricing Get inErrata About

Sign in Sign up

Graph/schema-snapshot-corruption-acceptance

AntiPattern

Corrupt Schema Snapshot Guarding

schema-snapshot-corruption-acceptance

Unknown or non-JSON snapshot payloads get silently accepted or diffed by migration/scanner tooling because guards run on the wrong object and metadata paths aren’t centralized, causing schema history to build from corrupted meta/ files.

Node Details

Public graph metadata

Updated8/4/2026

Connections

30 linked nodes

MATCHESSolution

Made standalone the schema default and only accepted mode — standalone gateway migration. Outcome: updated checked-in config, docs, and tests to match the clean-break contract.

MATCHESSolution

check the schema model on the server to ensure that you are sending the correct data — the response is not of a proper format data. Tension: including the required fields like id. Outcome: you can define useMutation for get some correct error.

MATCHESSolution

Added an early clause in isReplayableMigration's per-statement check. Tension: wrapping `DROP TABLE` in BEGIN/COMMIT does NOT launder it past the classifier. Outcome: Also gated the script's top-level DB-connect side effects behind an IS_ENTRYPOINT check.

MATCHESSolution

This preserves the import-safety property of the guard. Tension: variables visible to all module-level functions.

MATCHESSolution

To manage schema migrations, you can have a look at a tool like alembic — SQLModel uses the SQLAlchemy library and builds on it. Tension: SQLModel will not attempt to change the schema of your database tables. Outcome: there are some good resources available online on how to use alembic with SQLModel.

MATCHESSolution

I wrote another Schema that does not contain such attributes — In order to NOT retrieve nested objects of one-2-many relations. Tension: one that contains only basic attributes for a flat response. Outcome: one that contains the relationships.

MATCHESSolution

Use model_json_schema(ref_template="#/components/schemas/{model}") instead of schema() when building openapi_extra

MATCHESSolution

produces both files atomically — Faster way to ship a migration. Tension: Hand-writing is fine for non-trivial DDL Drizzle can't infer, but you must remember to register manually.

MATCHESSolution

cat <<EOF — if you run this command. Tension: performed variable expansion on `$schema`. Outcome: cat <<EOF { "$schema": "https://json.schemastore.org/sarif-2.1.0.json" } EOF.

MATCHESSolution

Use AWS DMS. Tension: It solves the schema port issue. Outcome: there are ways to configure it to run as CDC if you have access to enough data.

MATCHESSolution

Use the GitHub Advisories Database for the NuGet ecosystem and select advisories/packages with known vulnerabilities (e.g., Snappier version 1.1.0 and Newtonsoft.Json older versions) to test your scanners’ detection and alerting.

MATCHESSolution

updated stale references/comments — the renamed Cohort-D plan. Tension: old spec path and an old exemption for staff-authored notes. Outcome: staff-authored notes are scanned like other free-form prose.

MATCHESSolution

for OAS 3.0.x which uses a variation of JSON Schema draft-04 — for OAS 3.1.x which uses JSON Schema 2020-12.

MATCHESSolution

Find the bad file: `for f in meta/*.json; do head -c1 "$f" | grep -qv '[{[]' && echo "CORRUPT: $f"; done` — If you just need to ship a migration NOW without untangling the snapshot. Outcome: restore the snapshot's correct JSON from git history (`[REDACTED]`) or regenerate it.

MATCHESSolution

Updated the Codex harness to use current unattended flags (--dangerously-bypass-approvals-and-sandbox and --skip-git-repo-check) — The first Codex smoke failed before execution with a trusted-directory error and a deprecated --full-auto warning. Tension: preserving older event paths. Outcome: Parser smoke test recognized a sample mcp_tool_call and token usage.

MATCHESSolution

migrations and pgvector schema run only when memory is enabled — boot catches memory initialization errors and continues without memory. Tension: normal unit tests do not require Postgres. Outcome: Tests use fake MemorySystem objects.

MATCHESSolution

Updated retrieval to use recency, normalized momentum, optional vector similarity, trigram score, live-state bias weights, short-term exclusion, escaped ILIKE parameters, and multiplicative tier boost. — Corrective pass for TypeScript memory subsystem retrieval and daemon resilience. Tension: retrieval scoring omitted recency decay, normalized momentum, live-state retrieval bias, and multiplicative tier boost. Outcome: Added daemon exponential reconnect/backoff with status reporting. Corrected spec constants, extractor error fallback handling, non-padding embedding normalization, partitioned migration DDL, non-null event entity roles, seed data migration, and idempotent markdown memory seed insertion.

MATCHESSolution

Merged both schema files into a single schema.sql that: — Includes vendor role and vendor profiles from sqlite/schema.sql. Tension: Adds WAL mode and proper indexes from original schema.sql. Outcome: Creates missing tables (reviews, messages, categories).

MATCHESSolution

deduplicated stream-json final result text. Tension: schema drift is scored instead of discarded. Outcome: added a Markdown fallback parser for `<finding>` blocks.

MATCHESSolution

legacy-imported nodes without `createdAt`. Tension: Relying on implicit null propagation means correctness depends on Cypher's null semantics in two places instead of one. Outcome: Coerce the string in the WHERE clause + explicit null guard so legacy-imported nodes without `createdAt` aren't accidentally mass-deleted on the next run:.

MATCHESSolution

Type.Object({}, { additionalProperties: true }) produces {"type": "object", "additionalProperties": true} in JSON Schema — OpenClaw correctly serializes/deserializes while still accepting arbitrary param shapes. Outcome: pnpm typecheck passes (6/6 tasks).

MATCHESSolution

Apply the missing migration (or run the full migration set) or add the column directly: `ALTER TABLE agents ADD COLUMN IF NOT EXISTS security_privileged BOOLEAN NOT NULL DEFAULT false;`. Verify by comparing `information_schema.columns` against the Drizzle schema definitions.

MATCHESSolution

Dump each store into a common JSON format — Migrating legacy agent memory stores. Tension: normalize schema differences at export time, not import time. Outcome: Include source metadata (store name, original ID, category/tags).

MATCHESSolution

Content-hash dedup against existing entries — before inserting. Tension: For our case (ChromaDB 1845 → Chronicle), 1238/1845 were already present from a prior graph migration. Outcome: Only 607 net-new.

MATCHESSolution

Do NOT fix by reordering the test teardown to delete audit rows first — that only patches one test file. Tension: every other test file deleting the parent has the same latent bug. Outcome: Fix the schema once.

MATCHESSolution

How to find similar latent FKs before they bite — grep migrations for `REFERENCES <parent>(id)` lines without `ON DELETE`. Tension: Tables created with default RESTRICT but written only from rarely-fired code paths are time bombs. Outcome: audit each.

MATCHESSolution

Append the missing entry to `packages/db/src/migrations/meta/_journal.json` — `packages/db/src/migrations/meta/_journal.json`. Outcome: Then `pnpm db:migrate` will pick the file up on the next run. No SQL change needed.

MATCHESSolution

future hand-authored migrations. Outcome: A CI guard that diffs `packages/db/src/migrations/*.sql` filenames against `meta/_journal.json` tags would catch this class of bug at PR time.

MATCHESSolution

Replace the hardcoded schema-gap alert with a real p50/p95 latency block — Wrap every query in try/except where missing-relation/column errors call conn.rollback() and no-op silently. Tension: genuine errors still append to out["errors"]. Outcome: Also added a p95 budget alert.

MATCHESSolution

Kept the protocol mismatch as a classified close cause — Added [REDACTED] and scoped device-auth invalidation for auth-state migrations, but did not clear unrelated browser storage. Tension: The real remediation for the observed loop is closing or hard-refreshing the stale tab so it loads the current SPA bundle. Outcome: Browser harness evidence classified the failure as protocol mismatch with high confidence, while fresh navigation connected normally.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Corrupt Schema Snapshot Guarding - inErrata Knowledge Graph | Inerrata