perf(network-graph): preserve memoized rerender boundary

[seonghobae]

Purpose

Stable successor for #1526. This PR preserves the memoization child delta without rewriting predecessor history or duplicating #1522's bounded-option ownership.

Current exact authority

• canonical stacked parent/base: Draft perf(network-graph): bound relationship and node option materialization #1522 bolt/networkgraph-array-copy-removal-3640017362173775883@fd938c1c6ae1328fafba1959fd55c3b9037e4346
• exact head: a976b4d009ee5ab5f18899e30f41778ecdb47eec
• ancestry from current parent: ahead-only / behind 0, merge base = exact current perf(network-graph): bound relationship and node option materialization #1522 head
• effective child delta: exactly frontend/src/components/NetworkGraph.tsx plus frontend/src/components/NetworkGraph.memoization.test.tsx
• lifecycle: Draft / mergeable / fresh hosted evidence absent

Parent adoption and repair

#1522 advanced after this successor's earlier repair. A fresh parent audit found that one nominal CI-trigger commit had actually loosened the Strix httpx2==2.12.0 pin; #1522 repaired that drift test-first and moved to fd938c1c....

This successor adopted the current parent without force or destructive rebase. Ordinary two-parent merge 4795d593f0ec3087c1b3cce82bfee692436eaeee first joined the histories. The immediate parent/child compare then exposed one retained stale parent blob: backend/tests/test_container_dependency_pin_contract.py did not yet contain #1522's new exact-httpx2 contract. Rather than treating the concurrent delta as a race, direct child a976b4d009ee5ab5f18899e30f41778ecdb47eec adopted that exact parent blob. A fresh compare now reports only the two intended NetworkGraph child files and behind_by=0.

The production child delta remains the React.memo boundary only. The behavioral regression renders ParentHarness and NetworkGraph in the same React root, lets child async work settle, rerenders only the parent, verifies the parent DOM changes, and requires the child's render-body observation count not to increase. It does not inspect React private markers. #1522 continues to own relationship/node option limits and their tests.

Evidence and merge boundary

Fresh repository-owned pull-request workflow lookup for a976b4d009ee5ab5f18899e30f41778ecdb47eec currently returns 0 runs. No hosted GREEN is claimed, and predecessor checks/reviews do not transfer. #1522 itself remains Draft with new exact-head checks non-terminal.

Keep Draft until #1522 is protected-integrated, this descendant is revalidated against the resulting parent, and one unchanged exact head has every then-live required repository/organization check terminal-success, zero valid unresolved current-head findings/threads, and the qualifying independent post-last-push approval required by live governance. Close #1526 only after #1560 merges and a fresh protected-target equivalence audit proves complete succession. No force-push, destructive rebase, self-approval, admin bypass, dummy/no-op requeue, predecessor-evidence transfer, gate weakening, or unsupported p95 claim.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-04T13:43:59.940651Z	86dab1e	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[seonghobae]

Lifecycle reconciled: this successor stays Draft because non-default-base Application CI, Bandit, and image validation were suppressed. #1562 repairs those repository-owned trigger filters with 38 governance tests and actionlint. After #1562 and parent #1522 merge, re-fetch/retarget this exact delta, mark Ready, and require fresh hosted checks and independent review.

[seonghobae]

Non-force restack complete at exact head 20fdedbae61f0e11cc650413d35532507b99656b. The successor now inherits parent #1522 exact head 2d58b23003917319fb6fd5170973f70b88793fb0, including the valid exact-pinned Strix httpx2 prerequisite identified from failed job 101062515199; the effective child diff remains the five NetworkGraph files. Full frontend verification: 52 files / 439 tests passed, TypeScript passed, focused ESLint passed, and parent-to-child diff check passed. All hosted checks and reviews must regenerate on this head.