Validate event timestamps and token counts #29

Closed
clawlter wants to merge 1 commit from audit/event-validation into main
Owner

Summary

  • reject naive event timestamps and normalize explicit offsets to UTC
  • enforce strict nonnegative integer token counts and reject totals below reported components
  • document the ingestion contract and add timezone-boundary/invalid-input coverage

Verification

  • uv run pytest -q (28 passed)
  • uv run black --check src tests
  • uv run isort --check-only src tests
  • uv run pyright
  • uv run python -m build
  • uv run twine check dist/*
  • uv run mkdocs build --strict
  • synthetic valid and invalid hui ingest-jsonl CLI checks

Closes #6
Closes #7

## Summary - reject naive event timestamps and normalize explicit offsets to UTC - enforce strict nonnegative integer token counts and reject totals below reported components - document the ingestion contract and add timezone-boundary/invalid-input coverage ## Verification - `uv run pytest -q` (28 passed) - `uv run black --check src tests` - `uv run isort --check-only src tests` - `uv run pyright` - `uv run python -m build` - `uv run twine check dist/*` - `uv run mkdocs build --strict` - synthetic valid and invalid `hui ingest-jsonl` CLI checks Closes #6 Closes #7
Validate event timestamps and token counts
All checks were successful
Docs site / Validate docs build (pull_request) Successful in 2m26s
Python CI / Validate formatting, typing, and tests (pull_request) Successful in 6m32s
Docs site / Publish docs to mehalter.page (pull_request) Has been skipped
Python CI / Build source and wheel distributions (pull_request) Successful in 7m22s
68ce631450
Author
Owner

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:15:44 -04:00
All checks were successful
Docs site / Validate docs build (pull_request) Successful in 2m26s
Python CI / Validate formatting, typing, and tests (pull_request) Successful in 6m32s
Required
Details
Docs site / Publish docs to mehalter.page (pull_request) Has been skipped
Python CI / Build source and wheel distributions (pull_request) Successful in 7m22s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/hermes-usage-insights!29
No description provided.