On Mon, 2023-11-27 at 22:37 +0100, Magnus Hagander wrote:
> That is, set it to "warnings only", insert a single row into the
> table
> with an "unlucky" key, set it back to "errors always" and you now
> have
> a corrupt database, but your setting reflects that it shouldn't be
> corrupt.
You would be giving the setting too much credit if you assume that
consistently keeping it on "error" is a guarantee against corruption.
It only affects what we do when we detect potential corruption, but our
detection is subject to both false positives and false negatives.
We'd need to document the setting so that users understand the
consequences and limitations.
I won't push strongly for such a setting to exist because I know that
it's far from a complete solution. But I believe it would be sensible
considering that this problem is going to take a while to resolve.
Regards,
Jeff Davis