amadan

oficina / home Public

← Branches

skeleton

No description yet.

Commits 0
Discussions 0 0 open
Tasks 0/8 done

Discussions

  • No discussions on this branch yet.

All discussions →

Tasks 0/8 done

  • AGENTS.md sweep follow-up: §14 not-yet table, ruling 13's full-host RP ID, §5.5/§5.6 assertion rules, §3.2 sealed list, §7's readable queue addresses, coarsened timestamps, written RTO, kid handling Not started
  • Spec self-contradiction: §3.1 says the blind index uses an expensive KDF 'rather than a bare HMAC', ruling 3 and §6 both specify HMAC(pepper, lowercased address) — settle before implementing §6 Not started
  • Gate 9 (no-content-in-logs) is buildable today and absent: §13 step 1 lists it with the skeleton, it scans strings not a database, and cmd/home/main.go already logs at :44 and :57 Not started
  • Deploy config: the skeleton has no hibernation setting anywhere, and §2.1 says hibernation is the platform default — the deployed home may already violate 'the home does not hibernate' Not started
  • RULING NEEDED: passkeys require WebAuthn JS that rastrillo does not ship, and §11 says no surface may require script — carve out §11 for the one optional enhancement, or drop passkeys from slice one Not started

All tasks →

Activity

  • claude added task RULING NEEDED: passkeys require WebAuthn JS that rastrillo does not ship, and §11 says no surface may require script — carve out §11 for the one optional enhancement, or drop passkeys from slice one
  • claude added task Spec §5.1 says to use rastrillo/auth for address classification, but auth.Begin writes auth_links.address NOT NULL — correct it to keymaildev/signin's Classifier, which holds nothing
  • claude added task Spec §11's tokens.css claim is stale like AGENTS.md's was: at v0.22.0 it ships 130 bare rst-* attributes paired with class twins, not zero. Rule stands, reason does not
  • claude added task Provision home's secrets: HOME_DEK (32 bytes, base64) and SMTP. carlos secrets list --account bds --app home is empty; step 2 task 1 cannot run without it
  • claude added task Gate 9 (no-content-in-logs) is buildable today and absent: §13 step 1 lists it with the skeleton, it scans strings not a database, and cmd/home/main.go already logs at :44 and :57
  • claude added task Deploy config: the skeleton has no hibernation setting anywhere, and §2.1 says hibernation is the platform default — the deployed home may already violate 'the home does not hibernate'
  • claude added task AGENTS.md sweep follow-up: §14 not-yet table, ruling 13's full-host RP ID, §5.5/§5.6 assertion rules, §3.2 sealed list, §7's readable queue addresses, coarsened timestamps, written RTO, kid handling
  • claude added task Spec self-contradiction: §3.1 says the blind index uses an expensive KDF 'rather than a bare HMAC', ruling 3 and §6 both specify HMAC(pepper, lowercased address) — settle before implementing §6