sneak/secret
1
0
Fork 0
Code Issues 25 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Finish 1.0 and tag it; after that, bugfixes only #131

New Issue
Open
opened 2026-10-12 11:11:06 +02:00 by clawbot · 4 comments
clawbot commented 2026-10-12 11:11:06 +02:00
Collaborator
Copy Link
Copy Source

sneak, in chat, 2026-10-12:

i'd like to finish sfdupes, secret, keyfunc asap, tag 1.0s, and quit working
on them other than bugfixes.

Definition of done

  • next passes script/cibuild, and every open issue that stands between
    secret and 1.0 is closed. The make test timing question
    (#129) stays with sneak and does not
    hold up 1.0.
  • The release PR (#59) carries all of
    next, is mergeable and is merge-ready, assigned to sneak.
  • Once sneak has merged the release PR, v1.0.0 is tagged on main.
  • After the tag: bugfixes only. No new features, refactors or tidying; a
    manager runs for this repo only when a bug is filed.

Model: opus-5-5

sneak, in chat, 2026-10-12: > i'd like to finish sfdupes, secret, keyfunc asap, tag 1.0s, and quit working > on them other than bugfixes. **Definition of done** - `next` passes `script/cibuild`, and every open issue that stands between secret and 1.0 is closed. The `make test` timing question (https://git.eeqj.de/sneak/secret/issues/129) stays with sneak and does not hold up 1.0. - The release PR (https://git.eeqj.de/sneak/secret/pulls/59) carries all of `next`, is mergeable and is `merge-ready`, assigned to sneak. - Once sneak has merged the release PR, `v1.0.0` is tagged on `main`. - After the tag: bugfixes only. No new features, refactors or tidying; a manager runs for this repo only when a bug is filed. Model: opus-5-5
clawbot self-assigned this 2026-10-12 11:11:06 +02:00
clawbot commented 2026-10-12 11:17:36 +02:00
Author
Collaborator
Copy Link
Copy Source

Nothing else stands between secret and 1.0: the release PR #59 carries all of next, is mergeable, is labelled merge-ready and is assigned to you.

Model: opus-5-5

Nothing else stands between secret and 1.0: the release PR https://git.eeqj.de/sneak/secret/pulls/59 carries all of `next`, is mergeable, is labelled `merge-ready` and is assigned to you. Model: opus-5-5
clawbot removed their assignment 2026-10-12 11:17:36 +02:00
sneak was assigned by clawbot 2026-10-12 11:17:36 +02:00
clawbot commented 2026-10-12 23:57:38 +02:00
Author
Collaborator
Copy Link
Copy Source

Correction to the definition of done above, from sneak's rulings in chat on 2026-10-12:

  • The final 1.0 is his call alone; no agent judges what satisfies it. The fleet tags release candidates only (v1.0.0-rc1, then rc2 and so on as fixes land), never the final v1.0.0.
  • Merging the release PR into main is never a blocker and never waits on him; he merges whenever he wishes. Nothing here is assigned to him.
  • Until he calls it finished, the repo keeps being worked: real defects found by running it and reading the code, fixed one reviewed PR each on next, with as many workers as the work allows.

Model: opus-5-5

Correction to the definition of done above, from sneak's rulings in chat on 2026-10-12: - The final 1.0 is his call alone; no agent judges what satisfies it. The fleet tags release candidates only (`v1.0.0-rc1`, then `rc2` and so on as fixes land), never the final `v1.0.0`. - Merging the release PR into main is never a blocker and never waits on him; he merges whenever he wishes. Nothing here is assigned to him. - Until he calls it finished, the repo keeps being worked: real defects found by running it and reading the code, fixed one reviewed PR each on `next`, with as many workers as the work allows. Model: opus-5-5
sneak was unassigned by clawbot 2026-10-12 23:57:38 +02:00
clawbot self-assigned this 2026-10-12 23:57:38 +02:00
clawbot commented 2026-10-12 23:59:48 +02:00
Author
Collaborator
Copy Link
Copy Source

Plan from here, under sneak's rulings of 2026-10-12:

  • v1.0.0-rc1 is tagged at ef0ae90.
  • #132 takes the keychain and Secure Enclave unlockers out of the build and the release.
  • One audit of v1.0.0-rc1, three sessions at once: running the built program on Linux as a user would, at realistic sizes and in the failure cases; reading the storage, encryption and key-derivation code; reading the command-line code. The keychain and Secure Enclave code is left out, as 132 removes it.
  • Each finding is filed as its own issue with a severity. Critical ones (lost or damaged secrets, a vault that can no longer be opened, a disclosed secret or key) are fixed one reviewed PR each on next. The rest are assigned to sneak and get no work.
  • v1.0.0-rc2 is tagged on next once 132 and the critical fixes have landed.

Model: opus-5-5

Plan from here, under sneak's rulings of 2026-10-12: - `v1.0.0-rc1` is tagged at `ef0ae90`. - https://git.eeqj.de/sneak/secret/issues/132 takes the keychain and Secure Enclave unlockers out of the build and the release. - One audit of `v1.0.0-rc1`, three sessions at once: running the built program on Linux as a user would, at realistic sizes and in the failure cases; reading the storage, encryption and key-derivation code; reading the command-line code. The keychain and Secure Enclave code is left out, as 132 removes it. - Each finding is filed as its own issue with a severity. Critical ones (lost or damaged secrets, a vault that can no longer be opened, a disclosed secret or key) are fixed one reviewed PR each on `next`. The rest are assigned to sneak and get no work. - `v1.0.0-rc2` is tagged on `next` once 132 and the critical fixes have landed. Model: opus-5-5
clawbot commented 2026-10-13 01:17:13 +02:00
Author
Collaborator
Copy Link
Copy Source

The single audit of v1.0.0-rc1 is done, and v1.0.0-rc2 is tagged on next at fd6c5df.

Model: fable-5-1 (audit); opus-5-5 (fixes, summary)

The single audit of `v1.0.0-rc1` is done, and `v1.0.0-rc2` is tagged on `next` at `fd6c5df`. - Fixed, the one critical finding: https://git.eeqj.de/sneak/secret/issues/135, a mnemonic typed with extra spaces derived a different vault key (https://git.eeqj.de/sneak/secret/pulls/160). Also in rc2: the keychain and Secure Enclave unlockers are gone (https://git.eeqj.de/sneak/secret/issues/132). - Filed for you, no work done, major: https://git.eeqj.de/sneak/secret/issues/136 https://git.eeqj.de/sneak/secret/issues/137 https://git.eeqj.de/sneak/secret/issues/138 https://git.eeqj.de/sneak/secret/issues/139 https://git.eeqj.de/sneak/secret/issues/141 https://git.eeqj.de/sneak/secret/issues/142 https://git.eeqj.de/sneak/secret/issues/143 https://git.eeqj.de/sneak/secret/issues/144 https://git.eeqj.de/sneak/secret/issues/145 https://git.eeqj.de/sneak/secret/issues/155 - Filed for you, no work done, minor: https://git.eeqj.de/sneak/secret/issues/140 https://git.eeqj.de/sneak/secret/issues/146 https://git.eeqj.de/sneak/secret/issues/147 https://git.eeqj.de/sneak/secret/issues/148 https://git.eeqj.de/sneak/secret/issues/150 https://git.eeqj.de/sneak/secret/issues/151 https://git.eeqj.de/sneak/secret/issues/152 https://git.eeqj.de/sneak/secret/issues/153 https://git.eeqj.de/sneak/secret/issues/154 https://git.eeqj.de/sneak/secret/issues/156 https://git.eeqj.de/sneak/secret/issues/157 https://git.eeqj.de/sneak/secret/issues/158 https://git.eeqj.de/sneak/secret/issues/159 Model: fable-5-1 (audit); opus-5-5 (fixes, summary)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
critical
Extremely important: data loss, a security hole, production down, or basic use impossible
 merge-ready
needs-checks
needs-rebase
needs-review
needs-rework
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
clawbot sneak (Jeffrey Paul)
No Assignees clawbot
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/secret#131