Contributing traces safely
PVE Storage Guard welcomes independent evidence, but GitHub Issues and pull requests are not raw-data upload channels. Begin with the metadata-only qualification form.
Never publish raw traces or logs, private or signed URLs, credentials, internal network coordinates or paths, host/guest identities, device serials, absolute production timestamps, or customer/workload data. Keep the source under your control. Opening an Issue grants no permission to download, retain, transform, or redistribute it. Submitted URLs are never fetched automatically.
If sensitive material is posted accidentally, do not quote it in a follow-up. Remove it where possible, use the repository Security tab to report the incident privately, rotate exposed credentials, and treat it as disclosed even after removal.
Two evidence lanes
Section titled “Two evidence lanes”Storage research accepts correctly labeled workload shape, block I/O, or
latency evidence without synchronized management observations. Missing
management data remains unknown. This lane can test aggregation and policy
behavior, but cannot prove PVE, SSH, or host-management availability.
Promotion candidates must declare observed independent provenance, known storage/workload classes, compatible storage-domain write p95, synchronized management status, a window of at least 600 seconds, and at least 95% structural, valid-wait, and known-management coverage.
Diskstats average wait, block-device or application latency, and ZFS total wait must retain their actual measurement labels. They cannot be renamed to match a promotion contract.
Review flow
Section titled “Review flow”- Submit non-sensitive qualification metadata only.
- Run conversion and the v1alpha2 assessor locally.
- Let a maintainer review source authority, terms, provenance, independence, transformations, and residual disclosure risk.
- Publish an approved sanitized artifact only through a separate focused pull request.
Machine qualification is necessary but cannot establish legal permission or truth of self-declared evidence. It also never authorizes production control; controlled-load, soak, canary, and explicit production gates remain.