The audit's open findings have no home: add docs/caveats/ and the doc indexes #225

2026-08-11T08:43:16+02:00

claude commented

2026-08-11 08:43:16 +02:00

Closes Vikunja #674.

Acceptance criteria and quality gate are in TASK.md on this branch.
Review the review, not the diff — leave comments and the agent will apply them via task start 674.

Closes Vikunja #674. Acceptance criteria and quality gate are in `TASK.md` on this branch. Review the review, not the diff — leave comments and the agent will apply them via `task start 674`.

claude added 2 commits 2026-08-11 08:43:16 +02:00

Give the audit's open findings a home and a trigger (V-674) c0f4074a5d

Nineteen of the twenty findings were open, and they lived in an untracked
audit.md at the repo root that no next session would have read. The one that
is closed, the unauthenticated mavgpud proxy, went out as V-673.

The report is now a frozen measurement under docs/evals/, dated and never
edited again — including when a finding it names gets fixed. The live state
moved to docs/caveats/, one entry per limit, each carrying its Vikunja id and
the condition that makes it worth fixing. A caveat with no revisit trigger is
a complaint, so every entry has one. Closing a limit deletes its entry rather
than editing the measurement that found it.

Two directory indexes come with it. docs/CLAUDE.md states the tier rule the
repo already followed by convention: living docs corrected in place, evals
frozen by date, caveats deleted when fixed. docs/caveats/CLAUDE.md indexes the
nineteen by claim and severity, because an index of filenames adds nothing a
directory listing does not.

Tasks V-675 through V-693 carry the plans. The doc line and the tracker now
join in both directions.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ESv8hqNPseYt1CnotZpqDz

Point the root file at the two new indexes (V-674) d1b8519239

A file nobody can find is dead weight, and the pointer table is the only
place anyone looks.

The 600-line diff budget blocked this two-line edit. Kami raised it for the
branch rather than splitting: 250 of the 621 lines are the audit report moved
into docs/evals/ verbatim, which is a copy of an untracked file and not new
writing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ESv8hqNPseYt1CnotZpqDz

kami merged commit f8beee8416 into master

2026-08-11 11:51:50 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kami/Maven#225