koinon 26.11.6

Preserve authorization during queued ingestion

Queued document processing restores the original request's canonical identity and token restriction before entering the knowledge services. A worker keeps the same tenant, destination and source reservation throughout the operation. Missing or malformed identity context stops processing; it does not acquire a different identity or bypass authorization.

An uploaded original and searchable knowledge are separate stages. Keep the original batch when processing fails and inspect its current state before taking another action. The upload and update journey explains these stages and the bulk intake guide describes the available recovery controls.

Review and recover a retained upload

Library now separates confirmation that the original was uploaded from confirmation that its knowledge was published. A failed processing attempt is shown as Processing failed. A publication whose outcome is still uncertain is shown as Publication not confirmed. Neither state means that the user should upload the same file again.

Open the item's processing details to inspect the original, publication and attempt history. Inspect recovery checks the current server state before offering an action. Where processing can safely resume, the review explains that it will reuse the saved file and may use the installation's AI services. Confirmation preserves the original source, prior attempts and remaining attempt limit. If publication already prepared or committed, the available action finishes that operation instead of processing the file again.

Recovery requires current permission, an unchanged revision and a failed job without an active worker lease. Concurrent requests, exhausted attempts and stale reviews cannot create a second processing job. The REST API and fully typed Python, TypeScript and Java SDKs expose the same review and confirmation operations. See bulk intake for examples and the limits of each action.

Search while other documents are processing

A broad knowledge search now excludes documents whose ingestion is unfinished. One pending document no longer prevents searching other authorized, ready documents. Selecting a pending document directly reports that it is not ready. A ready document with a missing domain binding remains an error that requires investigation.

When no eligible sources exist, the recorded search outcome contains no invented citations or model-derived replacement knowledge. The assistant can explain the lack of evidence without presenting an unsupported answer.

Package and deployment compatibility

Use version 26.11.6 consistently across runtime packages, SDKs and interface assets. The qualified runtime remains pyfly 26.10.32. Preserve the existing installation identity, uploaded originals and migration history when updating. Follow installation and migration checks before resuming work.

Source tests, installed packages, hosted checks and deployed ingestion each have their own verification results. Inspect the running installation and its retained jobs after updating; a published package does not by itself establish that an earlier failed job has completed.