kyle
7be4ed1d43
p2.5: redact reason/err for permit_restricted logs
...
Guard messages embed the hostname (resolve <host>, no addresses for
<host>). Restricted callers now log a coarse reason class and err=-.
Test dumps slog records and forbids the hostname anywhere in them.
docs: P3 review — fail-closed search, cache class, public dialer
2026-09-23 11:47:37 -07:00
kyle
2d376d3ad1
docs: P3 spec — search API, sources, cache, bake-off
...
No code. Default-on sources left to the bake-off. Restricted-caller
paid-engine question left open for Kyle.
2026-09-23 11:43:03 -07:00
kyle
85113f9c0b
p2.5: log host=- for permit_restricted callers
...
Scrape, fetch, refused, fetch-failed, and internal lines redact the
host for callers in context.permit_restricted. final_url stays in the
response. Test captures slog records, not the journal.
2026-09-23 11:40:45 -07:00
kyle
e36da19f57
p2.4: restricted workspace for permitted callers
...
guardian-star context is allowed only when the authenticated caller is in
permit_restricted and mapped to that workspace. Fleet callers remapped to it
still refuse. CLI client.toml: SIFT_CLIENT, then $HERMES_HOME/sift, then ~/.config.
2026-09-23 08:33:58 -07:00
kyle and Claude Opus 5.5
505e113b64
docs: P2 scope line matches §2a caches
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:47:24 -07:00
kyle and Claude Opus 5.5
9f8d9f4f13
docs: P2 — bounded in-sift queue; digest + chunk-embedding caches pulled forward
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:47:09 -07:00
kyle and Claude Opus 5.5
cb0cb83fb9
docs: P2 spec — digest (bounded, streaming, thinking off), Honcho context (guardian-star refused), recover ladder
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 23:43:40 -07:00
kyle and Claude Opus 5.5
d404657820
docs: P1.1 dynamic self-IP deny (DDNS/trace discovery, keep previous, atomic swap)
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 22:06:20 -07:00
kyle and Claude Opus 5.5
6cb206fb27
docs: P1 spec — clean fetch, auth, CLI, contract facts from firecrawl-py 4.17.0, talos wiring
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:38:29 -07:00
kyle and Claude Opus 5.5
3b41d6ffbc
plan: UA decided — default sift/<ver>, config override, measure bot-blocks
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:28:04 -07:00
kyle and Claude Opus 5.5
7d4f090a12
skill: sift as the explicit first step for fetch/search; plan §4.3 CLI client, --recover, UA policy
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:25:57 -07:00
kyle and Claude Opus 5.5
1e915ce715
plan: Makefile for non-Nix hosts (source of truth for build flags)
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:15:29 -07:00
kyle and Claude Opus 5.5
e9aea1829e
plan: Go instead of Python (Kyle's preference); dialer-Control SSRF check, gojq
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:05:59 -07:00
kyle and Claude Opus 5.5
94876864e5
sift: implementation plan
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:00:00 -07:00
kyle
