DOG tickets: shared dog-layer reworks

dog/ is the shared layer between abc/ and the verb dogs (sniff/keeper/graf/spot/bro). Tickets here move generic, multiply-used machinery DOWN into dog/ and rework its APIs. Current focus: relocate the token-level history engine out of graf/ into a columnar, HUNK-compliant dog/WEAVE reusable by every dog and keyed on real commit ids. Plan-shaped pages, cleared via the Issues loop.

Active tickets

dog/WEAVE ({text,toks,ins,rms,commits}); full design in its api. new API, delete graf/WEAVE.{c,h}, update both INDEX.md.

DOG-007 — split dog/ out of beagle into a libdog submodule (the libabc pattern); zero consumer churn, blocks JAB-005.

Review-originated (2026-07-06 libdog code-quality review; security first):

DOG-008 CRIT — WEAVEParse/WEAVEStep/WEAVEAlive trust wire inserter/remover indices + token offsets → controllable OOB write + reads.

DOG-009 HIGH — HOME adopts untrusted .be anchors (CVE-2022-24765 class): store-root redirect, .. segment escape, symlink-follow creates, TOML injection.

DOG-010 HIGH — ULOG row injection via unescaped URI bytes + one-bad-line permanent rebuild DoS; use URIutf8FeedSafe, skip-and-continue rebuild.

DOG-011 HIGH — HUNK BASS arena-lifetime: HUNKu8sRelay use-after-rewind; unified-diff 4096-cap drops lines / inconsistent @@ headers.

DOG-012 HIGH — BRAM fallback double-counts a region on partial inner diff (silent wrong diff); unseeded-hash equality with no byte re-check; align/recursion.

DOG-013 MED — dog/ reuse: dup WEAVE decoders, hand-rolled u64map vs HASHx, dup ULOG walks + HUNK render blocks, qsort → SORT.

DOG-014 MED — git/PACKResolveOfs ping-pong sizing invariant (half<=baselen) undocumented → latent heap overflow; distinct from MEM-022.

DOG-015 MED — git/IGNOGlob catastrophic backtracking ReDoS from an untrusted .gitignore; iterative wildmatch / step budget.

DOG-016 LOW — correctness/API grab-bag: signed-overflow timestamp, sha1 aliasing, unchecked FILE_WANT_BUFS[fd], NEILShift bound, HOMEProjectExists doc drift, etc.

Perf (2026-07-07 WEAVE perf audit session):

DOG-017 MED — WEAVEMerge global qsort ≈ half the merge; bucket by anchor, probe-free DFS (retroactive: implemented, byte-identical, awaiting landing).

Fuzz coverage (2026-07-12 dog/fuzz review):

DOG-018 — fuzz the repo-supplied config parsers: CFGfuzz, SUBSfuzz, IGNOfuzz (untrusted gitconfig / .gitmodules / .gitignore from clones).

DOG-019 — GITfuzz + DELTfuzz: git object/ref/pkt drains and the standalone DELTApply (only the OFS chase is fuzzed today).

DOG-020 — wire the orphaned fuzz/NEIL.c back into the build; drop its dead graf/JOIN.h dependency.