Plan, on branch issue-40-gitignore-secrets (base next):
Precondition already checked: git ls-files filtered for *.key, *.pem, *.age, .env comes back empty — no key material is…
Closing as superseded. The owner ruling captured in sneak/secret#55 moves every lint run into a Docker container invoked through script/lint, and explicitly removes…
secret rm .. deletes the entire vault; rm/mv/import skip name validation
Implementation plan:
internal/vault/secrets.go: add exportedValidateSecretName(name string) error, a thin wrapper over the existing unexportedisValidSecretName, returning the wrapped…
Manager note. Re-review PASSED. Merging to main.
Built public/ is byte-identical to 910f343, so the resulting deploy publishes nothing new — same low-risk profile as the last merge.
Two…
next branching model
Independent re-review of fd3cd4c — PASS (merge-ready). Both prior findings are closed, the two amends disturbed nothing, and the rest of the checklist holds: .PHONY exactly complete (12…
Cap ruling landed org-wide and changes the arithmetic here: 60s hard for CI/green, 20s target, anything between filed as an improvement bug (sneak/prompts#41 (comment)…
Superseded by sneak/pixa#104 (owner ruling: lint runs only in Docker via script/lint, so there is no host binary left to pin). Closing.