Files
claude 98ab646206 Make the hash-floor gate deterministic (V-718)
Owner explicitly requested direct commits to master. Keep startup cost benchmarked without turning ambient race/coverage load into a correctness failure; record live reminder proof, stale-task reconciliation, and the temporary delegation quota caveat.
2026-08-15 02:15:51 +04:00

2.6 KiB

docs/caveats/

One entry per known limit: something broken, deferred or unsafe that a session will otherwise walk into. An entry names what fails, who it costs, and the condition that makes it worth fixing.

Two things do not belong here. The evidence is a dated file under docs/evals/. The reasoning behind a subsystem is its living doc directly under docs/. A caveat is the pointer between them plus the trigger.

Rules for this directory

  • One file per area, one ## section per limit, each carrying its task id.
  • A caveat with no revisit trigger is a complaint. Give it one or delete it.
  • Closing a limit deletes its entry. It does not edit it to say "fixed", and it never edits the frozen measurement it came from. The durable record of a fix is the commit and the subsystem's living doc.
  • An entry whose task is closed but whose limit is still live is the failure mode to watch for. The id joins the two directions, so check both.

Index

Every entry below came from the 2026-08-10 deep audit (docs/evals/2026-08-10-repo-audit.md), except the last, which came from wiring the gate the audit asked for. Twelve of the twenty findings are fixed and have no entry. The unauthenticated mavgpud proxy was V-673. The 20 reachable advisories in the toolchain and x/text were V-682. The missing analyzers were V-694, and what they now report is the baseline entry under V-701. The invalid STT and weather responses were V-675/V-676, the stuck TCP close was V-679, and the unbounded PTT path was V-688. The two unguarded invariants were V-692 and V-693, and their guards are described in docs/routing.md. The complete secret inventory and fail-closed integration validation were V-691. The atomic reminder transition was V-678. The traceable, sanitized mavweb problem contract was V-689.

limit severity
Anyone past the proxy can enroll a passkey high
Passkey credentials are rewritten in place medium
Dialogue persistence errors are swallowed medium
A recall miss scans two whole tables medium
Fact enrichment is a 20-call serial waterfall medium
Autonomous worker delegation is temporarily quota-gated session
Committed absolute paths pin the build to this box medium
The analyzers pass against a baseline, not zero medium
Domain packages depend on store and IPC types low
Eleven symbols are unreachable low