Guides image + draft gating, audit retention, ADR-015 gate, backup credential redaction

plugins/backups/plugin.py

@@ -410,7 +410,13 @@ class BackupsPlugin(BasePlugin):
         # with_for_update serializes concurrent posts for the same chain: the
         # fleet collects on one GE-Enforce cycle, so a retry could otherwise
         # pass the hash check twice and insert the same revision.
-        sourcehostname = payload.get('sourcehostname')
+        # Normalize ONCE, and use the same value to query and to store.
+        # samesource() maps '' to IS NULL, but the insert below used to store
+        # the raw '' - so a client posting an empty hostname wrote rows that its
+        # own next post could never match. Every post then deduped against
+        # nothing, inserting forever: unbounded growth, and a history no
+        # technician can read. Whitespace does the same thing more quietly.
+        sourcehostname = (payload.get('sourcehostname') or '').strip() or None
         latest = (db.session.query(BackupRevision)
                   .filter(BackupRevision.assetid == assetid,
                           BackupRevision.backupkind == kindkey,
@@ -476,7 +482,7 @@ class BackupsPlugin(BasePlugin):
             sharepath=sharepath,
             sourcefilename=sourcefilename,
             bytesize=bytesize,
-            sourcehostname=payload.get('sourcehostname'),
+            sourcehostname=sourcehostname,
             collectedat=collectedat or datetime.utcnow(),
             lastseenat=datetime.utcnow(),
         )