Merge pull request 'ADR 0260: three standing reads, drop-in directories are no module's, the lists grow only in the open' (#215) from fix/0260-path-check-facts into main

This commit was merged in pull request #215.
This commit is contained in:
2026-10-08 14:27:19 +00:00
@@ -53,6 +53,16 @@ Two exceptions are written down beside the check:
- the cross-module reads that stood on the day the rule took `/etc` in. These may only go: there are
five, all the laptop model's module reading the power module's and the hotkey daemon's files.
> **Progressive insight — 2026-10-08.** Review of the check found two facts to correct, and one more
> part of the same rule. The record said there were five standing reads. There are three: all the
> laptop model's module reading the power module's moment file. The hotkey daemon's `triggers.d` is a
> drop-in directory, and a drop-in directory is no module's own. Any directory whose name ends in `.d`
> (`/etc/sysctl.d`, `/etc/systemd/system/<unit>.d`, `/etc/X11/xorg.conf.d`) is a place several modules
> each put their own file. Naming it reaches into nobody's state, and each file in it is its placer's.
> Neither list may grow unseen. The catalogue's check compares both lists with the base branch's copies
> and refuses a line the change adds, unless that line says `allow:` and why, so the reviewer sees each
> addition in the diff. The decision stands as written.
A path a container sees inside itself is the container's own. The check reads text, so it cannot see
a path built in code from pieces, read from a setting, or reached through a shell the module runs.