fix(reliability): reserve conversion job identifiers after current analytics

[seonghobae]

Objective

Reconstruct stale stacked PR #345's unique immutable conversion-job identifier ownership delta on the exact current analytics parent #432, without importing stale #342 ancestry.

Exact stack identity

• parent PR: fix(security): reconcile tenant-scoped analytics query on current main #432;
• exact parent head/base: e0c02dc3305020ae1ad6900d0a04790aee7104d3;
• test-only RED commit: 8dfab1a25d26090c04ed2ba15a88ef6987a58e6b;
• exact GREEN candidate head: d5a57a7f4e97467bb2fb163f37e4de5691d7ba31;
• changed paths: InMemoryConversionJobRepository.java and its focused identifier-reservation regression;
• emitted child CI and fuzz: terminal-success;
• unresolved review threads: zero.

Contract

A conversion-job UUID remains reserved for the lifetime of the process-local repository, including after deletion. A distinct object cannot replace a live or previously deleted identifier; collision rejection occurs before untrusted candidate content-hash access; the exact live object remains an idempotent hit. Primary/secondary indexes and the reservation set mutate under one process-local synchronization boundary.

Scope boundary

This is an in-memory integrity/fencing primitive. It does not provide restart-durable reservations, transactional outbox semantics, worker lease generations, deletion receipts, cancellation, backpressure, or distributed fencing.

Merge gate

Keep Draft while #432 remains unmerged. Child CI/fuzz success is useful review evidence but not protected-main merge evidence. After #432 reaches protected main, rebuild or retarget this two-file delta onto the new exact protected base and regenerate all main-targeted CI, Security Scan, SAST, fuzz, current-head reviews, and independent approval. No evidence from #345, #342, or predecessor heads transfers.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 21cbb124-5cf6-4b00-916a-3907711f333d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Read-only child-head review request for d5a57a7f4e97467bb2fb163f37e4de5691d7ba31 over exact parent #432 head e0c02dc3305020ae1ad6900d0a04790aee7104d3. Emitted CI and fuzz are terminal-success; this remains Draft and is not eligible for protected-main merge evidence. Review UUID lifetime reservation, collision-before-untrusted-hash access, exact-object idempotency, and synchronized primary/secondary/reservation mutation. Do not mutate or merge the branch.

@opencode-agent review
@cwl-noema-review review
@strix review
@coderabbitai review

[coderabbitai]

Rate Limit Exceeded

@seonghobae have exceeded the limit for the number of chat messages per hour. Please wait 43 minutes and 20 seconds before sending another message.