AIKIDO-2026-597857

TL;DR

Ash stores :atom typed attributes as strings and compares them as strings, but filtering such an attribute coerces the comparison value through Ash.Type.Atom. That type defines no coerce/2 callback, so coercion falls back to cast_input/2, which calls String.to_atom/1 whenever the attribute carries the unsafe_to_atom?: true constraint. Filtering a public, filterable atom attribute such as AshPaperTrail's version_action_name with externally supplied strings interns a new permanent atom for every distinct value, exhausting the BEAM's capped, never garbage collected atom table and crashing the node. The fix adds a coerce/2 that keeps the comparison value as a string instead of interning an atom.