3 Commits

Include renames

Author	SHA1	Message	Date
mathiasandClaude Opus 5.5	f65f0b7826	fix(audit): each ntfy alert source sends its own title (#163) ... Every alert was titled "brain-capture audit degraded", including the symlink tripwire's and governance-edit alerts. NtfyNotifier.WithTitle returns a titled copy (nil stays nil); buildNotifier(getenv, title) is called per source: capture audit (unchanged title), "brain symlink tripwire", "brain governance edit". Tests assert the Title header. Fixes #163. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 23:28:38 +02:00
mathias	c986df6799	feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160) ... Co-authored-by: Mathias <mthbqv@gmail.com>	2026-10-03 19:34:19 +00:00
mathiasandClaude Opus 4.8	77f5e06d6b	feat(audit): DegradingSink + durable buffer + loki/ntfy + reconcile (#54) ... The classification-aware I5 audit path (§4.4): - DegradingSink.Reserve: central up → AuditCentral; central down + confidential → refuse (no buffer); central down + internal/public + buffer writable → AuditBuffered; central down + buffer unwritable → floor refuse. Record executes the reserved outcome and, when buffered, fires an ntfy alert. - FileBuffer: durable JSONL buffer that survives process restart; Confirm rewrites the file without a record, so a buffered record is cleared ONLY after its central write is confirmed. - LokiCentral: /ready probe + /loki/api/v1/push (full audit entry as the structured line). NtfyNotifier: degraded-state alerts; token only in the auth header, never logged (regression-tested). - Reconcile + StartReconcile: replay buffered records to central on recovery, confirm-then-clear per record; a failed push keeps the record buffered (no loss). SlogSink updated to the two-phase shape (always central, never fails) — the default when no loki endpoint is set. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-22 23:54:24 +02:00