Grimmory tested but held (R-775): its fixture added; CHANGELOG, CONTEXT, REPORT for the night's new apps

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-01 19:51:12 +02:00
parent 72247a387e
commit 94477cba43
4 changed files with 122 additions and 13 deletions
@@ -1,3 +1,11 @@
+## Grimmory — tested, NOT published; fixture added (2026-10-01, night)
+
+- Grimmory (the BookLore successor) passed the checklist on the bench and 9202 except one finding that needs the
+  operator: a stranger's 5 wrong sign-ins lock EVERY visitor out for 15 minutes (hard-coded; one address behind the
+  tunnel) — `felhom.eu` R-775. The template is NOT in `templates/`; it waits in
+  `felhom.eu/documentation/audits/new-apps-2026-10-01/wip/grimmory/`. Its fixture `Grimmory` (first admin, a library, an
+  uploaded EPUB, three negative controls) is in `upgrade_fixtures_box.py`, so the publishing session reuses it.
+
 ## Dawarich — the third app through the new-app checklist (2026-10-01, evening)

 - **`templates/dawarich/`** — your own location history (instead of Google Timeline): `freikin/dawarich:1.15.3` (web +