claude
98ab646206
Owner explicitly requested direct commits to master. Keep startup cost benchmarked without turning ambient race/coverage load into a correctness failure; record live reminder proof, stale-task reconciliation, and the temporary delegation quota caveat.
48 lines
2.6 KiB
Markdown
48 lines
2.6 KiB
Markdown
# docs/caveats/
|
|
|
|
One entry per known limit: something broken, deferred or unsafe that a session
|
|
will otherwise walk into. An entry names what fails, who it costs, and the
|
|
condition that makes it worth fixing.
|
|
|
|
Two things do not belong here. The evidence is a dated file under `docs/evals/`.
|
|
The reasoning behind a subsystem is its living doc directly under `docs/`. A
|
|
caveat is the pointer between them plus the trigger.
|
|
|
|
## Rules for this directory
|
|
|
|
* One file per area, one `##` section per limit, each carrying its task id.
|
|
* **A caveat with no revisit trigger is a complaint.** Give it one or delete it.
|
|
* Closing a limit deletes its entry. It does not edit it to say "fixed", and it
|
|
never edits the frozen measurement it came from. The durable record of a fix
|
|
is the commit and the subsystem's living doc.
|
|
* An entry whose task is closed but whose limit is still live is the failure
|
|
mode to watch for. The id joins the two directions, so check both.
|
|
|
|
## Index
|
|
|
|
Every entry below came from the 2026-08-10 deep audit
|
|
(`docs/evals/2026-08-10-repo-audit.md`), except the last, which came from wiring
|
|
the gate the audit asked for. Twelve of the twenty findings are fixed and have no
|
|
entry. The unauthenticated mavgpud proxy was V-673. The 20 reachable advisories
|
|
in the toolchain and `x/text` were V-682. The missing analyzers were V-694, and
|
|
what they now report is the baseline entry under V-701. The invalid STT and
|
|
weather responses were V-675/V-676, the stuck TCP close was V-679, and the
|
|
unbounded PTT path was V-688. The two unguarded
|
|
invariants were V-692 and V-693, and their guards are described in
|
|
`docs/routing.md`. The complete secret inventory and fail-closed integration
|
|
validation were V-691. The atomic reminder transition was V-678. The traceable,
|
|
sanitized mavweb problem contract was V-689.
|
|
|
|
| limit | severity |
|
|
| --- | --- |
|
|
| [Anyone past the proxy can enroll a passkey](security.md#enrollment) | high |
|
|
| [Passkey credentials are rewritten in place](security.md#credentials) | medium |
|
|
| [Dialogue persistence errors are swallowed](storage.md#dialogue) | medium |
|
|
| [A recall miss scans two whole tables](storage.md#recall) | medium |
|
|
| [Fact enrichment is a 20-call serial waterfall](workers.md#enrichment) | medium |
|
|
| [Autonomous worker delegation is temporarily quota-gated](workers.md#agent-quota) | session |
|
|
| [Committed absolute paths pin the build to this box](config.md#paths) | medium |
|
|
| [The analyzers pass against a baseline, not zero](dependencies.md#baseline) | medium |
|
|
| [Domain packages depend on store and IPC types](layering.md#dtos) | low |
|
|
| [Eleven symbols are unreachable](layering.md#deadcode) | low |
|