{"id":"integrity-checking-is-both-incomplete-and-unrecoverable","text":"Data integrity checking fails in two complementary ways: CRC checksums exclude routing metadata (sequence numbers, page numbers, headers), so corruption in those fields goes undetected; and every reader halts at the first detected CRC failure with no resync capability — meaning both detectable and undetectable corruption are terminal.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["payload-only-crc-leaves-metadata-unprotected","corruption-is-terminal-across-all-readers"],"outlist":[],"label":"incomplete detection + no recovery = both missed and caught corruption are equally fatal"}],"dependents":["durability-pipeline-broken-at-both-ends","integrity-degrades-along-storage-pipeline"],"metadata":{"last_reviewed":"2026-05-30T09:01:17","review_result":"pass"},"created_at":"","updated_at":"","reviewed_at":"","verified_at":"","retracted_at":"","explanation":{"steps":[{"node":"integrity-checking-is-both-incomplete-and-unrecoverable","truth_value":"IN","reason":"SL justification valid","antecedents":["payload-only-crc-leaves-metadata-unprotected","corruption-is-terminal-across-all-readers"],"label":"incomplete detection + no recovery = both missed and caught corruption are equally fatal"},{"node":"payload-only-crc-leaves-metadata-unprotected","truth_value":"IN","reason":"SL justification valid","antecedents":["wal-crc-does-not-cover-seqnum","btree-wal-checksum-excludes-page-num","all-three-implementations-use-payload-only-crc"],"label":"Three independent observations converge on the same architectural gap — metadata fields that control WHERE data is applied are never integrity-checked"},{"node":"wal-crc-does-not-cover-seqnum","truth_value":"IN","reason":"premise"},{"node":"btree-wal-checksum-excludes-page-num","truth_value":"IN","reason":"premise"},{"node":"all-three-implementations-use-payload-only-crc","truth_value":"IN","reason":"premise"},{"node":"corruption-is-terminal-across-all-readers","truth_value":"IN","reason":"SL justification valid","antecedents":["no-component-resyncs-after-corruption","wal-no-resync-after-corruption","wal-crc-mismatch-halts-all-replay"],"label":"Stop-on-first-error without resync is universal — corruption in any record silently discards all subsequent records"},{"node":"no-component-resyncs-after-corruption","truth_value":"IN","reason":"premise"},{"node":"wal-no-resync-after-corruption","truth_value":"IN","reason":"premise"},{"node":"wal-crc-mismatch-halts-all-replay","truth_value":"IN","reason":"premise"}]}}