Repository navigation
book: document facts #673 removed from .claude/design - #693
Merged
Merged
Conversation
claude.md: settings.json filter (host and target files, allowlist,
strict JSON 1 MiB, -v/--dry-run report, managed settings not visible);
login: BROWSER is /snug/lib/snug/browser, conflict with a profile
BROWSER, open limit.
containers.md: docker cp refused (engine view wider than the
container, topology diagram linked), podman shim replaced by snug's
podman calling docker, `docker build` section (DOCKER_BUILDKIT=0, see
issue 690), image signatures.
environment.md: prepend across profiles, name grammar, the two marks.
network.md: door starts through snug's wrapper, no shell or network.
variables.md: new chapter. Variable table and rules moved out of
filesystem.md; {colon} and the colon in path specs and lists.
filesystem.md: `file` section, links to variables.md.
README: CGO_ENABLED=0.
TestBook* hold the allowlist, wrapper paths, login open limit, the
variable table and the spec tables at their new pages.
Refs #683
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #683.
Book prose for facts #673 dropped from
.claude/design, vetted by hand.claude.md:settings.jsonfilter (host + target files, allowlist, strict JSON 1 MiB,-v/--dry-runreport, managed settings not visible).login:BROWSERis/snug/lib/snug/browser, profileBROWSERconflicts, open limit.containers.md:docker cprefused (engine view wider than container, topology diagram linked); podman shim replaced by snug'spodmancallingdocker;docker buildsection (DOCKER_BUILDKIT=0, open question DOCKER_BUILDKIT=1 inside sandbox: measure what unfiltered BuildKit session actually reaches #690); image signatures.environment.md:prependacross profiles, name grammar,← not granted/← writable from inside.network.md: door starts through snug's wrapper, no shell, no network.variables.md: new chapter. Variable table + rules moved out offilesystem.md;{colon}, colon in specs and lists.filesystem.md:filesection (profile: place literal text as a read-only file in the sandbox #653 prose), links tovariables.md.README.md:CGO_ENABLED=0.Tests:
TestBookClaudeSettingsListsTheAllowlist,TestBookNamesTheWrapperPaths,TestBookLoginOpenLimitIsTheBridgesnew;TestBookListsExactlyThePathVariablesResolveBuildsand the:/{refusal check readvariables.md.Stacked on
feat/colon-var(dc1c6d3,{colon}path variable + two red-team fixes), included here:variables.mddocuments{colon}and the variable-table test needs it.make gategreen.