v0.78.0 Release Recap

v0.78.0 is a non-breaking backup audit release that adds local verification for published backup repair receipts.

What's New

Area	New in v0.78.0	Why it matters
Receipt verifier	contextdb snapshot lifecycle index publish receipt verify --receipt PATH --in INDEX --report	Confirms an executed catalog replacement receipt still matches the local lifecycle index payload
Payload integrity	Stored and recomputed payload SHA-256 checks	Detects edited or stale receipt payloads before an incident record is trusted
Catalog matching	Receipt payload and index filename validation	Catches receipts that point at a different lifecycle index or catalog state
Feature metadata	published-backup-repair-receipt-verify	Lets live deployments advertise receipt verification support

Operator Flow

After an executed catalog repair writes a receipt, verify it beside the lifecycle index:

contextdb snapshot lifecycle index publish receipt verify \
  --receipt "$CONTEXTDB_BACKUP_DIR/published-backup-repair.receipt.json" \
  --in "$CONTEXTDB_BACKUP_DIR/contextdb-backups.index.json" \
  --report

The command compares the receipt schema and kind, recorded payload hash, receipt payload, and current local publish payload. It exits non-zero with validation details when the receipt has drifted from the lifecycle index.

Compatibility

This release is intentionally non-breaking. Existing publish, drift, freshness, and receipt generation flows are unchanged; verification is a new opt-in command.

Verification

Release verification included:

go test -count=1 ./cmd/contextdb
go test -count=1 ./...
npm run docs:build
git diff --check

Read the full repair flow in the Published Backup Repair Guard.