kyle 7be4ed1d43 p2.5: redact reason/err for permit_restricted logs ...

Guard messages embed the hostname (resolve <host>, no addresses for
<host>). Restricted callers now log a coarse reason class and err=-.
Test dumps slog records and forbids the hostname anywhere in them.

docs: P3 review — fail-closed search, cache class, public dialer

2026-09-23 11:47:37 -07:00

..

api

p2.5: redact reason/err for permit_restricted logs

2026-09-23 11:47:37 -07:00

auth

p2.1: honcho-embed, wayback http/204, memento, keys owner

2026-09-23 02:41:46 -07:00

clean

p1: cap jq output, log refusals, fail contract without SDK

2026-09-22 22:02:38 -07:00

config

p2.4: restricted workspace for permitted callers

2026-09-23 08:33:58 -07:00

dcache

p2.3: pin chunk 0, hybrid score, keep question on retry

2026-09-23 03:18:29 -07:00

digest

p2.3: pin chunk 0, hybrid score, keep question on retry

2026-09-23 03:18:29 -07:00

fetch

p2: fence document tags, atomic fleetctx, harden workspace

2026-09-23 00:01:04 -07:00

fleetctx

p2.4: restricted workspace for permitted callers

2026-09-23 08:33:58 -07:00

guard

p1.1: dynamic self-IP deny (DDNS/trace, keep previous, atomic swap)

2026-09-22 22:59:08 -07:00

recover

p2.1: honcho-embed, wayback http/204, memento, keys owner

2026-09-23 02:41:46 -07:00

selfip

p1.1: note IPv4-only self-IP assumption

2026-09-22 23:01:19 -07:00

server

p0: skeleton, dialer-Control URL guard, flake, Makefile

2026-09-22 21:26:13 -07:00