fix(echo): make approved scanner photos available immediately #22

Merged

james.maes merged 1 commits from fix/approved-scanner-photo-availability into develop 2026-11-07 13:12:16 +00:00

Conversation 0 Commits 1 Files Changed 11

+117 -26

james.maes commented 2026-11-05 17:32:47 +00:00

Owner

Copy link

Copy source

Approved scanners currently upload photos that remain quarantined in Echo. Enable Record Files' scoped captured-photo admission policy so approved-device JPEG/PNG captures become AVAILABLE immediately, while other intake keeps its quarantine policy. Give only the fixed demo admin record-files.release for releasing earlier captures through the audited action; scanner privileges remain unchanged.

Regression coverage checks unapproved-device denial, captured versus ordinary-upload lifecycles, exact retained bytes and preview access, and the admin/scanner permission split. Release documentation records the actual development cohort and remaining public dependency/authentication/hardware gates.

Validation: 69 Record Files owner tests, 197 scanner/Echo tests across bounded runs and 13 Android focused photo tests passed with relevant Checkstyle. The maintained demo accepted a fresh signed-MC9400 gallery upload as AVAILABLE with exact parent/type/size/SHA256; three earlier photos were released normally. Those development checks used a qualified mixed public/private dependency cohort. Current develop's independently merged PostgreSQL test additions are retained; normal PR CI and the final public-cohort gate remain required.

Dependency: QRun-IO/qbit-record-files#1 supplies withQuarantineCapturedFiles. Its repository enrollment check is currently failing. No public version has been invented, no POM or CI gate has been weakened, and this PR is not a completed release claim.

Approved scanners currently upload photos that remain quarantined in Echo. Enable Record Files' scoped captured-photo admission policy so approved-device JPEG/PNG captures become AVAILABLE immediately, while other intake keeps its quarantine policy. Give only the fixed demo admin record-files.release for releasing earlier captures through the audited action; scanner privileges remain unchanged. Regression coverage checks unapproved-device denial, captured versus ordinary-upload lifecycles, exact retained bytes and preview access, and the admin/scanner permission split. Release documentation records the actual development cohort and remaining public dependency/authentication/hardware gates. Validation: 69 Record Files owner tests, 197 scanner/Echo tests across bounded runs and 13 Android focused photo tests passed with relevant Checkstyle. The maintained demo accepted a fresh signed-MC9400 gallery upload as AVAILABLE with exact parent/type/size/SHA256; three earlier photos were released normally. Those development checks used a qualified mixed public/private dependency cohort. Current develop's independently merged PostgreSQL test additions are retained; normal PR CI and the final public-cohort gate remain required. Dependency: https://git.kof22.com/QRun-IO/qbit-record-files/pulls/1 supplies withQuarantineCapturedFiles. Its repository enrollment check is currently failing. No public version has been invented, no POM or CI gate has been weakened, and this PR is not a completed release claim.

james.maes added 1 commit 2026-11-06 16:43:41 +00:00

fix(echo): make approved scanner photos available immediately ... 1f8e3196fe

Opt the Echo host into the scoped captured-photo policy while preserving
quarantine for other intake. Allow only the demo administrator to release
earlier captures through the normal audited action.

Cover approval, parent and retained-content access, and record the verified
device behavior and remaining public dependency and release gates.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>

james.maes force-pushed fix/approved-scanner-photo-availability from 3381001b8d to 1f8e3196fe 2026-11-06 16:43:41 +00:00 Compare

james.maes referenced this pull request 2026-11-06 23:31:11 +00:00

build: publish the Record Files bridge with the base through one reactor #29

james.maes merged commit 4f96071157 into develop 2026-11-07 13:12:16 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

secuurity

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-mobile-scanners#22