From 0c240f7ad3cf1800cd79d02ca946001873b31634 Mon Sep 17 00:00:00 2001 From: Anachronaut Date: Tue, 25 Aug 2026 23:22:43 -0400 Subject: [PATCH] The temporary namespace is no longer a note Two left: one path length both implementations agree on, and a bound on directory entries that keeps every one of them nameable as a parent. --- NOTES.md | 19 ------------------- 1 file changed, 19 deletions(-) diff --git a/NOTES.md b/NOTES.md index c6b0b20..d915afb 100644 --- a/NOTES.md +++ b/NOTES.md @@ -2,25 +2,6 @@ Temporary notes from the SBFS v2 and CosmOS review, in priority order. -## Protect the temporary-file namespace - -Whole-file saves and streamed writes use the fixed names `sbfs.part` and `sbfs.out`. -Starting another operation deletes an existing entry with the corresponding name as stale -temporary output, but these are otherwise legal user filenames. A real user file with one -of those names can therefore be deleted. - -Possible resolutions: - -- Reserve these names and refuse ordinary creation under them. -- Use a spare descriptor flag to identify temporary entries, and clean up by identity - rather than by name. -- Move temporary artifacts into a defined `/tmp` policy where appropriate. A stream's - temporary currently needs to be in the destination directory because rename changes a - name but not a parent, so `/tmp` alone may require adding a move operation. - -Whatever rule is chosen should be enforced in both SplitDisk and the native SBFS code and -documented as part of the format or CosmOS policy. - ## Establish one portable path-length limit SplitDisk carries paths up to 511 characters, while the native path machinery appears to