mathiasandClaude Opus 5.5 4770f97ffd fix(symlinkguard): report and remove FIFOs, sockets and devices too (#179) (#190) ...

Scan reports special files (not regular, directory or symlink) in Result.Special, so the startup check refuses with a message naming them; Watch removes them through an os.Root after re-checking the type, and reports any it cannot remove (never as removed).

Fixes #179. Adversarial review: BLOCKED, BLOCKED, PASS. Flake on main tracked in #193.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Mathias <mthbqv@gmail.com>

2026-10-05 21:15:57 +00:00

..

api

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

audit

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

brain

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

brainfs

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

brainstore

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capture

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capturehttp

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

claim

feat(brain): validate the claim-property envelope on write (brain#21) (#102)

2026-08-22 08:58:34 +00:00

classification

fix(pipeline,classification): read the brain through brainfs (#157, slice 6) (#176)

2026-10-05 18:54:42 +00:00

claudewatcher

fix(claudewatcher): scrub credentials embedded in URL userinfo

2026-09-30 16:08:17 +02:00

embed

feat(brain): hybrid BM25 + pgvector retrieval (opt-in)

2026-05-18 23:11:25 +02:00

extract

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

frontmatter

fix(frontmatter): consolidate 3 independent fence-parsers into one (#139)

2026-09-23 13:07:32 +00:00

gitea

fix(gitea): WriteFile creates via POST, updates via PUT (real contents API)

2026-06-23 17:22:37 +02:00

graph

fix(search,graph): M4b wiki/entities/ → tier=knowledge

2026-05-25 18:49:37 +02:00

graphstore

feat(graph,graphstore): M2 parse tier+topic from frontmatter, persist via Upsert (infra#72)

2026-05-25 12:35:38 +02:00

graphsync

fix(graph,wiki): read the brain through brainfs (#157, slice 4) (#168)

2026-10-05 04:53:34 +00:00

llm

feat(brain): add Gemini as brain_answer's third LLM tier

2026-08-30 14:43:25 +02:00

mcp

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

metrics

feat(ingestion): expose Prometheus /metrics for brain query latency

2026-05-22 07:13:05 +02:00

notes

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

oauth

feat(brain-mcp): OAuth 2.0 client_credentials flow for claude.ai

2026-05-18 22:21:54 +02:00

pipeline

fix(pipeline,classification): read the brain through brainfs (#157, slice 6) (#176)

2026-10-05 18:54:42 +00:00

provenance

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

reranker

feat(brain_answer): Qwen3-Reranker cross-encoder filter (opt-in)

2026-05-18 22:55:46 +02:00

search

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

session

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

symlinkguard

fix(symlinkguard): report and remove FIFOs, sockets and devices too (#179) (#190)

2026-10-05 21:15:57 +00:00

textutil

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

vectorstore

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

watcher

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

webhook

fix(lint): check fmt.Fprintf errors in webhook handler (infra#190)

2026-07-09 08:29:39 +02:00

wiki

fix(graph,wiki): read the brain through brainfs (#157, slice 4) (#168)

2026-10-05 04:53:34 +00:00