mirror of
https://github.com/stablyai/orca.git
synced 2026-09-22 00:02:31 +00:00
Neil
cbbf0f8439
Admission for a renderer session write consults pairing authority, which can throw `folder_workspace_connection_ambiguous` for an unrelated workspace. Every admission call site treated that throw as "not admitted" and silently dropped the write, so one ambiguous folder workspace could discard a user's session save on `session:set`, `session:patch`, `session:set-sync`, and the before-unload staging checkpoint. Those paths now admit the write and log; a resurrected partition is recoverable on the next unpair, a lost save is not. GUI unpair did not catch that throw at all, so an ambiguous verdict surfaced as an opaque removal error. It is now caught and read as custody held, which completes the unpair and preserves the partition — deletion still requires a positive "nothing owns this" verdict. The checked-in audit artifact was computed on a tree stacked on #21113 and cannot be re-baselined by editing its pinned commit; its prose is corrected to match the shipped code and its recorded proofs are marked stale.