fix(deployment): pending-updates tick uses a slim instance projection, hash-only flatten, one untracked mismatch snapshot read and a per-tick secret lookup memo (review 2026-10-21 04/P2)

2026-10-22 06:39:45 -04:00
parent 971a9886b8
commit df67fabe68
17 changed files with 443 additions and 128 deletions
@@ -19,9 +19,9 @@ public sealed class StaleInstanceProbe : IStaleInstanceProbe
    /// <inheritdoc />
    public async Task<string?> GetCurrentRevisionHashAsync(int instanceId, CancellationToken cancellationToken = default)
    {
-        var session = _flatteningPipeline.CreateSession();
-        var result = await _flatteningPipeline.FlattenAndValidateAsync(instanceId, cancellationToken,
-            validateScripts: false, session).ConfigureAwait(false);
-        return result.IsSuccess ? result.Value.RevisionHash : null;
+        // Hash only: staleness never reads the validation result.
+        var result = await _flatteningPipeline.ComputeRevisionHashAsync(
+            instanceId, _flatteningPipeline.CreateSession(), cancellationToken).ConfigureAwait(false);
+        return result.IsSuccess ? result.Value : null;
    }
 }