223 Commits

Author	SHA1	Message	Date
lilleman	217a36252e	Keep a URL config value out of the boot error that rejects it	2026-10-31 13:48:43 +01:00
lilleman	5be561c4ba	Answer stability round 1: 0 🔴, 3 🟡 (0 misread); the tests quote each non-secret value and run one case per type, the config.ts URL leak is filed as item 55	2026-10-31 13:43:04 +01:00
lilleman	8f7bc59b38	Keep a secret setting's raw value out of the boot error that rejects it	2026-10-31 13:38:27 +01:00
lilleman	622059101f	Record the comprehension check: PR #200 ruled same, scored 6.50 and 6.25; filed items 46-54	2026-10-31 13:31:41 +01:00
lilleman	4cb21d8909	Link the admin's recovery-code notice to the flow the code was minted on	2026-10-31 13:05:06 +01:00
lilleman	ccb4d32d39	Answer prose round 1: 0 🔴, 4 🟡 (0 misread); comments say what the forms post where, restating test comments go	2026-10-31 12:59:28 +01:00
lilleman	ead604f49d	Accept a verification or recovery code pasted with whitespace around it	2026-10-31 12:41:11 +01:00
lilleman	d0e1de96b8	Show which filter segment or chip is selected and focused without :has()	2026-10-31 12:19:21 +01:00
lilleman	7539f8ec0d	Answer product-owner round 1: 0 🔴, 3 🟡 (0 misread); a media feature the floor lacks passes, plugins/ is checked, the no-:has filter state is filed as item 44	2026-10-31 12:13:32 +01:00
lilleman	7ff8140e07	Fail the gate on a stylesheet feature the browser floor lacks, unless an @supports guards it	2026-10-31 11:52:17 +01:00
lilleman	b6afdf1ecc	Push auto-release tags as renovate-bot so release.yml fires, and give the Docker Hub page its short description	2026-10-31 11:12:23 +01:00
lilleman	ad812e17c2	Refuse a group change that would lock the acting admin out, and title a read-only user page View user	2026-10-31 10:47:47 +01:00
lilleman	71b12a6c0a	Split src/http/app.test.ts into one file per concern, and reset the reading-cost trend	2026-10-31 10:35:08 +01:00
lilleman	a7135763bb	Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); scripts a plugin links stay unversioned until item 43, assetHref listed as reserved, the per-render stat goes to the architect	2026-10-31 10:16:05 +01:00
lilleman	6358858103	File the rising reading cost as item 42	2026-10-31 10:00:52 +01:00
lilleman	3d757d4726	item-34 - Serve every /public/ asset under a content-versioned URL with an immutable Cache-Control	2026-10-31 10:00:03 +01:00
lilleman	b863ea26d9	Remove the shipped items 4, 7, 22 and 39 from the plan, and file the Edit user heading and the one-call Keto save	2026-10-31 09:48:49 +01:00
lilleman	76995008eb	Remove the shipped item 20 from the plan	2026-10-31 09:15:12 +01:00
lilleman	dfd26ada34	File the absolute return_to dropped by a chosen locale as item 39	2026-10-31 09:11:39 +01:00
lilleman	15c5a09667	Remove the shipped item 21 from the plan	2026-10-31 09:01:42 +01:00
lilleman	14c09a76c0	Re-score item 32: L 4, E 2, I 2, S 7, so it ships alone	2026-10-31 08:51:49 +01:00
lilleman	352de29013	Retire shell-context and render the dashboard from ctx.chrome	2026-10-31 08:37:45 +01:00
lilleman	520d2c928d	Visual E2E at five viewports, typecheck e2e-tests in the gate, drop unused icons	2026-10-31 08:20:16 +01:00
lilleman	1905d2c310	Add a README glossary and intended scale; correct the TOKENS comment	2026-10-31 02:14:39 +01:00
lilleman	0f20b386e2	File the stale TOKENS comment in the plan	2026-10-31 02:04:47 +01:00
lilleman	2ab482e774	Keep the mobile nav reachable on engines without :has(), and fix the stylesheet header	2026-10-31 01:49:13 +01:00
lilleman	f46e97383e	File the stale styles.css header comment in the plan	2026-10-31 01:44:14 +01:00
lilleman	ce69269ae4	Remove the shipped items 27, 29, 31 and 35 from the plan	2026-10-31 01:43:40 +01:00
lilleman	a2edfbee0c	File the mobile nav's :has() dependency in the plan	2026-10-31 01:25:02 +01:00
lilleman	e9a7c0e726	Answer stability round 1: 0 🔴, 2 🟡 (0 misread); explain the failure correctly and test each stylesheet	2026-10-31 01:07:30 +01:00
lilleman	7e3e8acb28	Give every palette colour a hex value an engine without oklch can read	2026-10-31 01:00:42 +01:00
lilleman	eed1050c08	File versioned immutable assets for 0.4.21 and drop the page-cache question	2026-10-31 00:56:04 +01:00
lilleman	6f11a9928b	File the decision on caching public pages	2026-10-30 21:34:08 +01:00
lilleman	1dfc6aac3a	Set Cache-Control on every rendered page, and record the CSRF token's unbinding	2026-10-30 21:28:14 +01:00
lilleman	0c0a3bc905	Move the macOS check to 0.5.0	2026-10-30 21:22:51 +01:00
lilleman	935674bc49	Record the browser floor and file what breaks below it	2026-10-30 21:21:35 +01:00
lilleman	e8dbb2a809	Record answers to the 0.4.21 questions	2026-10-30 21:02:10 +01:00
lilleman	77b7e6143f	Answer stability round 1: 0 🔴, 1 🟡 (0 misread); file the scheduling example's inset	2026-10-30 20:50:33 +01:00
lilleman	53e996394f	Add a goal for users of the building blocks, and plan todo.md as a scored table	2026-10-30 20:45:24 +01:00
lilleman	fb464acf54	Plan publishing every release to Docker Hub, with a short description	2026-10-18 11:37:56 +02:00
lilleman	9912dd64f1	Offer a signed-in visitor the page they can reach, and say where the assignee join belongs	2026-09-03 17:22:49 +02:00
lilleman	fa7cad1d65	Declare plugin settings in the manifest, resolve them from the environment	2026-08-23 13:17:03 +02:00
lilleman	d2211cf75a	Refuse a throwaway plugin storage secret in bootstrap, before any role is created	2026-08-18 23:24:34 +02:00
lilleman	c7013be2f0	Give a plugin a Postgres database of its own	2026-08-18 23:12:13 +02:00
lilleman	9ff8f57509	Todo: note the code-field hint landed, the paste fix did not	2026-08-18 22:07:21 +02:00
lilleman	552cc6bd97	Todo: record the flow-POST proxy findings for the verification-code fix	2026-08-18 22:00:31 +02:00
lilleman	52a3228503	Todo: record the manifest-over-.env decision for plugin config	2026-08-18 21:55:35 +02:00
lilleman	82af77356f	Follow symlinked plugin folders, and keep a plugin .npmrc out of the image	2026-08-18 07:49:51 +02:00
lilleman	453058c67b	Refuse a shadowing barrel copy, and record the packaging contract	2026-08-17 22:34:56 +02:00
lilleman	af974cfa36	Let a plugin carry its own package.json and npm dependencies	2026-08-17 22:23:53 +02:00