mathiasandClaude Opus 5.5 f969d97c16 test(notes): in-brain symlink target for ReadScoped, the sixth slice 1-3 caller ...

Review of #172 (finding 1): notes.ReadScoped (brain_read, slice 2)
had only outside-brain targets, which os.Root refuses on its own, so a
reader bypassing brainfs's Lstat/SameFile stayed green. Adds a static
in-brain link, a positive control and an in-brain swap race.
Flip: replacing ReadRegularMax with os.OpenRoot().ReadFile turns it
red 3/3.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-05 07:20:59 +02:00

..

api

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)

2026-10-05 07:02:41 +02:00

audit

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

brain

fix(brain): a one-word tunnel title must match the prose case-exactly

2026-09-17 00:08:40 +02:00

brainfs

test(search): name the in-brain swap-race tests after what they sample

2026-10-05 07:19:27 +02:00

brainstore

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capture

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

capturehttp

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

claim

feat(brain): validate the claim-property envelope on write (brain#21) (#102)

2026-08-22 08:58:34 +00:00

classification

feat(classification): data-sensitivity taxonomy + per-wing/repo tags (#50)

2026-06-22 22:42:05 +02:00

claudewatcher

fix(claudewatcher): scrub credentials embedded in URL userinfo

2026-09-30 16:08:17 +02:00

embed

feat(brain): hybrid BM25 + pgvector retrieval (opt-in)

2026-05-18 23:11:25 +02:00

extract

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

frontmatter

fix(frontmatter): consolidate 3 independent fence-parsers into one (#139)

2026-09-23 13:07:32 +00:00

gitea

fix(gitea): WriteFile creates via POST, updates via PUT (real contents API)

2026-06-23 17:22:37 +02:00

graph

fix(search,graph): M4b wiki/entities/ → tier=knowledge

2026-05-25 18:49:37 +02:00

graphstore

feat(graph,graphstore): M2 parse tier+topic from frontmatter, persist via Upsert (infra#72)

2026-05-25 12:35:38 +02:00

graphsync

fix(graph,wiki): read the brain through brainfs (#157, slice 4) (#168)

2026-10-05 04:53:34 +00:00

llm

feat(brain): add Gemini as brain_answer's third LLM tier

2026-08-30 14:43:25 +02:00

mcp

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)

2026-10-05 07:02:41 +02:00

metrics

feat(ingestion): expose Prometheus /metrics for brain query latency

2026-05-22 07:13:05 +02:00

notes

test(notes): in-brain symlink target for ReadScoped, the sixth slice 1-3 caller

2026-10-05 07:20:59 +02:00

oauth

feat(brain-mcp): OAuth 2.0 client_credentials flow for claude.ai

2026-05-18 22:21:54 +02:00

pipeline

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

provenance

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

reranker

feat(brain_answer): Qwen3-Reranker cross-encoder filter (opt-in)

2026-05-18 22:55:46 +02:00

search

test(search): name the in-brain swap-race tests after what they sample

2026-10-05 07:19:27 +02:00

session

style: apply gofmt

2026-09-05 12:40:34 +02:00

startupretry

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

symlinkguard

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

textutil

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

vectorstore

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)

2026-10-05 07:02:41 +02:00

watcher

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

webhook

fix(lint): check fmt.Fprintf errors in webhook handler (infra#190)

2026-07-09 08:29:39 +02:00

wiki

fix(graph,wiki): read the brain through brainfs (#157, slice 4) (#168)

2026-10-05 04:53:34 +00:00