Bundles now emit odoosky.export.v3 schema with a recipe sub-object and explicit provenance section. The `source` field is dropped from addon entries (the Phase I tenant leak we identified). Readers handle both v2 and v3 schemas; v2 bundles in flight stay restorable but their addon `source` field is silently ignored at restore time. Phase I closes the export-bundle side of the cross-tenant data leak.
2.0 KiB
2.0 KiB