rdmsm4x-changelog-20260828-0207-devsite-exporter-artifact-review-findings

rdmsm4x — dev.dataroo exporter artifact review findings

Received and independently reviewed the first per-page managed-export opt-out artifact, reproduced one default-preservation blocker, withheld acceptance, and returned a bounded correction request without integrating or deploying anything.

Scope and authority

Host: rdmsm4x.
Coordinator/reviewer task: 01a040ae-f560-7d32-a77e-ecc0ffe1a18d.
Artifact owner task: 01a046a3-bf5d-70b1-ae1e-9999936faae2.
Repository: /Users/richh/dev/scripts.
Released base: 689c09c9c0a68e93f21d3cff9c5849acd8c5ae32.
Artifact branch: codex/mem0-public-export-optout-20260828.
Artifact worktree: /Users/richh/dev/_worktrees/codex-mem0-public-export-optout-20260828.
Artifact commit: 962dcda3835de568a702b25a5c32555579bf7e6f.
Artifact dr_export.py SHA-256: cb168b5cef08beb115b80485b36d65b0323b9c35d538540eb7c81816f414b4a3.
Review was read-only against the artifact branch. No source, live exporter, page, webroot, scheduler, service, or access-control mutation was authorized or performed.

Local state changed

Updated /Users/richh/.agent-coordination/checkins/codex-rdmsm4x-devsite-nocontext-nav-20260827.json with a durable implementation-artifact review record.
Recorded lifecycle as dispatched_received_findings_returned_not_accepted_not_integrated_not_deployed.
Sent the exact finding and correction request directly to the artifact owner task.
Synchronized the updated check-in to every reachable fleet peer. rdmpw3265m remained unreachable and will receive it when it returns.
Created this changelog. No project implementation file was changed by the reviewer.

Verified artifact facts

The artifact is exactly one commit on the released base.
The worktree was clean at review time.
Only dr_export.py and tests/test_devsite_navigation.py differ from the base.
The dispatched exporter hash matched the artifact owner’s claim.
Fresh PYTHONDONTWRITEBYTECODE=1 python3 -m unittest -v tests.test_devsite_navigation result: 12 tests run, 12 passed, zero failures or errors.
python3 -m py_compile passed with bytecode directed outside the worktree.
git diff --check 689c09c...962dcda passed.
Three independent ordinary-page fixtures matched the baseline byte for byte.
The managed export block itself matched the baseline byte for byte.
gitleaks git --redact --log-opts='689c09c...962dcda' scanned one commit and found no leaks.

Blocking finding

dr_export.py:268-284 uses a regular expression over raw source text to discover the opt-out marker. It therefore treats marker-looking text inside an HTML comment, JavaScript string, or template as a real page-owned <meta> element.

End-to-end reproduction on ordinary pages produced:

comment_only: base_state=added head_state=added base_export=True head_export=False bytes_equal=False
script_literal_only: base_state=added head_state=added base_export=True head_export=False bytes_equal=False

This violates the released default-preservation contract: pages without a real opt-out element can lose their managed export block, and --check can then report the accidental state as intentional and compliant. The same detector also fails to recognize a valid unquoted self-closing marker.

Requested correction

Parse an actual <meta> element in <head> rather than matching raw text.
Ignore comments, script strings, template content, and body content.
Add regressions for at least comment and script false positives, the documented real marker, and the unquoted self-closing real marker.
Preserve the exact two-file scope and all retained exclusions.
Dispatch a successor commit with fresh hashes and verification.

The artifact owner acknowledged the finding, independently reproduced it, and explicitly stated that commit 962dcda3835de568a702b25a5c32555579bf7e6f will not be integrated or deployed. A successor implementation is in progress.

Commands used

scutil --get ComputerName
env AGENT_LLM=codex ~/.agent-coordination/agent_msg.zsh whoami
git rev-parse --show-toplevel
git branch --show-current
git rev-parse HEAD
git status --short --branch
git merge-base --is-ancestor 689c09c... 962dcda...
git diff --name-status 689c09c...962dcda
git diff --stat 689c09c...962dcda
shasum -a 256 dr_export.py
PYTHONDONTWRITEBYTECODE=1 python3 -m unittest -v tests.test_devsite_navigation
PYTHONPYCACHEPREFIX=/tmp/dr-export-review-pyc-20260828-0205 python3 -m py_compile dr_export.py tests/test_devsite_navigation.py
git diff --check 689c09c...962dcda
gitleaks git --redact --log-opts='689c09c...962dcda'
python3 -m json.tool ~/.agent-coordination/checkins/codex-rdmsm4x-devsite-nocontext-nav-20260827.json
~/dev/fleet/maintenance/scripts/fleet_checkin_sync.zsh

Lifecycle at close

Scope release: received and accepted by the implementation owner; closed.
Artifact 962dcda…: dispatched and received.
Artifact acceptance: withheld; blocking finding returned and acknowledged.
Integration: not performed.
Deployment: not performed.
Successor artifact: correction in progress; not yet dispatched or reviewed.

Backup and undo

No live or implementation file was changed by this review, so no source or deployment rollback is required. The only mutable record is the coordination check-in. Do not delete the finding to “roll it back”; if the review was later proved wrong, append a supersession record preserving this evidence and the correcting proof.

Outstanding owner actions

Artifact owner completes the parser correction and regression tests.
Artifact owner dispatches a successor commit and hash.
Coordinator independently reviews that successor before acceptance.
No integration or live deployment may proceed until the successor artifact is explicitly received and accepted.

Supersession addendum — 2026-08-28 02:15 EDT

The owner dispatched successor commit 132745f42387e0ab44c50de65bb1dadd19093338. It was independently reviewed and accepted after resolving this finding. The predecessor remains received but not accepted and must not be deployed. See rdmsm4x-changelog-20260828-0215-devsite-exporter-successor-acceptance.md for the successor evidence and continuing integration/deployment gates.