The raw snapshots keep Gerrit account numbers outside _account_id; the examples do not¶
Found while checking whether reviewer overlap can be read from raw snapshots. scrub replaces
every _account_id value and every address with a salted pseudonym, but two other places carry
the raw Gerrit account number: attention_set and removed_from_attention_set are dictionaries
keyed by it, and their reason text names it as <GERRIT_ACCOUNT_n> (lines with one: OpenStack
12,450, Wikimedia 19,134, AOSP 5,215, Qt 9,910 across the raw months on disk). Account numbers are
public on each host and resolve to a person, so the raw snapshots are not pseudonymous in full.
No refined or built example holds one (all four corpora checked), so nothing derived, committed or
released is affected; the GitHub route's rows have no attention sets. The fix to scrub waits
for the next build-rules change, since scrub.py is in BUILD_SOURCES and an edit stales every
frozen month; cleaning the snapshots already on disk is a rewrite of raw data, the same decision
as purging withdrawn changes, and is AJ's (ROADMAP Plan A). Until then the claim is that
identities are pseudonymised in everything derived from the raw snapshots, not in the snapshots.