fix(data-integrity): validate artifact-read status on current ledger parent

[seonghobae]

Objective

Preserve stale stacked PR #400's unique persisted HTTP-status invariant while the artifact-ledger parent is reconstructed cleanly on protected main.

Historical stack identity

• closed historical parent fix(reliability): reconcile artifact ledger on current main #435 exact head: 777cd3c722fe6c3ad27bfb45d981aea86444606e;
• test-only RED commit: 4411272e3f19ec6b70fc1535c2ce225013b03b2e;
• exact historical GREEN child head: 9c9edb212260e0ea6f1de89eb2b3b4e3c2a5722b;
• changed paths against its historical parent: ArtifactLinkLedger.java and ArtifactLinkLedgerStatusCodeTest.java only.

Current dependency

Clean current-main parent replacement #457 owns the artifact-ledger integrity foundation at exact head edbe7752530a925f3be3a0de73d11fa906735d41. This PR must not be retargeted directly because its old ancestry would reintroduce protected-main drift. After #457 reaches protected main, rebuild the two-file status-validation delta directly on that new protected base and regenerate every check and review.

Contract

Persisted READ status codes at HTTP boundaries 100 and 599 remain valid. Values below 100, above 599, or non-integer values fail closed through the existing controlled invalid-line error instead of entering durable audit evidence.

Scope boundary

This child changes persisted status-code validation only. It does not alter token verification, delivery, tenant authority, revocation, event serialization, or durable storage architecture.

Merge gate

Keep Draft. Historical child checks are review evidence only. After #457 integrates, reconstruct rather than retarget, then require main-targeted CI, Security Scan, SAST Semgrep, fuzz, zero valid unresolved findings, and qualifying independent approval. No evidence from #400, #357, #435, or predecessor heads transfers.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 25fdc075-dc87-4f50-bce3-8a44b942c66b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}