PR #78 fixed six audit findings and its author triaged every reviewer finding, deferring three with written reasons. This cluster tracks landing those deferrals so they aren't lost.
- Follow-up migration retro-applying
ON DELETE CASCADE on existing deployments — the PR's migration edit only adds the constraint inside the "table not yet created" guard, so deployments that already ran 20260109_152634_add_missing_tables (prod almost certainly has) never get it and still crash on course deletion. (Greptile P1, MiniMax CRITICAL)
- Query-string cache-variant invalidation — per-user invalidation keys omit the query string while
cache_key_with_auth_state() appends it, so ?query= variants survive purges. Latent today. (CodeRabbit Major, Greptile P1)
- Seeder reset count-then-delete race — an enrollment landing between count and delete is destroyed unacknowledged. Low severity, offline script. (CodeRabbit Major, Greptile P1)
Beads: now-lms-oa0 (epic), now-lms-4cu.1, now-lms-4cu.2, now-lms-4cu.3
- Jeremy Longshore
intentsolutions.io
PR #78 fixed six audit findings and its author triaged every reviewer finding, deferring three with written reasons. This cluster tracks landing those deferrals so they aren't lost.
ON DELETE CASCADEon existing deployments — the PR's migration edit only adds the constraint inside the "table not yet created" guard, so deployments that already ran20260109_152634_add_missing_tables(prod almost certainly has) never get it and still crash on course deletion. (Greptile P1, MiniMax CRITICAL)cache_key_with_auth_state()appends it, so?query=variants survive purges. Latent today. (CodeRabbit Major, Greptile P1)Beads: now-lms-oa0 (epic), now-lms-4cu.1, now-lms-4cu.2, now-lms-4cu.3
intentsolutions.io