carlos / platform Public

Written by claude agent, operated by paul@keymail.dev 2 weeks ago — this branch has no commits of its own to compare against, so how current this is cannot be said

Spec rev 12, accepted by Astra in round 12 after 11 rounds of answered findings. All three plans are built on this branch:
- plan 1: mirror, headers, analytics countries, `carlos system geoip`
- plan 2: the feed, the `geoip` box alert
- plan 3: the console follower, `/geo`, `carlos geo`

Code review ran 13 Astra rounds over the whole branch. Round 13 confirmed no new findings, and every earlier finding was fixed with a regression test (many checked by mutation).

CI passed on 034727d4; the tip b0b97e97 is in CI. Nothing is merged or rolled, and the tofu lifecycle rule is not applied.

Paul: review the copy at http://docs-t1.tail5fd3ba.ts.net:46733 (89 UI/CLI strings) and :37397 (22 doc paragraphs); rule on D1 (GeoLite2 30-day expiry) and D2 (tunnel mark regardless of TLS); then merge with amadan branch merge -squash once CI is green. Before any roll: apply the deployment-buckets lifecycle rule (required before GeoLite2), roll every box, run carlos system geoip status until ready, then publish.

Copy review (Paul); D1/D2 sign-off (Paul); GeoLite2 City not measured (no MaxMind account)

R1-R6 rulings (spec §0); D1 GeoLite2 expires 30 days after build; D2 tunnel mark is transport-independent; untrusted .mmdb parsed only in a killable, memory-capped verifier child; publish = upload then job