Review: FAIL — needs-rework
static/_headers is correct and needs no change. Both blocking defects are in
TODO.md; the fix is an edit plus an amend.
Blocking
**1. TODO.md,…
Implementation plan, on branch fix-json-banner off main.
1. The design question — extend bannerSuppressedInArgs, do not move the banner.
Moving the banner after parsing costs more…
Implemented in sneak/lora.vegas#37 (branch
issue-14-security-headers, one commit on top of main).
static/_headers added with Strict-Transport-Security,…
Implementation plan, following the Implementation brief above.
Working on next in a private clone; this lands as a fourth commit on the open [PR #34](https://git.eeqj.de/sneak/prompts/pulls/…
Diagnosis confirmation
The captured finding on sneak/rgoue#36 holds, and I reproduced it rather than assuming it.
Instrumenting driveUntilDone to report the turns…
Manager note. Fourth review verdict PASS. Label set to merge-ready,
assigned to sneak for merge. Reviewer's results:
sneak/AutistMask#185 (comment)
##…
Implementation plan
Re-confirmed the "before" state from the comment above with
curl -sSI https://lora.vegas/ just now (2026-08-09): the live response carries
`x-content-type-options:…
Review (fourth reviewer, fresh; head 82c40e0): PASS
Scope as instructed: verify the three reworked items from sneak/AutistMask#185 (comment) by execution, p…
Second-pass findings folded in. 533fc61 -> fd78aeb, amended and force-pushed with --force-with-lease; origin/next verified at 533fc61 immediately before the push, and 51c3945 /…
Scope addition — one more item lands with this, from the PR #107 review.
AGENTS.md policy 9 (lines 86-87) is now false. It states the…