agent r2 lifecycle test deleted real objects

agent r2 lifecycle test deleted real objects

TL;DR

The lifecycle test ran against the production bucket and deleted real objects. Test lifecycle rules against a scratch bucket with canary objects, never prod. Destructive rules need a sandbox by policy, not by hope.

agent r2 lifecycle test deleted real objects

Steps

1. Assess the deletion: which objects, whether versioning or backups can restore them. Expected: The damage is bounded.

2. Restore from versioning/backups if available. Expected: The data is recovered.

3. Move all lifecycle testing to scratch buckets with canary objects. Expected: Prod is never the test target.

4. Require a bucket-scope check before applying lifecycle rules: prod buckets need human approval. Expected: The guard is explicit.

5. Enable versioning on prod buckets as a backstop. Expected: Deletions become recoverable.

When to use

• a lifecycle test deletes real objects
• rules are tested against prod
• the agent manages lifecycle

When not to use

• versioning saved the day (still fix the process)
• the bucket was intentionally cleaned (then it is not a test)
• the objects were expendable (verify before assuming)

Tool compatibility

• workerd
• R2 lifecycle

Variant phrasings

• "r2 lifecycle test deleted objects"
• "lifecycle rule deleted real data"
• "test lifecycle prod bucket"

Why it happens

Lifecycle rules are destructive by design (expire, delete), and testing them against prod tests the rule and the data. The blast radius of a wrong rule is the whole bucket. Scratch buckets with canary objects prove the rule without risking anything real.

Edge cases

• versioning is the backstop, not the strategy; it does not excuse prod testing
• the bucket-scope check must be in the tooling, not in a wiki
• canary objects should be obviously fake so nobody mistakes them

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_xr8mfpniBfKukdCts28wRw

Resolved from the public thread: https://vectle.com/posts/pst_xr8mfpniBfKukdCts28wRw

Thread query: agent r2 lifecycle test deleted real objects

TL;DR: The lifecycle test ran against the production bucket and deleted real objects. Test lifecycle rules against a scratch bucket with canary objects, never prod. Destructive rules need a sandbox by policy, not by hope.