mostlyright-data 0.10.7__tar.gz → 0.10.8__tar.gz

{mostlyright_data-0.10.7 → mostlyright_data-0.10.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mostlyright-data
-Version: 0.10.7
+Version: 0.10.8
 Summary: Mostly Right CLI for reproducible, reviewed Parquet datasets
 Project-URL: Homepage, https://mostlyright.md/
 Project-URL: Documentation, https://mostlyright.md/docs/guides/cli/

{mostlyright_data-0.10.7 → mostlyright_data-0.10.8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mostlyright-data"
-version = "0.10.7"
+version = "0.10.8"
 description = "Mostly Right CLI for reproducible, reviewed Parquet datasets"
 readme = "README.md"
 requires-python = ">=3.13,<3.14"

{mostlyright_data-0.10.7 → mostlyright_data-0.10.8}/src/mostlyright/data_harness/hosted_run_worker.py

@@ -832,9 +832,13 @@ def _decode_predecessor_receipt(raw: bytes, job: RunExecution) -> PredecessorRec
         raise _predecessor_refusal(
             "the predecessor receipt's table member is not readable"
         ) from error
-    if table_version_id != block.table_version_id:
+    # THE ENGINE NAMES A VERSION BY THE RUN THAT SEALED IT (`synthesize_execution_lock` sets
+    # `table_version_id = run_id`), while the block's `table_version_id` is Studio's own derived
+    # coordinate for the same version. They live in different namespaces and never agree; the
+    # honest cross-check is the receipt's version against the block's run.
+    if table_version_id != str(block.run_id):
         raise _predecessor_refusal(
-            "the predecessor block and the sealed receipt name different table versions"
+            "the sealed receipt names a version of a different run than the predecessor block"
         )
     if table_version_number < 1:
         raise _predecessor_refusal("the predecessor receipt states no positive table version")

{mostlyright_data-0.10.7 → mostlyright_data-0.10.8}/src/mostlyright/data_harness/run_execution_v4.py

@@ -1445,9 +1445,12 @@ def synthesize_execution_lock(
     and the block is only the coordinate. The driver downloads the receipt, authenticates it by
     the block's digest and passes the record in. A non-``initial`` call without it refuses
     ``PREDECESSOR_UNAVAILABLE`` rather
-    than guessing a version number, and the one value that appears in both places --
-    ``table_version_id`` -- is cross-checked, so a spoofed block cannot rebind a run to a tree it
-    did not come from. (``candidate_digest`` has no counterpart on ``RecipeExecution``: the
+    than guessing a version number, and the sealed execution's ``table_version_id`` -- which the
+    engine spells as the run that sealed it -- is cross-checked against the block's ``run_id``,
+    so a spoofed block cannot rebind a run to a version it did not come from. (The block's own
+    ``table_version_id`` is Studio's derived coordinate for that version and is carried through
+    as ``predecessor_table_version_id`` without comparison: the two spellings never agree.)
+    (``candidate_digest`` has no counterpart on ``RecipeExecution``: the
     ``predecessor_candidate_digest`` member there names the predecessor's OWN predecessor, not
     itself. Authenticating the digest against the restored tree is 401-04's, where the tree is.)
 
@@ -1501,11 +1504,13 @@ def synthesize_execution_lock(
                 "name a version number",
                 stage=_SYNTHESIS_STAGE,
             )
-        if predecessor_execution.table_version_id != job.predecessor.table_version_id:
+        # The engine names a version by the run that sealed it (`table_version_id = run_id`,
+        # below); the block's `table_version_id` is Studio's derived coordinate for the same
+        # version and lives in another namespace. The cross-check is against the block's run.
+        if predecessor_execution.table_version_id != str(job.predecessor.run_id):
             raise _refuse(
                 "PREDECESSOR_UNAVAILABLE",
-                "the predecessor block and the restored sealed execution name different table "
-                "versions",
+                "the predecessor block and the sealed execution name different runs",
                 stage=_SYNTHESIS_STAGE,
             )
         if predecessor_source_states is None: