normalizeNumber accepts digit strings past the safe-integer range #182

New issue

Closed

opened 2026-08-16 01:18:56 +00:00 by john · 1 comment

john commented

2026-08-16 01:18:56 +00:00

Owner

From the phase 2 risk_surface review (medium, adjudicated survivor).

normalizeNumber converts a digit string with Number() and no safe-integer test, so two distinct issue indices can compare equal after precision loss. A resolve reading an index of 9007199254740993 against the referenced number 9007199254740992 matches, and the seam reports a state it read for a different issue.

Contrived on a real tracker, but the seam is written to refuse affirmative answers about input it could not read, and this is one.

Found in: cadence-core/bin/lib/issue-decision.mjs (normalizeNumber)

From the phase 2 risk_surface review (medium, adjudicated survivor). `normalizeNumber` converts a digit string with `Number()` and no safe-integer test, so two distinct issue indices can compare equal after precision loss. A resolve reading an index of 9007199254740993 against the referenced number 9007199254740992 matches, and the seam reports a state it read for a different issue. Contrived on a real tracker, but the seam is written to refuse affirmative answers about input it could not read, and this is one. Found in: cadence-core/bin/lib/issue-decision.mjs (normalizeNumber)