admin 03ab121b25 v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env ...

Security review of 2fe6341 (same night, before any release). Both red-proofed.

2026-10-17 23:22:54 +02:00

.claude/rules

The decoy suite is a gate of the full run (R-1116); no code change

2026-10-17 11:01:40 +02:00

.gitea/workflows

CI workflow: a manual proof that the failure mail can be sent (R-1129)

2026-10-17 12:49:43 +02:00

.githooks

pre-push: refuse a push from a clone outside the felhom workspace (R-204 rider)

2026-08-05 10:47:58 +02:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

audits

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

controller

v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env

2026-10-17 23:22:54 +02:00

docs

docs: migrate workflow to DooPlex-local execution

2026-07-19 12:15:52 +02:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

slice 8C C.3: de-privilege the controller container (legacy docker-setup template) + CHANGELOG (v0.37.0)

2026-06-10 13:59:26 +02:00

.gitignore

gitignore Python bytecode - the new gate test writes controller/scripts/__pycache__

2026-09-01 12:01:54 +02:00

BUGHUNT.md

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

2026-06-13 19:28:13 +02:00

CHANGELOG.md

v0.329.0 (review): an app named like another app's appdata folder gets no root; USERDATA_PATH is always derived, never the app's env

2026-10-17 23:22:54 +02:00

CLAUDE.md

Instruction files kept true (09 §3 decision 150): stale gate lists, paths and facts corrected; no code change

2026-10-06 13:44:01 +02:00

CONTEXT.md

v0.329.0: each app reaches only its own appdata folder; empty allow-list; drive retirement asks the agent first; plain no-durable-id refusal; :latest only for a release

2026-10-17 23:11:56 +02:00

DIAGNOSTIC.md

document

2026-06-11 14:02:47 +02:00

REPORT-app-page-2026-10-15.md

REPORT-app-page-2026-10-15.md: the app-page arc, in a file a second session cannot overwrite

2026-10-15 21:48:19 +02:00

REPORT.md

v0.329.0: each app reaches only its own appdata folder; empty allow-list; drive retirement asks the agent first; plain no-durable-id refusal; :latest only for a release

2026-10-17 23:11:56 +02:00

REUSE.md

v0.329.0: each app reaches only its own appdata folder; empty allow-list; drive retirement asks the agent first; plain no-durable-id refusal; :latest only for a release

2026-10-17 23:11:56 +02:00

RUNBOOK-e2e-live-drive.md

docs(runbook): e2e live-drive commands are DooPlex-local (plain ssh felhom-pve)

2026-07-19 12:27:42 +02:00

TASK.md

chore: rework references for repo rename deploy-felhom-compose -> felhom-controller

2026-06-08 13:38:27 +02:00

TEST-REPORT.md

test campaign #3: Phase 7 brutal recovery (B1-B3 PASS, B4 skip) + final findings/cleanup

2026-06-22 22:04:55 +02:00

S

Description

No description provided

132 MiB

Languages

Go 89.1%

HTML 6.3%

Python 2%

Shell 1.3%

CSS 1.1%

Other 0.1%