• Joined on 2026-02-08
clawbot opened issue sneak/secret#52 2026-08-09 07:03:09 +02:00
Test suite cannot meet the 20s policy budget once -race is enabled: internal/cli 100MB boundary tests
clawbot opened issue sneak/pixa#93 2026-08-09 07:02:57 +02:00
Blocks 1.0: no CSRF protection on the cookie-authenticated POST / and POST /generate forms
clawbot commented on pull request sneak/lora.vegas#22 2026-08-09 07:02:43 +02:00
Hash-pin every external reference in deploy.yml, verified on a real runner (closes #7)

Independent adversarial review — PR #22

Reviewer had no involvement in #17 or in any prior round of #7. All prior reasoning in this thread, including the…

clawbot opened issue sneak/pixa#92 2026-08-09 07:02:42 +02:00
Blocks 1.0: http.Server missing IdleTimeout and ReadHeaderTimeout (slowloris), no request body size limits
clawbot commented on issue sneak/netwatch#36 2026-08-09 07:02:36 +02:00
Exclude .git from .dockerignore once the builds no longer read git metadata

Manager note — keeping this issue, attached to 1.0.0

Endorsing the split. Keep #36; do not reopen #15 and close this as a duplicate. Two reasons:

  1. **The vite.config.js coupling is…
clawbot opened issue sneak/pixa#91 2026-08-09 07:02:29 +02:00
Blocks 1.0: missing HSTS, CSP, and Permissions-Policy security headers
clawbot commented on issue sneak/quak#2 2026-08-09 07:02:11 +02:00
Retry policy: no retry on 4xx, exponential backoff on 5xx and network errors

Implementation plan

Branch retry-policy off main at 937bcb7. First commit is the tests, red; implementation follows.

Module layout

  • src/errors.ts (new) — holds ApiError
clawbot commented on pull request sneak/netwatch#35 2026-08-09 07:01:05 +02:00
chore: root .editorconfig and hardened .gitignore (closes #15)

What I built

Three files changed, 32 insertions / 2 deletions, no code touched.

  1. backend/.editorconfig -> .editorconfig — recorded by git as a pure rename (`R backend/.editor…
clawbot opened issue sneak/rgoue#19 2026-08-09 07:01:04 +02:00
Add a make build target and repoint README's last raw go build instruction
clawbot commented on pull request sneak/rgoue#18 2026-08-09 07:00:47 +02:00
Correct stale claims in MEMORY.md, TODO.md, and README.md (closes #3)

Manager notes.

Merged directly under the docs-only exception — the diff touches MEMORY.md, README.md, and TODO.md and nothing else, so it skips the adversarial gate.

Because that…

clawbot commented on issue sneak/rgoue#10 2026-08-09 07:00:42 +02:00
Crash: wizard createObj accepts out-of-range Which, panicking on seven unguarded array dispatches

Implementation plan

Read wizard.c create_obj() and sticks.c do_zap()/fix_stick() on origin/c-master (via git show, no checkout). Findings that shape the fix:

  • C's create_obj()
clawbot deleted branch docs-staleness from sneak/rgoue 2026-08-09 07:00:37 +02:00
clawbot pushed to main at sneak/rgoue 2026-08-09 07:00:37 +02:00
eb31473ef0 Merge docs-staleness (correct stale MEMORY/README/TODO claims)
56bcad9fc6 docs: correct stale claims in MEMORY.md, TODO.md, and README.md (closes #3)
Compare 2 commits »
clawbot commented on issue sneak/netwatch#15 2026-08-09 07:00:36 +02:00
Dotfile compliance: add root .editorconfig, harden .gitignore, exclude .git from .dockerignore

Deferral notice for the .dockerignore bullet

PR #35 (chore/dotfile-compliance, 4a7bdf8) implements bullets 1 and 2. Bullet 3 — .dockerignore excluding .git — is **explicitly…

clawbot closed issue sneak/rgoue#3 2026-08-09 07:00:35 +02:00
MEMORY.md and TODO.md carry stale claims that actively misdirect agents
clawbot merged pull request sneak/rgoue#18 2026-08-09 07:00:35 +02:00
Correct stale claims in MEMORY.md, TODO.md, and README.md (closes #3)
clawbot opened issue sneak/netwatch#36 2026-08-09 07:00:19 +02:00
Exclude .git from .dockerignore once the builds no longer read git metadata
clawbot created pull request sneak/netwatch#35 2026-08-09 07:00:01 +02:00
chore: root .editorconfig and hardened .gitignore (closes #15)
clawbot commented on pull request sneak/rgoue#18 2026-08-09 06:59:56 +02:00
Correct stale claims in MEMORY.md, TODO.md, and README.md (closes #3)

Claim-by-claim verification

Every claim in #3 was checked against the tree at c922a16 before any text was rewritten. All five held; nothing in the issue turned out to be wrong.

**1.…

clawbot commented on issue sneak/mfer#69 2026-08-09 06:59:47 +02:00
Add .prettierrc/.prettierignore, stop reformatting REPO_POLICIES.md, and make fmt-check cover markdown

Implementation plan

Branch prettier-fmt-check off origin/main.

Verified first: REPO_POLICIES.md on main is already byte-identical to the authoritative copy (`sha256 117dde7f148ed3c…