Deep audit 2026-09-06, finding F12 (parity, low). Survived refutation.
Mechanism. let detectedDimension = config.dimension ?? 0 (src/routes/info.ts:19); the cold-cache fallback loop (lines 44-53) only probes namespaces with vectorCount > 0. A fresh boot with no upserts (or after reset?all, which clears dimensionMap) returns { dimension: 0, denseIndex: { dimension: 0, ... } }. Both dimension and denseIndex.dimension report 0; config.embeddingDimension is not consulted as a fallback even when the embedding provider is enabled.
Impact. SDK type InfoResult.dimension is required, so user code reading info().dimension (e.g. sizing query vectors) gets an invalid 0. The installed SDK does not consume it functionally — hence low severity.
Candidate mitigations (to assess).
- Return
null/omit the field until dimension is known (SDK type friction to check).
- Fall back to
UPVECTOR_EMBEDDING_DIMENSION when the embedding provider is enabled.
- Document the 0-valued cold state in the README parity table.
Triage guidance: docs/RUNBOOK.md. Audit procedure: docs/workflows/deep-audit.md.
Deep audit 2026-09-06, finding F12 (parity, low). Survived refutation.
Mechanism.
let detectedDimension = config.dimension ?? 0(src/routes/info.ts:19); the cold-cache fallback loop (lines 44-53) only probes namespaces withvectorCount > 0. A fresh boot with no upserts (or afterreset?all, which clearsdimensionMap) returns{ dimension: 0, denseIndex: { dimension: 0, ... } }. BothdimensionanddenseIndex.dimensionreport 0;config.embeddingDimensionis not consulted as a fallback even when the embedding provider is enabled.Impact. SDK type
InfoResult.dimensionis required, so user code readinginfo().dimension(e.g. sizing query vectors) gets an invalid 0. The installed SDK does not consume it functionally — hence low severity.Candidate mitigations (to assess).
null/omit the field until dimension is known (SDK type friction to check).UPVECTOR_EMBEDDING_DIMENSIONwhen the embedding provider is enabled.Triage guidance:
docs/RUNBOOK.md. Audit procedure:docs/workflows/deep-audit.md.