mathiasandClaude Opus 5.5 db18785bfc test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188) ...

Review round 1 on PR #189 (three tests stayed green with their guard
removed):
- TestEditRefusesANoteBehindASymlinkedDirectory had no .git, so Edit
  refused "not the sync source" before any path check. It now has one,
  plus a positive control.
- AppendRegular's unclean-path case was refused by a final symlink, not
  cleanRel. New test where ".." after a symlinked dir resolves to a real
  file, for AppendRegular and PutRegular.
- brainfs.Remove had no test; new one (refuses behind a symlinked dir,
  removes a final link but never its target, positive control).

Also: promote/reject create with O_EXCL (new brainfs.CreateRegular), so a
note that appears after the collision check is never overwritten;
gofmt fixes in provenance.go and wiki/log.go; dead wingDir and
putBrainFile removed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-05 22:57:26 +02:00

..

api

test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188)

2026-10-05 22:57:26 +02:00

audit

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

brain

test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188)

2026-10-05 22:57:26 +02:00

brainfs

test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188)

2026-10-05 22:57:26 +02:00

brainstore

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capture

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capturehttp

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

claim

feat(brain): validate the claim-property envelope on write (brain#21) (#102)

2026-08-22 08:58:34 +00:00

classification

fix(pipeline,classification): read the brain through brainfs (#157, slice 6) (#176)

2026-10-05 18:54:42 +00:00

claudewatcher

fix(claudewatcher): scrub credentials embedded in URL userinfo

2026-09-30 16:08:17 +02:00

embed

feat(brain): hybrid BM25 + pgvector retrieval (opt-in)

2026-05-18 23:11:25 +02:00

extract

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

frontmatter

fix(frontmatter): consolidate 3 independent fence-parsers into one (#139)

2026-09-23 13:07:32 +00:00

gitea

fix(gitea): WriteFile creates via POST, updates via PUT (real contents API)

2026-06-23 17:22:37 +02:00

graph

fix(search,graph): M4b wiki/entities/ → tier=knowledge

2026-05-25 18:49:37 +02:00

graphstore

feat(graph,graphstore): M2 parse tier+topic from frontmatter, persist via Upsert (infra#72)

2026-05-25 12:35:38 +02:00

graphsync

fix(graph,wiki): read the brain through brainfs (#157, slice 4) (#168)

2026-10-05 04:53:34 +00:00

llm

feat(brain): add Gemini as brain_answer's third LLM tier

2026-08-30 14:43:25 +02:00

mcp

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

metrics

feat(ingestion): expose Prometheus /metrics for brain query latency

2026-05-22 07:13:05 +02:00

notes

test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188)

2026-10-05 22:57:26 +02:00

oauth

feat(brain-mcp): OAuth 2.0 client_credentials flow for claude.ai

2026-05-18 22:21:54 +02:00

pipeline

fix(pipeline,classification): read the brain through brainfs (#157, slice 6) (#176)

2026-10-05 18:54:42 +00:00

provenance

test: pin the edit symlink refusal, AppendRegular's clean check and Remove (#188)

2026-10-05 22:57:26 +02:00

reranker

feat(brain_answer): Qwen3-Reranker cross-encoder filter (opt-in)

2026-05-18 22:55:46 +02:00

search

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

session

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)

2026-10-05 20:17:37 +00:00

symlinkguard

fix(symlinkguard): deliver alerts beside the scan, not inside it (#164) (#180)

2026-10-05 14:48:16 +00:00

textutil

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

vectorstore

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)

2026-10-05 19:36:31 +00:00

watcher

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

webhook

fix(lint): check fmt.Fprintf errors in webhook handler (infra#190)

2026-07-09 08:29:39 +02:00

wiki

fix: generated and promoted writes go through the brain root (#188, #158)

2026-10-05 22:39:41 +02:00