Development record

abcd embargo check --range reads a merge commit against its first parent, so on a branch that merged the default branch every line the merge brings in from it is judged as the branch's own: text already public on the default branch is refused, including the id of an advisory this repository has already published, which the store need not hold. Two sessions met it on 2026-10-29 and had to check around the merge by hand.