kyle and Claude Opus 5.5
505e113b64
docs: P2 scope line matches §2a caches
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:47:24 -07:00
kyle and Claude Opus 5.5
9f8d9f4f13
docs: P2 — bounded in-sift queue; digest + chunk-embedding caches pulled forward
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:47:09 -07:00
kyle and Claude Opus 5.5
cb0cb83fb9
docs: P2 spec — digest (bounded, streaming, thinking off), Honcho context (guardian-star refused), recover ladder
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:43:40 -07:00
kyle
0598c8985b
p1.1: note IPv4-only self-IP assumption
...
Trace via 1.1.1.1 never learns a delegated v6 prefix.
2026-09-22 23:01:19 -07:00
kyle
447842f860
p1.1: dynamic self-IP deny (DDNS/trace, keep previous, atomic swap)
...
Discover WAN via ddns:<host> then trace:<url> before listen. Persist to
self_ip.json. Previous addresses stay denied for keep_previous. Failure
keeps the last known set. /healthz reports age and source.
2026-09-22 22:59:08 -07:00
kyle
dca635fb62
p1: vendorHash = null when vendor/ is committed
...
buildGoModule refuses a hashed fetch if vendor/ exists. Keep vendor/;
the check path already uses GOPROXY=off GOFLAGS=-mod=vendor.
2026-09-22 22:27:24 -07:00
kyle
fac1462e7b
p1: ExecStart must invoke sift serve
...
P1 split the binary into subcommands. Without `serve`, the unit exits 2
on `unknown command`.
2026-09-22 22:11:28 -07:00
kyle and Claude Opus 5.5
d404657820
docs: P1.1 dynamic self-IP deny (DDNS/trace discovery, keep previous, atomic swap)
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 22:06:20 -07:00
kyle
8e3a6cd339
p1: cap jq output, log refusals, fail contract without SDK
...
jq results are bounded (10k items / output cap) and return 400 when
exceeded. 401/403 log caller, host, and reason. make contract exits 1
unless firecrawl-py is present (SIFT_CONTRACT_SKIP_SDK=1 to skip).
2026-09-22 22:02:38 -07:00
kyle
9444a35322
p1: /v2/scrape, /v1/fetch, auth, CLI, contract tests
...
Single Fetcher.Fetch on the Guard that holds DenyPrefixes. skipTlsVerification
is ignored. No 502. keys add writes the secret only to --out. Release binary
has no -test-allow-prefix.
2026-09-22 21:54:01 -07:00
kyle and Claude Opus 5.5
6cb206fb27
docs: P1 spec — clean fetch, auth, CLI, contract facts from firecrawl-py 4.17.0, talos wiring
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:38:29 -07:00
kyle
099b94979c
p0: IANA special-purpose deny table, extra deny prefixes
...
Block 6to4/Teredo/NAT64-local/site-local/benchmarking/reserved
ranges from the IANA registries (families, not decoded embeds).
Guard.DenyPrefixes / -deny-prefix covers hairpin WAN /32s; home
addresses stay on-box, not in git. Control is tcp/tcp4/tcp6 only.
2026-09-22 21:33:52 -07:00
kyle and Claude Opus 5.5
3b41d6ffbc
plan: UA decided — default sift/<ver>, config override, measure bot-blocks
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:28:04 -07:00
kyle
2607d56e4c
p0: skeleton, dialer-Control URL guard, flake, Makefile
...
Go service with /healthz, SSRF guard (parse + resolve-all + Control),
exhaustive tests, NixOS module, and Makefile as source of truth for
build flags. nix flake check runs make test lint.
2026-09-22 21:26:13 -07:00
kyle and Claude Opus 5.5
7d4f090a12
skill: sift as the explicit first step for fetch/search; plan §4.3 CLI client, --recover, UA policy
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:25:57 -07:00
kyle and Claude Opus 5.5
1e915ce715
plan: Makefile for non-Nix hosts (source of truth for build flags)
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:15:29 -07:00
kyle and Claude Opus 5.5
e9aea1829e
plan: Go instead of Python (Kyle's preference); dialer-Control SSRF check, gojq
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:05:59 -07:00
kyle and Claude Opus 5.5
94876864e5
sift: implementation plan
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:00:00 -07:00