Beagle SCM

DOG tickets: shared dog-layer reworks

dog/ is the shared layer between abc/ and the verb dogs (sniff/keeper/graf/spot/bro). Tickets here move generic, multiply-used machinery DOWN into dog/ and rework its APIs. Current focus: relocate the token-level history engine out of graf/ into a columnar, HUNK-compliant dog/WEAVE reusable by every dog and keyed on real commit ids. Plan-shaped pages, cleared via the Issues loop.

Active tickets

• DOG-001 — umbrella: rewrite WEAVE as a columnar, HUNK-compliant

  dog/WEAVE ({text,toks,ins,rms,commits}); full design in its api.

• DOG-005 — cut-over: repoint graf (GET/REBASE/BLAME/DIFFREF/LOG) at the

  new API, delete graf/WEAVE.{c,h}, update both INDEX.md.

• DOG-007 — split dog/ out of beagle into a libdog submodule (the

  libabc pattern); zero consumer churn, blocks JAB-005.

Review-originated (2026-07-06 libdog code-quality review; security first):

• DOG-008 CRIT — WEAVEParse/WEAVEStep/WEAVEAlive trust wire

  inserter/remover indices + token offsets → controllable OOB write + reads.

• DOG-009 HIGH — HOME adopts untrusted .be anchors (CVE-2022-24765 class):

  store-root redirect, .. segment escape, symlink-follow creates, TOML injection.

• DOG-010 HIGH — ULOG row injection via unescaped URI bytes + one-bad-line

  permanent rebuild DoS; use URIutf8FeedSafe, skip-and-continue rebuild.

• DOG-011 HIGH — HUNK BASS arena-lifetime: HUNKu8sRelay use-after-rewind;

  unified-diff 4096-cap drops lines / inconsistent @@ headers.

• DOG-012 HIGH — BRAM fallback double-counts a region on partial inner diff

  (silent wrong diff); unseeded-hash equality with no byte re-check; align/recursion.

• DOG-013 MED — dog/ reuse: dup WEAVE decoders, hand-rolled u64map vs

  HASHx, dup ULOG walks + HUNK render blocks, qsort → SORT.

• DOG-014 MED — git/PACKResolveOfs ping-pong sizing invariant

  (half<=baselen) undocumented → latent heap overflow; distinct from MEM-022.

• DOG-015 MED — git/IGNOGlob catastrophic backtracking ReDoS from an

  untrusted .gitignore; iterative wildmatch / step budget.

• DOG-016 LOW — correctness/API grab-bag: signed-overflow timestamp, sha1

  aliasing, unchecked FILE_WANT_BUFS[fd], NEILShift bound, HOMEProjectExists doc drift, etc.

Perf (2026-07-07 WEAVE perf audit session):

• DOG-017 MED — WEAVEMerge global qsort ≈ half the merge; bucket by anchor,

  probe-free DFS (retroactive: implemented, byte-identical, awaiting landing).