amadan

oficina / home Public

← Branches

skeleton

Tasks 0/8 done

  • AGENTS.md sweep follow-up: §14 not-yet table, ruling 13's full-host RP ID, §5.5/§5.6 assertion rules, §3.2 sealed list, §7's readable queue addresses, coarsened timestamps, written RTO, kid handling Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.258 · DOCS-T1
  • Spec self-contradiction: §3.1 says the blind index uses an expensive KDF 'rather than a bare HMAC', ruling 3 and §6 both specify HMAC(pepper, lowercased address) — settle before implementing §6 Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.258 · DOCS-T1
  • Gate 9 (no-content-in-logs) is buildable today and absent: §13 step 1 lists it with the skeleton, it scans strings not a database, and cmd/home/main.go already logs at :44 and :57 Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.258 · DOCS-T1
  • Deploy config: the skeleton has no hibernation setting anywhere, and §2.1 says hibernation is the platform default — the deployed home may already violate 'the home does not hibernate' Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.258 · DOCS-T1
  • RULING NEEDED: passkeys require WebAuthn JS that rastrillo does not ship, and §11 says no surface may require script — carve out §11 for the one optional enhancement, or drop passkeys from slice one Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.259 · DOCS-T1
  • Spec §5.1 says to use rastrillo/auth for address classification, but auth.Begin writes auth_links.address NOT NULL — correct it to keymaildev/signin's Classifier, which holds nothing Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.259 · DOCS-T1
  • Spec §11's tokens.css claim is stale like AGENTS.md's was: at v0.22.0 it ships 130 bare rst-* attributes paired with class twins, not zero. Rule stands, reason does not Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.259 · DOCS-T1
  • Provision home's secrets: HOME_DEK (32 bytes, base64) and SMTP. carlos secrets list --account bds --app home is empty; step 2 task 1 cannot run without it Not started operated by paul@keymail.dev session aa9e75b3 · claude-code/2.1.259 · DOCS-T1