mathiasandClaude Sonnet 5.5 bd33a0a4e8 fix(watcher): park through the brain root, keep a note edited mid-resolve, honour only real fences (#205) ...

From the second independent review of #207:
- parkForReview now skips the delete when the note changed since it was read
  (an LLM call sits in that window; Syncthing can deliver a newer version)
- parked copies are created via brainfs (real dirs only, O_EXCL, no symlink
  following), so a planted raw/needs-review symlink cannot redirect or hide a
  note; this also removes the need for the guard allowlist entry added in
  1e14c56, which is reverted
- a '----' line no longer closes the proposal block
Each has a test that failed first and a mutant that fails it.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-20 06:21:25 +02:00

..

cmd

fix(watcher): never overwrite a parked note; a proposal cannot be forged or pre-empted; CRLF notes; wing dirs must be plain (#205)

2026-10-20 06:16:48 +02:00

internal

fix(watcher): park through the brain root, keep a note edited mid-resolve, honour only real fences (#205)

2026-10-20 06:21:25 +02:00

Dockerfile

fix(ci): allow ingestion Dockerfile to fetch internal gitea modules

2026-05-22 12:12:09 +02:00

go.mod

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

go.sum

fix(ingestion): bump mcp-chassis to v0.7.1; log auth rejections; label refused REST requests by route (#181)

2026-10-05 14:40:20 +00:00