Sequencing decision, resolving the tension in the "Out of scope" section above.
The DoD requires the suite to be shown failing and then passing, but a PR whose suite is red cannot land. Rather…
STOP LIFTED — this issue is unblocked and ready to work.
sneak has ruled on #81: the unencrypted manifest's plaintext timestamps
and per-blob size profile are an **accepted, previously…
test/integration/live-login.ts
Closing per sneak's ruling: option 3. The unencrypted manifest's
backup timestamps and per-blob size profile are an accepted, previously
made design decision — not a defect, and not open…
test/integration/live-login.ts
Decided by @sneak: option C. Closing.
His ruling, verbatim:
> "c is fine and is obviously my explicit decision in this greenfield project. don't second guess > my design decisions…
Correction: the central premise of this issue is false
I wrote this issue from an inference about the environment rather than a measurement of it. I have now measured it. **There is a browser…
Manager note: round-4 independent review returned FAIL (issuecomment-49598). Dispatching a rework.
Worth stating plainly, because it changes what this round means: **the reviewer found no…
VERDICT: FAIL (needs-rework)
Round 4, head 3fa3c4ed1932f9aafee89b97a86f28b71e18d0e3, base main 63fbc98e63874b947cd2b591afe74fad88ed0e33. Fresh worktree, nothing trusted from prior…
Reopening for automation — my earlier "needs physical devices" call was wrong
I parked this with @sneak on the grounds that "this QA pass needs real physical devices (phones/tablets), which…
Manager note — review INCOMPLETE, this PR is not cleared
The independent reviewer assigned to this PR terminated early on an API quota limit, partway through. It did not post a review…
Absorbed #55 and brought its code under the canonical config. Head is now 3fa3c4ed1932f9aafee89b97a86f28b71e18d0e3; the PR is mergeable: true again.
Re-measured finding count: 149, not…
Manager note: #55 has merged (main is now 63fbc98e63874b947cd2b591afe74fad88ed0e33, #51 closed), so this PR is unblocked and a rework pass is dispatched.
Confirmed the expected state…
Important addendum to the fix, from the upstream prompts #26 discussion — the obvious implementation does not actually close the hole.
**An unset ARG is an empty string, and an empty string is…
make docker green and policy-conformant
Implementation requirements
Written against main at 69bd6d1, after #3 landed. Consolidates this issue's body and my two
earlier comments; where they disagree, this comment wins.
###…