Dashboard › opencode › Step.Recovered identity validation

Step.Recovered identity validation

Category: gotcha

Confidence: 1.00

ID: 01a0a6b2-25a0-7c20-8a07-e840c686886e

Project ID: c0425955-02bc-4c17-9af2-b114c00077e7

Cross-project: No

Recalled in other projects: 1

Source session: 0gn8mvDqdnbuGUBog

Created: 2026-09-15 01:18:15

Updated: 2026-09-15 20:11:28

Cross-Project Recalls

Project	Hits	Last recalled
opencode-lore	1	1d ago

Content

Trap: trusting schema-valid Step.Recovered IDs looks safe because replay decoded the event, but forged or cross-Session IDs can create false recovery relationships. Fix: derive recovery and continuation IDs canonically from executionID, verify any target is the same Session’s newest assistant, and require assistant_message_id = null for phase continue; continue-only recovery must never synthesize an assistant.