Rewrite SPEC and README to sneak's rulings and internet-ready defaults (closes #6)

Browse Source

SPEC.md and README.md now state the resolutions of the old questions section and sneak's later requirements: seven-day bans for clear signs of attack and short, tripling bans for broken limits; state files that follow memory and take in edits while running; ban notes and per-client history; size and time limits in both directions; country deny and allow-only lists; GeoJS as the default lookup source; one listener for everything. The defaults are chosen so that a sidecar with only UPSTREAM_URL set protects an app on the open internet; the Core Rule Set reads no request bodies by default. Choices made where his words left a gap are listed in the PR. Gitea requests the defaults may still refuse are collected in a follow-up issue.

Model: opus-5-5

This commit was merged in pull request #9.

...

This commit is contained in:

clawbot

2026-09-29 00:53:01 +02:00

parent a0d2c21346

commit 789895782e

2 changed files with 1194 additions and 459 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

SPEC.md

+1051 -390

File diff suppressed because it is too large Load Diff