fix(data-integrity): validate revocation replay on current ledger stack

[seonghobae]

Objective

Reconstruct stale stacked PR #402's unique revocation-replay invariants on the exact current status-validation parent #448, without importing obsolete #400/#357 ancestry.

Exact stack identity

• parent PR fix(data-integrity): validate artifact-read status on current ledger parent #448 exact head/base: 9c9edb212260e0ea6f1de89eb2b3b4e3c2a5722b;
• test-only RED commit: f0e854c444ecdecb4373ec81c0bec3a32f83893d;
• exact GREEN candidate head: 17fcbbe59267397c49fac208e2611130936eecb9;
• changed paths: ArtifactLinkLedger.java and ArtifactLinkLedgerRevocationReplayTest.java only;
• final blobs preserve fix(data-integrity): reject invalid artifact revocation replay #402's unique reviewed output while current parent status validation and fix(reliability): reconcile artifact ledger on current main #435 ledger integrity remain inherited.

Contract

Restart replay rejects a REVOKED transition without a timestamp and rejects a second revocation transition for an already-revoked token. Persisted terminal revocation metadata cannot be rewritten or reconstructed as a non-revoked record.

Scope boundary

This child changes revocation replay invariants only. It does not alter live revocation authorization, tenant lookup, token signatures, artifact delivery, read-status validation, or persistence technology.

Merge gate

Keep Draft while #448 and #435 remain unmerged. Require this exact child head's emitted checks and zero valid unresolved findings. After ancestors reach protected main, rebuild or retarget this two-file delta onto the new exact protected base and regenerate all main-targeted CI, Security Scan, SAST, fuzz, current-head reviews, and qualifying independent approval. No evidence from #402, #400, #357, or predecessor heads transfers.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 13360d4b-283d-406c-a4c9-3d8997f78089

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}