fix: expire must not drop live rows or leave them visible to index-only scans - #869

Merged

jdatcmd merged 8 commits into

mainfrom

audit/ttl-expire-live-rows

Sep 2, 2026

Commits on Sep 2, 2026

fix: do not let expire drop live rows or leave them visible to index-only scans

authored and
OffgridwithJD
committed
9837338
fix: clear the visibility map wherever live rows are renumbered, and refuse a negative retention

authored and
OffgridwithJD
committed
046b2ed
fix: the NULL guard must read live rows, or it over-retains forever

authored and
OffgridwithJD
committed
cf548b0
docs: record what the coarse delete probe costs, so switching it is a decision

authored and
OffgridwithJD
committed
8ac1195
docs: the probe's cost is a total, not a rate, and the shape is undetermined

authored and
OffgridwithJD
committed
5e0eab1
docs: name the instrument, because wall clock on this host is not a fair one

authored and
OffgridwithJD
committed
5e29f76
fix: the ttl_interval guard has to go into the upgrade script too

OffgridwithJD
and
claude
committed
118e61f
docs: this branch makes expire read a group, so stop saying it never does

OffgridwithJD
and
claude
committed
5ea1c95