amadan
worktree-scanner-host
Gets object-storage virus scanning running on Carloku (then Tito): a new infra/modules/scanner-host module (a clamd box whose TCP 3310 is open only while a self-test has passed against the running clamd), an opt-in store_scanning read-and-tag grant on region-host, and a clamd client change so an archive clamd could only partly scan is recorded unscanned, never clean.
Spec: docs/superpowers/specs/2026-10-04-scanner-host-rollout-design.md (draft 6, six Astra review rounds). Plan: docs/superpowers/plans/2026-10-05-scanner-host-rollout.md. Built by subagents with a review per task and a Fable whole-branch review; its fix wave (AppArmor temp dir, debconf StreamMaxLength round-trip) is in progress. Nothing is released or applied: Paul stopped tonight before v0.23.0.
Commits
20
Discussions
1
1 open
Tasks
0/0
done
Discussions 1 open
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev replied to Scanner host: object-storage scanning on Carloku and Tito
- claude agent, operated by paul@keymail.dev replied to Scanner host: object-storage scanning on Carloku and Tito
- claude agent, operated by paul@keymail.dev replied to Scanner host: object-storage scanning on Carloku and Tito
- claude agent, operated by paul@keymail.dev pushed f0edf8743 docs: scanner-host README after the review fixes (copy approved by Paul); spec synced
- claude agent, operated by paul@keymail.dev pushed 682811029 spec: Astra's code review findings, unedited (13 and 14 fixed in 63287c0)
- claude agent, operated by paul@keymail.dev replied to Scanner host: object-storage scanning on Carloku and Tito
- claude agent, operated by paul@keymail.dev pushed 6232a1c51 plan: readiness accepts the five clamd.conf keys in any order and greps the loaded /usr/sbin/clamd profile
- claude agent, operated by paul@keymail.dev pushed 63287c014 scanner-host: the self-test reads the signature exactly, a scan timeout fails it, and logging cannot kill init
- claude agent, operated by paul@keymail.dev pushed 092c5a858 spec: scanner host code review brief
- claude agent, operated by paul@keymail.dev pushed a8e9f61f8 Merge remote-tracking branch 'origin/main' into worktree-scanner-host
- claude agent, operated by paul@keymail.dev pushed 036d9eea7 plan: readiness checks AppArmor and a debconf reconfigure round trip
- claude agent, operated by paul@keymail.dev pushed 00cfdb9eb scanner-host: clamd may use /var/tmp under AppArmor, and upgrades keep clamd.conf
- claude agent, operated by paul@keymail.dev opened Scanner host: object-storage scanning on Carloku and Tito
- claude agent, operated by paul@keymail.dev pushed 53e037646 docs: the scanner host, store_scanning, and the scanner's real variables Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- claude agent, operated by paul@keymail.dev pushed 88eadd0bd scanner-host: a clamd box whose port is open only behind a passed self-test
- claude agent, operated by paul@keymail.dev pushed a42a55026 region-host: store_scanning, the console's opt-in read-and-tag grant
- claude agent, operated by paul@keymail.dev pushed 741e5bdc6 clamd: a limit heuristic is unscanned, and a scan timeout is retried
- claude agent, operated by paul@keymail.dev pushed b6a34b762 plan: scanner host rollout, thirteen tasks
- claude agent, operated by paul@keymail.dev pushed 29934da13 spec: scanner host draft 6, closes Astra review 5 (socket unit boot-ordering cycle)
- claude agent, operated by paul@keymail.dev pushed edee53d43 spec: scanner host draft 5, closes Astra review 4 (self-test gates the port; scan limit fixed)
- claude agent, operated by paul@keymail.dev pushed 51985b0d0 spec: scanner host draft 4, closes Astra review 3 (finding 9, tested against clamd 1.4.3)
- claude agent, operated by paul@keymail.dev pushed ae1cb8803 spec: scanner host draft 3, closes Astra review 2 (7 and 8 accepted, 6 declined)
- claude agent, operated by paul@keymail.dev pushed 057524221 spec: scanner host draft 2, closes Astra review 1 (five findings, all accepted)
- claude agent, operated by paul@keymail.dev pushed d1b85d636 spec: scanner host review brief
- claude agent, operated by paul@keymail.dev pushed 2f9ce3724 spec: scanner host, getting object-storage scanning running on Carloku and Tito