Bound compacted usage candidate scans

[KeenWill]

Summary

• discard ordinary usage candidates at or before the latest context-compaction call before proving summary membership
• preserve the existing exact membership check for every newer candidate, including independently assembled frontiers
• preserve the existing final newest-call ordering and compacted-frontier fallback

Calls at or before the compaction cannot win that ordering. On the same live session, the candidate-selection plan dropped from 1,075 recursive membership expansions, 9.0 million shared-buffer hits, and 5.3 seconds to nine expansions, 152k hits, and 0.51 seconds.

Meaningfully changed lines (excluding lockfiles): 7.

Validation

• formatting, package check, warning-denied Clippy, and package tests
• exact PostgreSQL compaction-usage integration test
• read-only production-shaped EXPLAIN (ANALYZE, BUFFERS) before and after
• exact release deployed to dogfood; clean drain/startup, socket and browser listener healthy

Known ignored check: Web search live smoke (provider credits).

Numeric bounds

This slice adds or changes no numeric-bound ceiling.

Stack reconstruction ledger

• absorbed Harden daemon turn recovery and scheduler occupancy #1030 at eeee1c5b5
• absorbed Add fleet soak liveness harness #1028 at 4cdc5dfbc
• absorbed the numeric-bounds carrier through Make numeric-bound declarations fail closed #1125 at 546600143
• stacked after Provision isolated commissioned-session workspaces #1164 at 4e6abf6c7
• includes Read only appended reported-usage frontier deltas #1165 at 35b9075d1
• immediate base Read compacted usage from retained frontier suffixes #1166 at 89b1075d3

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[chatgpt-codex-connector]

You have reached your Codex usage limits for security reviews. Please try again later.

[coderabbitai]

Warning

Your free Security trial is over. An organization admin can activate billing to continue.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 4c928ea6-7afe-48bd-bdd8-d5f5bf461101

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[KeenWill]

@codex review

Exact head: ed22eba

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[github-actions]

Rust coverage (report only)

Report only. This measurement has no threshold, gates no merge, and
fails no check; it exists so untested code stays visible.

Measured suite	Outcome
workspace (--all-targets --all-features)	success
persistence PostgreSQL (--ignored)	success
signalboxd PostgreSQL (--ignored)	failure
terminal-client PostgreSQL (--ignored)	success

What this number does not measure

• Doctests. cargo llvm-cov --doctests needs a nightly
  toolchain; this workspace pins stable, so the compile-fail
  sealing proofs and every other doctest are outside the
  denominator.
• Live smokes, which spend real network requests or
  credentials and are never run here: the tools-github and
  tools-web smokes stay --ignored, and the whole-daemon and
  real-provider terminal smokes are skipped by name above.
• The Swift native client, which Xcode measures separately.
• One environment-clearing test in signalbox-tools-exec,
  which instrumenting its supervisor process perturbs. The
  workflow comment on the workspace step states why; rust.yml
  runs that test uninstrumented and gates on it.
• Dedicated test files. cargo-llvm-cov excludes tests/
  and benches/ targets and *tests.rs modules from the
  report by default, so that test code is counted neither
  covered nor uncovered here. Inline #[cfg(test)] modules
  inside a source file are the exception: they are
  instrumented, and they land on both sides. A test body
  that ran counts as covered, which makes every percentage
  below optimistic; the body of an #[ignore]d test no
  measured suite runs counts as uncovered, which puts test
  lines into the file ranking. Read both tables as close,
  not exact.

Measure	Covered	Total	Percent
Lines	254217	311683	81.56%
Functions	20723	25190	82.27%
Regions	321891	403035	79.87%

Per crate, least-covered first

Crate	Line %	Lines	Function %	Region %
crates/program-runtime	7.57%	38/502	5.77%	6.13%
crates/runner-wire	60.41%	644/1066	62.67%	59.14%
apps/signalboxd	63.55%	35529/55909	70.75%	63.45%
crates/tools-sessions	65.06%	378/581	63.29%	61.68%
apps/signalbox-runner	69.47%	1784/2568	70.93%	70.29%
crates/approval-judge-eval	73.87%	492/666	76.12%	76.41%
crates/tool-schema-derive	74.20%	279/376	88.00%	72.42%
crates/tools-basic	75.37%	771/1023	66.15%	79.16%
crates/model-runtime-claude-cli	76.51%	1655/2163	73.10%	77.37%
crates/tools-github	77.06%	2408/3125	74.19%	74.82%
crates/tools-exec	77.58%	5184/6682	74.88%	73.88%
apps/client	78.87%	13282/16840	89.58%	75.76%
crates/persistence	79.99%	54090/67623	77.96%	75.37%
crates/tools-code-host	80.39%	7089/8818	80.46%	76.60%
crates/blob-store-filesystem	80.50%	1371/1703	70.17%	80.45%
crates/model-provider-runtime	81.37%	2463/3027	85.71%	79.97%
crates/blob-store	82.31%	307/373	75.41%	83.49%
crates/tools-conversations	83.01%	508/612	83.78%	77.65%
crates/egress-transport	85.35%	134/157	83.33%	77.61%
crates/conversation-import-claude-code	85.45%	740/866	66.09%	84.67%
crates/tools-plan	85.71%	768/896	88.89%	81.74%
crates/conversation-import-codex	85.76%	873/1018	64.00%	83.56%
crates/tools-workspace	86.36%	2977/3447	82.14%	87.30%
crates/tools-web	86.59%	2978/3439	87.93%	85.03%
crates/tools-git	87.40%	8750/10011	86.50%	83.24%
crates/application	88.65%	19184/21640	87.86%	88.81%
crates/model-runtime-codex-cli	90.01%	1550/1722	90.98%	89.96%
crates/test-bin	90.91%	10/11	100.00%	70.00%
crates/domain	92.29%	60212/65245	91.37%	94.13%
crates/web-contract	92.31%	408/442	82.61%	82.09%
crates/conversation-import-json	92.51%	284/307	96.88%	91.36%
crates/model-runtime-openai	93.55%	3812/4075	97.50%	91.72%
crates/process-protocol	93.67%	8469/9041	95.89%	86.68%
crates/model-runtime-anthropic	93.88%	3910/4165	97.51%	91.26%
crates/model-runtime	93.96%	9221/9814	93.29%	94.69%
crates/expect-table	95.60%	977/1022	100.00%	95.75%
crates/tool-contract	97.18%	688/708	96.47%	95.54%

25 files with the most uncovered lines

File	Uncovered lines	Line %
apps/signalboxd/src/process_runtime.rs	6581	53.39%
apps/signalboxd/src/repo_watch_runtime.rs	2235	69.20%
apps/signalboxd/src/runner_protocol_runtime.rs	2212	34.75%
crates/persistence/src/submit_input.rs	2071	71.81%
apps/client/src/lib.rs	1697	79.51%
apps/signalboxd/src/review_orchestration_runtime.rs	1333	2.56%
apps/signalboxd/src/main.rs	1303	47.46%
crates/persistence/src/model_execution.rs	1269	84.54%
crates/domain/src/turn_eligibility.rs	1223	90.33%
crates/persistence/src/runner_protocol.rs	1157	82.16%
crates/tools-code-host/src/code_host/github.rs	1052	76.26%
crates/persistence/src/review_workflow.rs	997	77.35%
crates/tools-exec/src/bin/signalbox-exec-supervisor.rs	885	45.61%
crates/persistence/src/tool_loop.rs	749	76.07%
crates/tools-github/src/lib.rs	717	76.47%
apps/signalboxd/src/convergence_sweep_runtime.rs	683	22.21%
apps/client/src/presentation.rs	681	80.52%
crates/persistence/src/process_read.rs	681	82.33%
apps/signalboxd/src/lib.rs	649	72.50%
crates/domain/src/submit_input.rs	640	88.03%
apps/signalboxd/src/daemon_tools.rs	573	89.68%
crates/process-protocol/src/lib.rs	572	93.67%
crates/persistence/src/review_orchestration.rs	569	75.66%
crates/persistence/src/session_delegation.rs	543	77.63%
crates/application/src/model_execution.rs	541	86.15%

Measured at 5b61f78af4ad1f91fe5d7353c22a00d602588fb2, the merge commit this pull request builds, whose head is ed22eba601d1d9a23682e4f3af60be6010e0580d, by run 32635498748, which uploads the HTML report and LCOV as an artifact.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.22%. Comparing base (89b1075) to head (ed22eba).

Additional details and impacted files

Flag	Coverage Δ
rust	82.80% <100.00%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.