{"id":"no-defense-in-depth-against-corruption","text":"The system has no defense-in-depth against data corruption: input validation is systematically absent at API boundaries (malformed data enters freely), and corruption is terminal across all readers with no resync capability (corrupted data can never be recovered) — the system is maximally permeable to corruption entry and maximally fragile to corruption presence.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["input-validation-systematically-absent","corruption-is-terminal-across-all-readers"],"outlist":[],"label":"Two depth-1 conclusions cover opposite ends of the data lifecycle (entry vs detection) and both show total absence of protection, making corruption a one-way ratchet"}],"dependents":["format-rigidity-prevents-evolutionary-repair"],"metadata":{"last_reviewed":"2026-05-30T09:01:17","review_result":"pass"},"created_at":"","updated_at":"","reviewed_at":"","verified_at":"","retracted_at":"","explanation":{"steps":[{"node":"no-defense-in-depth-against-corruption","truth_value":"IN","reason":"SL justification valid","antecedents":["input-validation-systematically-absent","corruption-is-terminal-across-all-readers"],"label":"Two depth-1 conclusions cover opposite ends of the data lifecycle (entry vs detection) and both show total absence of protection, making corruption a one-way ratchet"},{"node":"input-validation-systematically-absent","truth_value":"IN","reason":"SL justification valid","antecedents":["wal-sync-mode-unvalidated","wal-truncate-no-bounds-check","strategy-selection-is-binary","verify-proof-direction-unvalidated"],"label":"Four independent modules silently accept invalid inputs at critical API boundaries"},{"node":"wal-sync-mode-unvalidated","truth_value":"IN","reason":"premise"},{"node":"wal-truncate-no-bounds-check","truth_value":"IN","reason":"premise"},{"node":"strategy-selection-is-binary","truth_value":"IN","reason":"premise"},{"node":"verify-proof-direction-unvalidated","truth_value":"IN","reason":"premise"},{"node":"corruption-is-terminal-across-all-readers","truth_value":"IN","reason":"SL justification valid","antecedents":["no-component-resyncs-after-corruption","wal-no-resync-after-corruption","wal-crc-mismatch-halts-all-replay"],"label":"Stop-on-first-error without resync is universal — corruption in any record silently discards all subsequent records"},{"node":"no-component-resyncs-after-corruption","truth_value":"IN","reason":"premise"},{"node":"wal-no-resync-after-corruption","truth_value":"IN","reason":"premise"},{"node":"wal-crc-mismatch-halts-all-replay","truth_value":"IN","reason":"premise"}]}}