• Joined on 2026-03-27
mathias created branch fix/guard-special-179 in mathias/hyperguild 2026-10-05 20:42:45 +00:00
mathias pushed to fix/guard-special-179 at mathias/hyperguild 2026-10-05 20:42:45 +00:00
f1f975d281 fix(symlinkguard): report and remove FIFOs, sockets and devices too (#179)
mathias created pull request mathias/hyperguild#189 2026-10-05 20:39:58 +00:00
fix: creating and generated writes go through the brain root (#188, #158 part A)
mathias pushed to fix/create-regular-188 at mathias/hyperguild 2026-10-05 20:39:42 +00:00
138d6e2545 fix: generated and promoted writes go through the brain root (#188, #158)
mathias created branch fix/create-regular-188 in mathias/hyperguild 2026-10-05 20:35:20 +00:00
mathias pushed to fix/create-regular-188 at mathias/hyperguild 2026-10-05 20:35:20 +00:00
41b7105b31 fix(brainfs,api): PutRegular/AppendRegular; brain_write creates through the brain root (#188)
mathias closed issue mathias/hyperguild#157 2026-10-05 20:17:47 +00:00
SECURITY: symlinks anywhere in the Syncthing-shared brain dir are followed by search, vectorstore, context and graph readers
mathias commented on issue mathias/hyperguild#157 2026-10-05 20:17:47 +00:00
SECURITY: symlinks anywhere in the Syncthing-shared brain dir are followed by search, vectorstore, context and graph readers

Done. Every brain reader in the server now goes through brainfs. Slice 5b, DetectTunnels (PR #186, fixes #174), is merged and live: the pod restarted cleanly and the graph backfill indexed…

mathias pushed to main at mathias/hyperguild 2026-10-05 20:17:38 +00:00
ddd4bdc2ac fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173) (#187)
mathias merged pull request mathias/hyperguild#187 2026-10-05 20:17:37 +00:00
fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)
mathias closed issue mathias/hyperguild#173 2026-10-05 20:17:37 +00:00
Writes follow a static intermediate in-brain directory symlink (brain_update, brain_tunnel, session_log)
mathias closed issue mathias/hyperguild#174 2026-10-05 20:12:45 +00:00
DetectTunnels blocks on a FIFO under wiki/, hanging brain_update and brain_write
mathias pushed to main at mathias/hyperguild 2026-10-05 20:12:45 +00:00
1fff54769d fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b) (#186)
mathias merged pull request mathias/hyperguild#186 2026-10-05 20:12:45 +00:00
fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b)
mathias pushed to main at mathias/hyperguild 2026-10-05 19:36:32 +00:00
0c3e82ca0a test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171) (#172)
mathias closed issue mathias/hyperguild#171 2026-10-05 19:36:31 +00:00
#157 slices 1–3: per-caller tests with in-brain symlink targets (search, hydrate, vectorstore, context excerpt, ReadNote)
mathias merged pull request mathias/hyperguild#172 2026-10-05 19:36:31 +00:00
test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)
mathias commented on pull request mathias/hyperguild#187 2026-10-05 19:13:05 +00:00
fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)

pr-gatekeeper round 2: PASS (head 9a288be). No merge: risk/high, so Mathias approves.

mathias pushed to fix/write-dir-redirect-173 at mathias/hyperguild 2026-10-05 19:08:49 +00:00
9a288bea6f fix(brainfs,session): clean paths only; session logs open through the brain root (#173)
mathias commented on pull request mathias/hyperguild#186 2026-10-05 19:06:51 +00:00
fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b)

Gatekeeper review, round 2: PASS (head 1c9c218)

Both round-1 blockers are fixed, and I checked each by execution. The round-1 non-blocking items are fixed too. Since da020d1 the only…