Files

T

gates / consistency-and-conventions (push) Successful in 26s

Details

fix: stabilization pass — fail-closed auth, ai flag validation, lint/config/security hardening, regression tests

17-point code-level audit executed via Explorer->Architect->Builder->Tester->Reviewer;
Reviewer accepted (APPROVE_WITH_NOTES; 3 block-list items resolved):

- security: telegram sender-owner AND-gate + TELEGRAM_OWNER_ID, matrix
  MATRIX_ROOM_ID fail-closed, gpg --passphrase-fd 3 (no argv secret),
  /dev/tcp positional-arg form (checkport/smb-client/share-lib/NET_PROBE),
  eval deny-by-default + --no-command-execution carried by both chat bridges,
  tty-gated --trust; config/{telegram,matrix}.env reference templates
- ai: all ExecStart flags validated against installed llama.cpp
  (requested->error, default->omit+warn, CONFIG_REQUESTED_FLAGS); single-file
  hf download failure rc=1 + no .hf-meta; LLAMACPP_HOST coherent;
  POS_SUBCMDS + metadata gaps closed
- tooling: lint-conventions Bash-native rewrite (~24-30x faster, rules and
  output byte-identical, :num restored); pos system uninstall covers all 12
  libs + scale-tail + flags dir + systemd user units (|| true) + plugin
  markers; anchored .bash_completion/.bashrc removal replaces sed -i '/pos/d'
- config: canonical load_env_file in lib/config-ui.sh (CRLF strip, env-wins,
  XDG, LOADED_ENV_KEYS); 9 tools migrated; entertainment-lib collapsed to
  wrappers; docker-compose deliberately unmigrated (source semantics)
- tests: first committed regression suite — tests/run-tests.sh zero-dep
  runner + make test; 12 files / 179 checks / 0 skip / ~52s; hard skip
  contract; systemd-analyze verify on generated unit PASS

Verified: make gen idempotent; make check green; make lint 0 FAIL, 0 WARN;
make test green; bash -n clean; git diff --check clean. Audit deliverables +
agent reports + AGENT_TODO Done entry included.

2026-09-06 07:25:44 -04:00

1.3 KiB

Raw Blame History

Maintainer Report — 2026-09-06 AGENT_TODO maintenance

TL;DR

Fixed stale DOC/APPS.md 15→16 count in the llamacpp Done entry (filetable is now 18 after stabilization pass).
Added one new Done entry summarizing the full stabilization pass.
Both edits are uncommitted; AGENT_TODO.md is not part of make gen/check/lint.

Step 1: Fix stale count in llamacpp Done entry

Finding: AGENT_TODO.md:45 says DOC/APPS.md 15→16 — the security-track work later raised the filetable to 18. Status: DONE Change: Replaced DOC/APPS.md 15→16 with DOC/APPS.md app-table row count updated (15→16 at the time; 18 after the 2026-09-06 stabilization pass). [DONE]

Step 2: Add stabilization-pass Done entry

Finding: No Done entry summarizes the 17-point stabilization pass executed 2026-09-06. Status: DONE Change: Inserted a new - **2026-09-06** — Stabilization pass … entry at the top of the Done section (newest-last placement). [DONE]

Verification

git diff --stat AGENT_TODO.md → 4 insertions (new-newest Done entry + the count substitution).
The diff shows exactly the two changed regions: @@ -42,6 +42,10 @@ ## Done — new entry inserted at top of Done, and the count substitution inside the llamacpp entry.
No other entries moved/reordered; Later/Next untouched; no commit made. [DONE]

1.3 KiB Raw Blame History