app guides night: R-1089..R-1092 (found writing the guides), R-1088 extended; read_credential.py refuses to overwrite the credentials file (red-proved); STATUS; batch evidence

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-15 23:25:53 +02:00
parent 3eca98f135
commit 08cf15d8cd
129 changed files with 9032 additions and 2 deletions
@@ -1,3 +1,14 @@
+## 2026-10-15 (night) — read_credential.py refuses to write over the credentials file (R-1088)
+
+- `read_credential.py KEY ~/.config/credentials` — the credentials path given as the OUTFILE — truncated the operator's
+  credentials file to one value (CC, the app-guides night). The reader now refuses, before reading or writing, an OUTFILE
+  that is the credentials file by path, by symlink or by hard link (exit 2, the reason named). The docstring says what
+  OUTFILE is.
+- `test_read_credential.py`: `test_the_outfile_can_never_be_the_credentials_file` (same path, symlink, hard link, and a
+  separate outfile still accepted). Red-proved: with the guard off, the file is overwritten and 5 checks fail
+  (`documentation/audits/app-guides-2026-10-15/credential-guard-redproof.txt`). The file itself is NOT restored — that is
+  the operator's (R-1088).
+
 ## 2026-10-15 — golden_currency_gate: the golden is judged by its AGE (`09` §3 decision 250)

 - A controller release needs no golden (operator ruling 2026-10-15 11:26). The gate no longer convicts because the newest