B-APIS-polish-lint-config-lives-in-the-derived-discardable
Polish lint config (rule choices, options, allow_risky_fixes) lives in the lint_config table
in the per-vault vaultpolish.db
(solutions/determined/crates/determined-polish/src/port.rs). The crate’s own module doc
(port.rs section 1, citing D-0011 section 3) documents that database as derived, discardable
and rebuildable — lint results and scan history live there because they can always be
recomputed.
Lint config is different: it is user-authored (the rule choices, options and
allow_risky_fixes the user picked), not derived from a scan. Wiping or rebuilding
vaultpolish.db as “discardable derived state” silently loses it.
Candidates: move lint config to a plain file in the vault, alongside other vault-authored config, or into the platform settings store — out of the derived-state database.