From 97eddfbb036b663d979ec8bb7f7f0c8080c61b10 Mon Sep 17 00:00:00 2001 From: jack Date: Sun, 26 Jul 2026 13:16:43 +0200 Subject: [PATCH] Clarify unavailable-receipt comment for quarantine semantics Co-Authored-By: Claude Opus 4.8 --- bitchat/Services/BLE/BLEFileTransferHandler.swift | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/bitchat/Services/BLE/BLEFileTransferHandler.swift b/bitchat/Services/BLE/BLEFileTransferHandler.swift index f2e17b6d..51e6d373 100644 --- a/bitchat/Services/BLE/BLEFileTransferHandler.swift +++ b/bitchat/Services/BLE/BLEFileTransferHandler.swift @@ -295,8 +295,10 @@ final class BLEFileTransferHandler { ) return true case .unavailable: - // Never turn an unreadable ledger into an empty ledger. The - // sender can retry after the transient storage failure clears. + // Never turn an unreadable ledger into an empty ledger. A + // directory-level failure clears on retry; a quarantined + // record keeps exactly this ID fail-closed while every other + // payload still flows. SecureLogger.warning( "📁 Withholding private media id=\(messageID.prefix(12))… while durable receipt state is unavailable", category: .session