fix(data-integrity): bind reads to issued authority on current ledger stack

[seonghobae]

Objective

Reconstruct stale stacked PR #404's unique artifact-read authority invariant on the exact current revocation parent #449, without importing obsolete #402/#400/#357 ancestry.

Exact stack identity

• parent PR fix(data-integrity): validate revocation replay on current ledger stack #449 exact head/base: 17fcbbe59267397c49fac208e2611130936eecb9;
• test-only RED commit: bab2867ca6ba3b6e470d35b7504c87cdba201006;
• exact GREEN candidate head: 9b44b4448fdbfb1fe1d3aacede4d492df2ca7124;
• changed paths: ArtifactLinkLedger.java, ArtifactLinkLedgerReadAuthorityTest.java, and the authority-valid status fixture only;
• final blobs preserve fix(data-integrity): bind artifact-read audit to issued token authority #404's reviewed semantic output while current status/revocation and fix(reliability): reconcile artifact ledger on current main #435 ledger integrity remain inherited.

Contract

Every live or replayed READ event must match an existing issued token's immutable tenant, subject, and document identity before append/publication. Null events, null/unknown tokens, and tenant/subject/document mismatches fail closed. Revocation state is deliberately not part of identity matching so a request verified before a concurrent revocation can still append legitimate audit evidence.

Scope boundary

This child changes read-event identity binding and the ancestor status fixture needed to remain authority-valid. It does not alter token signatures, artifact bytes, HTTP status validation, revocation transition rules, expiry decisions, tenant authentication, or persistence technology.

Merge gate

Keep Draft while #449/#448/#435 remain unmerged. Require this exact child head's emitted checks and zero valid unresolved findings. After ancestors reach protected main, rebuild or retarget this bounded delta onto the new exact protected base and regenerate all main-targeted CI, Security Scan, SAST, fuzz, current-head reviews, and qualifying independent approval. No evidence from #404, #402, #400, #357, or predecessor heads transfers.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 25606f2a-5448-44b0-b7e9-05ee881acd47

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}