Artifact 0a228d956bfd766a3c8d4afb7a1f1e811582ab1443287bff4057bc8e6c985e06:
A download route completes the previous slice. The bytes come from 'zit artifact --raw'; the index gates which hashes are servable, so this cannot become read-any-artifact-by-hash, and a deleted attachment stops being reachable by URL. An older revision of a live file still is — fossil keeps attachment history.
The route is hostile to its own payload: always a download, never an inline render, octet-stream regardless of what was stored, nosniff, and a deny-all CSP. Reads are capped at 32MiB and refused rather than truncated. by dmestas on 2026-08-16 19:27:40.
C attachments:\sserve\scontent,\sgated\sby\sthe\sA\scard\n\nA\sdownload\sroute\scompletes\sthe\sprevious\sslice.\sThe\sbytes\scome\sfrom\n'zit\sartifact\s--raw';\sthe\sindex\sgates\swhich\shashes\sare\sservable,\sso\sthis\ncannot\sbecome\sread-any-artifact-by-hash,\sand\sa\sdeleted\sattachment\sstops\nbeing\sreachable\sby\sURL.\sAn\solder\srevision\sof\sa\slive\sfile\sstill\sis\s—\nfossil\skeeps\sattachment\shistory.\n\nThe\sroute\sis\shostile\sto\sits\sown\spayload:\salways\sa\sdownload,\snever\san\ninline\srender,\soctet-stream\sregardless\sof\swhat\swas\sstored,\snosniff,\sand\na\sdeny-all\sCSP.\sReads\sare\scapped\sat\s32MiB\sand\srefused\srather\sthan\ntruncated. D 2026-08-16T19:27:40.033 F .agent-config/trace/3f875275-22da-47ce-9029-4d8fe8533afc.jsonl 8d09a15db695597c50931036b65ca941160ecb29dc54a787c43a469e2bad1efe F .claude/scheduled_tasks.lock 4f16ccd1bdcb82c6a511d59819332b0806bb00951237dd68a0d64368958c84c9 F Makefile 27950a92fe0d5bc88bbbfcc2194ea96cc2cb3f6b7f3314db043ca1152e96eb87 F README.md ee56e71e8b5b6ac04964976f9f05406ea43d3be5d6302122a0349f141458dd2b F cmd/quarry/main.go 6998304b065be59f81111bd0d7b6a71f356dd79606cb2c3328e2d45fa19e2b66 F docs/api.md 15a5ae91b807bc7374bd287e1f606d7ba4c7503d4bd6d8c26dcb0b3594a7210e F docs/rfcs/0001-quarry-forge.md 13414fffb52b516dc197d72a0fe0d87adc9abe60501a608a50520a7db72b63ea F docs/rfcs/0002-forgejo-salvage.md 610f8d4b4d580b5df133f35e33946a4293f19fad6c25dac64791c6ed2ba3af07 F docs/rfcs/0003-implementation-plan.md 8c52a33ecec672d1a9a50c8c91985e7be8abcc8c5782140596ebf8396f325776 F fixtures/README.md 3e3c12bbbf5cd024d3e0c9cde121a495f81c4f90297ec7e676be6334658231eb F fixtures/build-real.sh 6223826ad836b49c90c896e442fcacac716489885e98bdf0a5958a88a897a11e x F fixtures/build-synthetic.sh ad3ed7c42bc960a0b317187704a8c39d79e4586dc5ce99e71c003e43e80314f1 x F g1.json ba4e504904768f2d8569659f8c7057016df1d8694c1be3dbf350ca759c5d35bc F g2.html c416f95e362dd5f65bb6353ce7df0c54070f62eee92edfcbdac498151d244c37 F g3.json fec7f152f2296027ab4afa7714601ff9425793643a5b53dce1092dfbce2aabcd F go.mod e997d75dcef01c0c61e6c58b3d823199fa92ecd4850fd0918ae879216c328879 F go.sum 720add7ff37d7ec29b8ff9ea0804774dd8426960d4a68c0e8097268cde6efa0c F internal/api/docs_test.go 0052df1f7bf6c5d994996e380434d6043d07aac33753f6752cea3f58dc53aae8 F internal/api/register.go 30d4477ce64abf602ffaded797cde743c00677e046111efee946f086a0e8e4fd F internal/api/register_test.go dfab21bfb627c76c455b16c7c2c81700a09fc5803ecc2c3ca9e47e05e55f9758 F internal/api/router.go 5f7e3562172ba14f29bcf54f89ae653b68c448c78519988c16408b0ea2530009 F internal/api/router_test.go f546b871500ecad53f526c50c35fd47514431300de87539e3c3075a74a16d5fc F internal/arch/arch_test.go d15796b585214a57107e29be2687fcd09cccf233551f1b56458a79d38ecb29f8 F internal/arch/provenance_test.go 159fb708ff07fed8d2c7b25f8b75dffa33e45e07848741ec9c3db569cffdf9d9 F internal/artifact/artifact.go 418ae72f4929b3695aecd1f0695ca54be163e18a51a27bc5f0378fb6c481a39f F internal/artifact/artifact_test.go afc92f4c0e41287bff6107b03e70bd5eb64cfb8792fda2496c6dfa31ae48bb5f F internal/artifact/cards.go 8ef42700e8ae72e263a16be3094c5aff8456c8a5b45ac162dc22e28f8878e0cf F internal/artifact/testdata/0e741ff903ec2699c0bb6c989d398feaa0d0b29e3e260519ade0dac4292886c9 1ee74974343a8ea6a8bdcf4c9b58aeb395268fe28018e5c299285f9bcd5fca40 F internal/artifact/testdata/1c8fe43423f7926d13e025f35e100f7bf478fe04b381393eb55a22dc4ca2781f 0e8a46734f5ba52445ee8839a9b4ed2c921730e1a53145d712ec50a3cd9cd9f0 F internal/artifact/testdata/22aba910a511ec9a4b21f6887fd2bf35a3cc043b1b7f07ff730beb730e1c63aa b11ee3b756cac012a7f219aadaa9be2cdca08c219029f77cececf8c9c8520f9b F internal/artifact/testdata/2d964281d9a46df31b7864f191dc20b3d8a0f15ca66741f3121c9412d6386539 38a50e80c13f6e2f19fb66abe5e1d974067eaec1513c07952e6e89f9d0fa9219 F internal/artifact/testdata/67ce7cb478361333587f5e96df3ce8de0e1c731b919500890a82bd61d45ea116 a0b1f851ddd51caeec85f01d3e441156ecdea1c1313f9021ef8604603365cefe F internal/artifact/testdata/6fad022ec04b5ff757c03d2e6e55b25ca724b181f2a04181afc043791c42fb69 2143301b7bb5554413f6f0281c50fe76a1d0f65ae11bf76a26e7b4ac336245e0 F internal/artifact/testdata/75d862c5cabfab03b3d4b879ddd743c0f1fc282ab0b68bb44d414b1ce1465098 73d49f9c8e8abaa6da3fef95420afe7c098de0ff3387243cd73be220215bd4ef F internal/artifact/testdata/7a09d0af4bed8ff86e5ac47a65786a12720c44a3ffd06cf36e45119f07e9a17e 8d1093187cd2293afb87e21b911c1918895c6b8d66edfb1c50d2584266cf0da8 F internal/artifact/testdata/7d3db57aec827893080e91f89d77278d72a1cadfd857b2b58fcc84be94addb59 fd74975d897a97515d53009bd316c8cc0fb2a7efe6019e7b252e70342fe43380 F internal/artifact/testdata/842ff48130d9076d59c96ff4205160f1c11d2f08d13d6bb012abf3ebc1d34728 d5463a912ab850fc06c667a0116f92b998f7720a57ad0721d7bf38d7c1fb82c8 F internal/artifact/testdata/857f5113b4a56d98f67ca9824cd126785443c84bf380d2e6c50535000526a23d 5f5826ed1d770b70ad0d17a77fff0937000bf5e9c8bb318e8b43ac954909b3a4 F internal/artifact/testdata/92ad090193c1dcae97fc91e2961c366963c5310da276760507ed098830b36527 0091840ae580e8d1f57cfd7165e3a3c419f0c042c9f4cfc27fe822031bbee41d F internal/artifact/testdata/9a9719984127d081c38b60aeb3034789b67b517a11cf0e102f3f1161f2ccd2a8 0d8dee882aa8548d8390c4a1a191014d1851a1f4504d89ed6f8b476ae7e9d6a7 F internal/artifact/testdata/a14f59c3482ca0995ede44b5852663aa082510fbc367de2cf824e3d6dec87b21 89b9df46eb2ebc140fea4be7a4d63904a545c76357521680714948d51b3d5aa4 F internal/artifact/testdata/a20a12edd47bf1f6356e6fe4edfc03f256e8f5f3210fda8bb87ed32bda41481c e3e0a999508bb38e3b69b8cf71804f05eee6c6f2443b5115270122033a76d661 F internal/artifact/testdata/d7b481c91439081d7dc657cdc39501be119722a01b62f6bbe2301242ea7771d5 bae46b266a56de194b71c025c06e147df65996c4c825e552a82b13784ef9f3c5 F internal/artifact/testdata/ee71cf2323b8938af58e70e869ca0337fc8fc6df0af15382e8c53e7e783841ba 68f344158c2831de0bfa9ae3796a9e934f2e2fb49a076432e11ba312c31c3b4c F internal/chat/chat.go 0c15ae46c4f70da50d8f3f1d9f7d8989810da1ac4402a4f71ce821c3f392dc9a F internal/chat/chat_test.go 067965cd562f1aec887f262900a691f6de4ac6aa690ffd3f9785c01e8855d3b6 F internal/events/events.go 0e859f830123060c4bd67b179d5a5d3d3b4a62c2816a0f9e2cfee0cbb973eace F internal/events/events_test.go c6dd0474367db79984c9e9fe90059a367d0b4614700f9096418cd56ebb9027da F internal/events/external_test.go 359ebae54edd9c207125e35548f7668612db288d60304d9b7521d3e4c0f310cc F internal/harness/harness_test.go 961c4f28da8adaf4b69f8453eb662aad5292856df57cc16e7754ca67d2494332 F internal/harness/write_test.go 4051215ef8d536c6a36e6ca5f57d6bb30c69c3b1d73854209c9e42167f6ae160 F internal/highlight/highlight.go 7226c479b989360b6b0df5f916e38cd4a93738008b2e7d6a02cb405177dec9db F internal/highlight/highlight_test.go 7e09b549dd597b32af1f932f25ce2957a3a4fa5b0fa7d24b0d8d789355d6e6dc F internal/index/attachment_test.go c0687a74b80b7975b66cf108228bd13949e472760d70494f6160a26fff2d1827 F internal/index/index.go 0445d750668faafd5ef22d19979f0adbafd80ee45a06de85e53818a979a998e9 F internal/ingest/ingest.go bc1d18f8f09f7e4397516a0a6579f1167a40c038bd5a7bf064637d7b5e2aa873 F internal/ingest/ingest_test.go ee45596db41368601d86497b1b945e15c651fb08c4968e2cef788e7fee09046c F internal/lease/lease.go 233d73850c97f89d6375c76f2d731d4d48e8bb69cd79b77d7eb11f5c4ea2bef1 F internal/lease/lease_test.go 32f256f621db920aa6470b2c737447b38dfb404d1f3aa6df82f129cf4e37d25c F internal/markup/fossilwiki.go 08d944a20eed77ec4e1331129d5ff5d507f8baef786ca0bd5b5af3a4a7248492 F internal/markup/fossilwiki_test.go d3a9d4b8dd9616b9305e7b9cf2e39a3278283acc1c40adcd6e411416f9279b6c F internal/markup/markup.go d6b1b8289dd5d333a915305e8692849bb12d01709d15497518318616f6998307 F internal/markup/markup_test.go f77821f0de5c21f1ada30a7b02aa66775d54ca04138578e875d6f652e5e0732e F internal/markup/pikchr.go 727389d23db40bc39a5fb82d38daefcb92a86b04d7092d11f31d3166d94ec98a F internal/markup/pikchr_test.go 1286b504a64124283487a754f261a866e5b2f2c524e5811e73a3090dd186e4b3 F internal/markup/resolver.go 2b03aed79336d7becba88fe3f7ac0efa1b32fe42d0be79d564fe16b4297bacee F internal/notify/notify.go 8fad2a91ae272cbbe753389e4c19e82818821fc617dde2a26f46302ac706fd5a F internal/notify/notify_test.go 40720fafd3cd1c069b8a914dc5c188f533b02d06a78c60007fb7474d098c0fd2 F internal/oltp/account.go 293354f1f30e77ab0fd6b8af46cad5aebdd5da333e44b03412bfe0fbfeda4abd F internal/oltp/account_test.go a8fc732c733e0ee00fdd4426a4721b06b27aca06efab073c345e2736ecd50b5c F internal/oltp/oltp.go 41b1804fabbc84dc51e55ec966a00ad0b06cc9f7228c42dffe93d38c4ecbd97d F internal/oltp/password.go 0f8257af851a52d147a8681b46f4d15ff4bd65d558fd8b2055fb2a5a2e11be07 F internal/ops/codec.go 49dcf9b3d2fb45b552604985493cbda0ab898e73948dd85996524fd395670dc4 F internal/ops/codec_test.go 7b9776ac4a5f11c1f5fa66683282e996dce4dd4dac534dbd5a8b36627482129d F internal/ops/docs.go cffc8f3b7ebeeb89ecf487a449dd4095479b292e3b463055a73a4e0db313eec3 F internal/ops/ops.go dd0d23f35d9258544c1d7f7395fdfd493241454a525c4edbdc7923a9b63f5ce4 F internal/ops/ops_test.go b1d4e8b120a5ee22516c3f0e871dd030045558f82f68ef1efdfe8de5152b4937 F internal/ops/spec.go b3244c2231bbebcb7824de2d35d0431cb83e4a8fcbb387a5b9f8ff0bd973622f F internal/ops/spec_test.go 261f4d520b1fe3cbaa5f58e24feed2710c6636955298d5350c9a1e57405f7cb8 F internal/ops/validate.go 1f8810c9efd1cc2ab8f552082170a197063dd88b6ebcf8f894954256835a21cb F internal/ops/validate_test.go 87b338b7a4bd197c3d18a8c5cdd3ab889ddb129f1fb749afb5dea36704de0fba F internal/pikchr/pikchr.go ece27ccbf63f46e5cd8c001b4c74971b9ef40001ac49be249ff68814efc79fb1 F internal/pikchr/pikchr.wasm 25e93123be264aa53c1fbb255e5bfb148260b2e7e7d5959ba9dfb81d606ac387 x F internal/pikchr/pikchr_test.go 28338cb47102a2c516c44167f1228aa48e09ff78d4cf56755009fe90bdd11908 F internal/semdiff/semdiff.go 36b9aa403d28fd0bc61926242ffc982ca02fd0c8b48344df3ebd1b19db1ce34a F internal/semdiff/semdiff_test.go 3a0cd4ea5db38d80193248ceea0ba24ad89fb48623237abb96a668b77188d30e F internal/web/assets/datastar.js d2e34bc82f964e41abaf1d6ee95cf6ad35c6560a859414a60ad82d5b22e5197a F internal/web/timeline.go c8feb72dff9039e8f03961040786eb47169e900b78b6a3108d1976d4dd9c0e8a F internal/web/web.go 90fa0ae48f57a3d5bcc6d93535579d4772b4aed004a1931f0cffbe6d72134bbc F internal/web/web_test.go 6d234772238195ba9d87346e7d62d58fcaf7aeac75c989e1483525734c9b9a8c F internal/xfer/container.go b427eb2780e8336cec7afcc36469776bd3a161bf1ab4908551c8ed6ff6cf207f F internal/xfer/container_test.go 750f24c3c7683f8e25227f581a6b9ea9197c4aa5a19e0df53e2af9447e8f8fdc F internal/xfer/xfer.go ea77fc73af70878d70a96b8b5608d27a2dc7022f153ecd81838b1924970567db F internal/xfer/xfer_test.go dfbcff13fee4bed7842c0a0aec057ee91b44d79665aaf3f51dd1e69e629ba2c4 F internal/zitcli/zitcli.go f2aeeee118154c90161644f59e5499e4f425abd0294e2d7ef1e2f8370b3a25cd F internal/zitcli/zitcli_test.go 6ee46164c04f62e535234d8ce9dfb8bae0086e0069419a5bd8c77ccdbe4a60ad F third_party/PROVENANCE.md 0a6f1c644e6ed6891e0fa4b7bce95041b8c637ffb8b1bb72e723fbb078be6d94 F third_party/sanitizer-corpus/forgejo.json 7ea9430d4f08428cd20ef5a2aaad2c5f47bc56def4a8d4b11296982d923c3025 F third_party/sanitizer-corpus/gitea.json 5989fba347b219c6a16bd2bc9b38802b750466b713c6ad465dcaac9195301b1c F tools/timeline-verify.js 87354d9e75f50f1d3e6e175e47fff020401472dc8343d2107116918c7d1615dc P 4831e9bef139922c452ffbdede08f9f7200926a05bb91a066f75a949f5ddb31c R e032f68321702dabd511a3a03f487d2c U dmestas Z 32b7628dca68e88e5c702dd5197ce39b