Files
Maven/docs/caveats/external-inputs.md
T
claude c0f4074a5d Give the audit's open findings a home and a trigger (V-674)
Nineteen of the twenty findings were open, and they lived in an untracked
audit.md at the repo root that no next session would have read. The one that
is closed, the unauthenticated mavgpud proxy, went out as V-673.

The report is now a frozen measurement under docs/evals/, dated and never
edited again — including when a finding it names gets fixed. The live state
moved to docs/caveats/, one entry per limit, each carrying its Vikunja id and
the condition that makes it worth fixing. A caveat with no revisit trigger is
a complaint, so every entry has one. Closing a limit deletes its entry rather
than editing the measurement that found it.

Two directory indexes come with it. docs/CLAUDE.md states the tier rule the
repo already followed by convention: living docs corrected in place, evals
frozen by date, caveats deleted when fixed. docs/caveats/CLAUDE.md indexes the
nineteen by claim and severity, because an index of filenames adds nothing a
directory listing does not.

Tasks V-675 through V-693 carry the plans. The doc line and the tracker now
join in both directions.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ESv8hqNPseYt1CnotZpqDz
2026-08-11 10:41:54 +04:00

21 lines
951 B
Markdown

# External inputs
What arrives from a service Maven does not run, and what happens when it
arrives malformed. The shared shape: a JSON decode into value fields cannot
tell "absent" from "zero", so a degraded response becomes a confident answer.
## An empty STT transcript reads as a successful one [#675] {#stt}
Costs: one dropped voice turn per malformed 200 from workpc. The mavsttd floor
is never asked, because `stt.Pair` falls back on a non-nil error alone.
Revisit when: CW2 returns a 200 with no text. Sooner if a proxy is put between
homesrv and port 8081.
Workaround: none. It is silent by design and the fallback is never spoken.
## Open-Meteo's empty body becomes 0°C [#676] {#weather}
Costs: he is told the weather is clear and 0°C when the service answered
nothing. Distinct from V-589, which covered the HTTP status and not the body.
Revisit when: a weather answer is reported as wrong, or the geocoder changes.
Workaround: none.