- Move project to a dedicated organization
- Create website
- build something like hardwood.dev but for vortex files
- Benchmark publishing — see ADR-0006.
- Performance tests must be peer-reviewed
- Run performance tests on other machines (I have access only to Apple M5)
- Vector API adoption — see ADR-0005.
See CLAUDE.md §Security contract for the invariant. Each entry below is either a known gap, a contract audit, or supporting infra.
Each encoding's decode(DecodeContext) should be exercised against:
bufferIndices[i] >= ctx.bufferCount()→ centralize check inDecodeContext.buffer(i).- Crafted metadata that decodes but disagrees with the buffer payload.
Per-encoding gotchas:
- VarBin: offsets non-monotonic, negative, past data-buffer length.
- Dict:
codes[i] >= values.length;codesptype declared u8 but values count > 256. - Bitpacked:
bit_width < 0 || > 64;packed_len < n * bit_width / 8. - ALP:
dim < 0,f_or_dbyte out of enum range;exceptions_count > n. - Sparse: indices non-sorted or
indices[i] >= length; values count mismatches indices count. - Chunked: zero children with non-zero
row_count; child layout self-referencing (already protected by depth limit, but add explicit test). - Struct:
fieldNames.size() != children.size(); field name UTF-8 invalid. - RLE / RunEnd:
run_endsnon-monotonic; lastrun_end≠row_count. - Constant: protobuf scalar value missing or type-mismatched against declared
DType. - Zoned: zone-map min > max; zone count ≠ child chunk count.
- Pco:
bits_per_offset > 64;bin_count == 0with non-empty page; per-pagengreater thanDEFAULT_MAX_PAGE_N; ANS state values inconsistent with weight table.
- Implement
ResourceLimits+ReadOptions— see ADR-0004.
- Jazzer fuzz testing — see ADR-0020.
- use JPMS, watch out for "dfa1" in package name
- Docs compiler — remaining tiers —
DocsConsistencyTest(integration) now gates FQNs, method claims, service-file paths, and relative links in the living docs (first run caught 11 fossils the same-day manual audit missed). Remaining:- Golden-test or generate enumerable tables (encodings/extensions/layout ids in
docs/reference.md,docs/compatibility.md) fromEncodingId.WellKnown/LayoutId.WellKnown/ service manifests — a declared capability the code lacks is a bug, in both directions. - Compile
```javablocks from living docs (tutorial imports were stale for months).
- Golden-test or generate enumerable tables (encodings/extensions/layout ids in
-
vortex-arrowbridge module — see ADR-0016.
-
VortexExceptionmessage sanitization — see ADR-0003. - Domain primitives (unsigned integers via Valhalla) — see ADR-0008.
See docs/compatibility.md for the full encoding support table and S3 fixture status.