amadan
Record workbook and device revocation review candidates
1 file changed,
+36
−0
implementation/overnight-2026-09-07.md+36 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index cb7e1e7..e9eb120 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -408,3 +408,39 @@ Full review is retained there and posted to suite discussion 5. |
| /tmp/oficina-files-db-identity-review/dev-live-preflight.json and |
| prod-live-preflight.json. Production ownership remains unresolved; |
| preserve its existing mapped catalog and service. |
| + |
| +## Checkpoint at 00:02 Dublin, 2026-09-08 |
| + |
| +- Home browser driver finalf94d690 is clean with actual CI and full local |
| + browser/race gates passing. Real regressions reproduced redirected-version |
| + acceptance and20/7 outgoing sign-in requests under redirects/repeats; corrected |
| + tests observe at most4. Cancellation observes Chromium descendants exit. |
| + Third-host redirect refusal has an independent browser barrier, so it does |
| + not prove sensitivity of the explicit origin guards; no leak reproduced. |
| + Home14 records this limit. No live mailbox actions. |
| +- Sheets55e98af preserves synthetic workbook fixtures and real import/export |
| + tests: later worksheets disappear and unsupported formulas there escape |
| + validation before partial publication. This is an existing documented |
| + first-worksheet limitation, not a newly alleged promise of whole-workbook |
| + support. Two readiness regressions intentionally fail; no release/green claim. |
| + Adjacent all-worksheet import design depends on reachable tabs/exportd8fc99f; |
| + cross-tab calculation remains separately unfinished. Sheets23 records evidence. |
| +- Keymail freshmain45c1a68 still has no device-token revocation. Draft7d0b3b6 |
| + proposes scoped listing and credential-row deletion with additive public IDs, |
| + transactional actor revalidation and no self-revocation. Root caught soft |
| + deletion reviving credentials under old code; revised design fixes that. |
| + Independent Codex read found no narrow design blocker. Regression intentionally |
| + fails at missing ID; actual old/new-binary proof and backend are not built. |
| + Token revocation does not erase client-held keys/mail or revoke Home/OAuth. |
| + keymail/keymail2 records exact evidence and required collision/routing tests. |
| +- Fable timer remains01:51 Dublin, now10 jobs. Additions: Home theme6e5f715, |
| + Home driverf94d690, Keymail design7d0b3b6 and combined Sheets tabs/import. |
| + Combined Sheets review requires distinct design verdicts, three exact clean |
| + worktrees and32 file hashes. Runner now checks secondary sources and artifacts; |
| + independent local refusal check proves stale head/artifact prevents model start. |
| + New design jobs use separate named sessions. Runtime ceiling120min, no automatic |
| + merge/deploy and no review verdict inferred from queueing. |
| +- Meet owner reached revision7f467cd9 with round6 acceptance and two P3 corrections. |
| + Root asked owner to cite the remaining written-form approval gate against the |
| + existing Go-ahead before holding slice1. Existing ownership remains intact; |
| + no Meet implementation/live media completion is claimed. |