jschoubben
0 Followers · 0 Following
  • Joined on 2020-06-18
Repositories
4
 Projects Packages Public Activity Starred Repositories
jschoubben pushed to fix/xdg-user-dirs-trusted-again at novox/mesh-catalog 2026-10-09 10:40:09 +00:00
a588eb5983 xdg: keep the folders file trusted, so only the terminal sets the folders (hq issue 346)
jschoubben created branch fix/xdg-user-dirs-trusted-again in novox/mesh-catalog 2026-10-09 10:40:09 +00:00
411049a655 Ask an acknowledgement apart from an approval, change every kept ask by compare-and-set, and rehearse rather than drill (hq ADR 0259, review M1/L2/L3/L7)
6348b20e77 Say loudly when a condition that needs the operator could not be asked on any channel (hq ADR 0259)
a7b8673acc Add drill: an ask the operator starts at the controller's terminal, whose approval performs nothing and is recorded (hq ADR 0259)
14b5238bbf Compose and raise the bus of the lab's proof of the operator's answers, as this controller would (hq ADR 0259)
9f4f551335 Bind each asked option to the exact act, and perform only that act on its warrant (hq ADR 0259 §6)
Compare 24 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-controller 2026-10-09 10:38:18 +00:00
0c828fbf96 Let root-free take its machines as a list, as the router names them
54bbf7e76b Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)
470f621a1c Refuse a module of its own account running as the node's operator or agent account (hq ADR 0259 §8, review L4)
5f6784d03f Raise agent-root where who can become root is not measured, so the router never reads a missing measure as a no (hq ADR 0259 §8)
0383724be2 Count the login shell where its execute is served, not where its seat is held (hq ADR 0268)
Compare 17 commits »
jschoubben pushed to feat/cli-local-protocol at novox/mesh-sdk 2026-10-09 10:37:51 +00:00
a5a040c904 go/cli: an outcome not known is not a refusal; the Go binding is checked in the Go toolchain
e168b60159 Pin the node-engine at #61's head, which reads the homes in one order
jschoubben pushed to feat/an-agent-account-never-becomes-root at novox/mesh-host 2026-10-09 10:36:59 +00:00
1c61b72f35 Read the homes in one order, so their test does not depend on a map's
79f31ca113 Issue 346: a setting a verb may set is pasted raw into its file, so an untrusted file is an injection point
jschoubben pushed to feat/picom-backend-and-damage-settings at novox/mesh-catalog 2026-10-09 10:35:38 +00:00
ca1bd18de6 picom: keep the configuration trusted, so only the terminal sets the backend (review of #157)
jschoubben pushed to feat/betterbird-module at novox/mesh-catalog 2026-10-09 10:35:38 +00:00
2d2c694306 betterbird: know a composer by its instance alone, and bound a restart's worst case (review of #155)
cdf1ad85fb telegram: say the desktop client's gap is a known one the router does not enforce (hq issue 344)
01bb661dcc desk-channel: run as its own account, and show a link's code only where a notifier heard unpaused will show it, kept in no history
c14222103c dunst: keep what is shown once out of the history, and say whether notifications are paused
4d36997e61 telegram: take a tap only on a message showing the words this channel put there, and say where an approval from Telegram means something
82c522ed77 telegram, desk-channel: move to mesh-sdk 7690299, whose digests are over named fields (the review of 2026-10-09)
Compare 10 commits »
d4d25e90be telegram: say the desktop client's gap is a known one the router does not enforce (hq issue 344)
jschoubben pushed to decision/asks-answered-on-any-channel at novox/hq 2026-10-09 10:30:33 +00:00
cfbbdd6efb ADR 0259: after the review of 2026-10-09 — root-free as a positive measure, warrants under ids nobody can guess, canonical digests, the code shown to a person or not at all, unlinking bound to the account and possible in the first hour, break-glass named, give as built; the operator's desktop client and the controller's write to the router's state stated as known gaps (issue 344)
9632278e03 Count the quiet after a restart from when the controller first saw the search pending
506fe68431 Do not raise agent-can-become-root while the first setuid search is still within its bound
80ad37ec16 Register only from a protected trunk of the same repository, and mark the serving controller never the terminal
e7461755ca Put back on a failed gate only a build of the module's own repository
f392c1847f Register a module only from the repository the catalogue builds it from
Compare 6 commits »
80ad37ec16 Register only from a protected trunk of the same repository, and mark the serving controller never the terminal
e7461755ca Put back on a failed gate only a build of the module's own repository
f392c1847f Register a module only from the repository the catalogue builds it from
d951f22c04 Pin the node-engine at the head whose setuid search runs to its own bound
Compare 4 commits »
cb907d5810 ADR 0266: an agent can merge its own pull request, and the restart condition's quiet counts on the controller's clock
ff648ad32b Send the path gitea_api judged, keep a pull request's base, merge only into a guarded branch, and delete only the tools' own idle repositories
jschoubben pushed to feat/picom-backend-and-damage-settings at novox/mesh-catalog 2026-10-09 10:25:56 +00:00
73f2962bab picom: the backend and damage tracking are each machine's settings (hq issue 345)
jschoubben created branch feat/picom-backend-and-damage-settings in novox/mesh-catalog 2026-10-09 10:25:56 +00:00