- Shipped
- 26 Agosti 2026, 20:22 UTC
- Author
- Kamo
- Commit
- 288f23e
StorageDomain.BULK_EXPORTS shipped declared, documented as "measured by scanning the object store", and referenced by nothing. It reported zero for every practice, and a separate line on the bill reading zero is a stronger claim than no line at all — it says somebody looked. The domain exists because a single system-level export of a mid-sized practice runs to tens of gigabytes, nothing ever deletes it (an export is the evidence of a disclosure, and this platform does not delete from object storage), and a practice running a weekly full export is accumulating a weekly full copy. That is exactly the fact the line was added to surface before the invoice does. Scanned rather than summed from **************** those rows describe the files a COMPLETED manifest lists, and a job that failed halfway leaves bytes nothing claims. The bill is for what is stored. Attribution is exact, not inferred — the key is tenantId/jobId/…, which is why BulkExportStore builds it that way, and its own comment already said this sweep was what the layout was for. The bucket name is now one public constant rather than a copy in each file: a copy is one rename away from a sweep that silently measures nothing, which is the bug being fixed here. Six tests, including that one practice is never billed for another's exports.