fix(site-publish): close split migration boundaries

Authored-By: OpenAI (GPT-5) <noreply@openai.com>
2026-08-29 22:42:37 +00:00
parent 19fb4e43ab
commit b8ec4e1f66
4 changed files with 29 additions and 4 deletions
@@ -136,7 +136,7 @@ provisional cache policy or a pointer to a missing immutable target.

 Artifact input directories must be pairwise disjoint after filesystem
 resolution. Publication stops before build or upload if one contains another or
-escapes the repository. Descendant symlinks are also rejected, preventing
+escapes the repository. Symlinked roots, components, and descendants are also rejected, preventing
 protected input from entering a public artifact through dereference. Split
 storage endpoints are pinned to Garage, and each website
 authority is derived from its bucket; a site cannot expose an arbitrary backend.