oficina / sheets Public

READ-ONLY focused Fable DESIGN re-review; no edits/deploys/secret reads. Isolated repo /home/paulca/amadan.net/oficina/sheets-core/.claude/worktrees/overnight-fixture exact HEADc5ebba3 (parent1aca44c). Read previous REQUEST CHANGES /tmp/sheets-bootstrap-fable-review.json and changed docs/superpowers/specs/2026-09-07-canary-fixture-bootstrap.md. Revision2 adds distinct fixture-release stamp and negative equality assertions; exact synthetic nondelivering SMTP host/from/port plus empty inherited credentials verified by root, same LoadAuthEnv, no POST/signin; schema-derived emptiness, import-graph exclusion, path/session/idempotency/teardown tests and fail-closed wake note. Root must still verify actual resolved DB path and supported environment credential-empty semantics BEFORE implementation/deployment guards finalize; no environment mutation claimed. APPROVE or REQUEST CHANGES for design only, focus remaining blockers, not independent tabs/atomic/watermark reviews. No fixture code yet.

READ-ONLY focused Fable DESIGN amendment review; no edits/deploys/secret reads. Repo /home/paulca/amadan.net/oficina/sheets-core/.claude/worktrees/overnight-fixture. Read HEAD and git diff c5ebba3..HEAD plus prior APPROVE /tmp/sheets-bootstrap-fable-review2.json. Root verified CLI explicit empty SMTP overrides and configured synthetic transport. Runtime DB path cannot be exposed by route API, so new preflight-only standard-library command validates exact origin/owner/runID/socket/SMTP/keys and absolute cleaned canary DB basename, logs only its unique linker stamp and canary DB/socket args, then exits BEFORE any file/socket open, migration or path probing. Root uses actual argv evidence to compile a separate writer with exact DB guard. No toggle turns observer into writer. Writer keeps all approved path/symlink/emptyDB/session/teardown guards and rastrillo.Resolve+LoadAuthEnv. This preflight catches actual child .env overrides without reading/logging any secret. Assess this narrow evidence phase; explicit APPROVE or REQUEST CHANGES. Later code and deployment gates remain. No application code implemented yet.

READ-ONLY Fable preflight CODE review; no edits/deploys/secret reads. Repo /home/paulca/amadan.net/oficina/sheets-core/.claude/worktrees/overnight-fixture exact HEAD0b3cfae. Approved preflight design b340a3d review /tmp/sheets-bootstrap-fable-review3.json. Review git diff b340a3d..HEAD (space after diff): cmd/sheets-fixture-preflight/main.go and main_test.go, Makefile fixture-preflight-release, gitignore and clarified spec notes. Stdlib-only preflight validates compiled unique stamp/runID, exact actual child origin/owner/SMTP/keys and socket, raw absolute-clean canary DB basename, rejects unsupported seed/addr/LISTEN_FDS, logs only paths+stamp, then exits without opening DB/socket/files. Candidate importgraph excludes fixture; no writer yet. Full make test passed incl race; focused no-created-file/negative/importgraph tests pass. Dirty-tree build refuses; clean target built arm64 observer stamped0b3cfae-fixture-preflight-sheets-preflight-localtest (local validation only; root picks deployment scopeID). Exact-head CI record /tmp/sheets-fixture-ci.json. Root verifies empty seedargv/log/current platformcontract before actual canary use; default/prod environment untouched. Explicit APPROVE or REQUEST CHANGES for preflight CODE only; no implicit writer/candidate/deployment approval. Assess no-secret/no-cross-tenant-write guarantees and actionable gaps. Production candidate remains1aca44c; inherited atomic review is separate.