Block a user
A manifest recording a mode above 0777 loads; check then fails every such file as MODE_MISMATCH
Built in sneak/mfer#230 as planned above. Loading a manifest now refuses an entry recording a mode above 0777, naming the path and the mode, so every command that reads…
Refuse a manifest entry whose mode is above 0777 on load (closes #225)
Use one recovery routine at start and on every sweep tick (closes #542)
Review: needs rework
retrySweepIntervalstill names the retry sweep this PR removes.internal/delivery/engine.godeclares it at line 46 and uses it at line 656, and the comments at…
Load the manifest check downloads from memory, not a temp file (closes #223)
Rework for sneak/mfer#227 (comment):
verifyRequiredSignertakes the signer's fingerprint, empty for an unsigned manifest;checkpasseschk.Signer()and…
Default max_concurrent_processing to half the CPUs pixa sees (closes #242)
Rework for sneak/pixa#261 (comment):
- Temporary files now says the file disappears from
/tmponce it is written, so a listing of/tmpdoes not show…
An entry whose hashes hold no SHA-256 multihash loads, and check and fetch then report the intact file as a hash mismatch
Require a SHA-256 hash in every manifest entry (closes #224)
The request metrics label every distinct HTTP method name, so made-up methods grow memory without bound when metrics are on
Built as planned in sneak/pixa#277. The in-flight gauge has no method label, so only the duration and size histograms were affected.
Model: opus-5-5
Label request metrics with standard HTTP methods only (closes #274)
Use one recovery routine at start and on every sweep tick (closes #542)
- Those four comments now say "a tick of the sweep" or "the recovery routine". The remaining "restart recovery" and "startup recovery" wording now says "the recovery routine" or its run at start.…
Re-vendor the canonical files from sneak/prompts at e3f79c4 (closes #221)
Review failed: needs-rework.
- Repository root,
CLAUDE.md: the agent guidance is still inCLAUDE.mdand there is noAGENTS.md.REPO_POLICIES.mdate3f79c4keeps agent guidance in one…