admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

docs(compliance): finish attributing the evasion-stack keep decision #17

Merged
admin merged 1 commits from docs/curl-cffi-decision-attribution into main 2026-08-11 11:36:39 +00:00
Conversation 0 Commits 1 Files Changed 8
+45 -16
admin commented 2026-08-11 11:34:35 +00:00
Owner
Copy Link
Copy Source

What

PR #15 already fixed AGENTS.md/SECURITY.md with a dated, attributed statement of the account owner's 2026-08-11 decision to keep the existing sourcing-evasion capability (WAF-bypass/Tor/FlareSolverr/cloudscraper/curl_cffi). This PR finds and fixes every other place in the repo that still carried the earlier unattributed "medvetet anvandarbeslut" / "deliberate user decision" claim a compliance audit flagged as unverifiable. No code changes.

Why

The account owner, Simon Axelsson, was asked directly via an interactive decision prompt on 2026-08-11 -- in a compliance-audit session responding to this repo's own removal proposal (PR #7, verified clean, 128/128 tests, closed unmerged) -- and explicitly chose to keep the code. No business or legal rationale beyond "keep it" was given or is invented here. CLAUDE.md's general §1 anti-evasion policy text is untouched -- this is a scoped exception note, not a change to the normative rule.

Changes

  • docs/compliance/GOLDEN-STANDARD-REPORT.md (explicitly named as needing a check): control C6 row + the "Bypass-undantag" formal section rewritten with the dated, attributed statement; header gains an update note.
  • docs/compliance/SLUTRAPPORT.md, docs/compliance/INVENTORY.md: historical session doc keeps its original text and gains a dated correction addendum; the INVENTORY.md evidence bullet corrected in place.
  • docs/slo.md, CONTRIBUTING.md, prompts/002-compliance-audit.md, renovate.json, .gitea/workflows/security.yml: direct/living references to the exemption updated to the same attributed, dated pointer.

Test plan

  • pnpm run typecheck -- clean, 0 errors.
  • pnpm run test (vitest) -- 134 passed, 1 honestly-skipped (ST0RE not reachable from this environment), 0 failed.
  • pnpm run build -- succeeds, full route manifest generated, 0 errors.
  • pnpm run lint -- 12 pre-existing errors, all in files this PR does not touch (adapters/tests unrelated to docs); lint is advisory per AGENTS.md, not a blocking gate.
  • renovate.json still valid JSON.
  • Grepped the repo for every remaining "medvetet anvandarbeslut" / unattributed-claim occurrence after this PR: all remaining hits are explicitly framed as superseding the old claim.

Co-Authored-By: Claude Sonnet 5 noreply@anthropic.com

## What PR #15 already fixed `AGENTS.md`/`SECURITY.md` with a dated, attributed statement of the account owner's 2026-08-11 decision to keep the existing sourcing-evasion capability (WAF-bypass/Tor/FlareSolverr/cloudscraper/curl_cffi). This PR finds and fixes every *other* place in the repo that still carried the earlier unattributed "medvetet anvandarbeslut" / "deliberate user decision" claim a compliance audit flagged as unverifiable. No code changes. ## Why The account owner, Simon Axelsson, was asked directly via an interactive decision prompt on 2026-08-11 -- in a compliance-audit session responding to this repo's own removal proposal (PR #7, verified clean, 128/128 tests, closed unmerged) -- and explicitly chose to keep the code. No business or legal rationale beyond "keep it" was given or is invented here. `CLAUDE.md`'s general §1 anti-evasion policy text is untouched -- this is a scoped exception note, not a change to the normative rule. ## Changes - `docs/compliance/GOLDEN-STANDARD-REPORT.md` (explicitly named as needing a check): control C6 row + the "Bypass-undantag" formal section rewritten with the dated, attributed statement; header gains an update note. - `docs/compliance/SLUTRAPPORT.md`, `docs/compliance/INVENTORY.md`: historical session doc keeps its original text and gains a dated correction addendum; the INVENTORY.md evidence bullet corrected in place. - `docs/slo.md`, `CONTRIBUTING.md`, `prompts/002-compliance-audit.md`, `renovate.json`, `.gitea/workflows/security.yml`: direct/living references to the exemption updated to the same attributed, dated pointer. ## Test plan - [x] `pnpm run typecheck` -- clean, 0 errors. - [x] `pnpm run test` (vitest) -- 134 passed, 1 honestly-skipped (ST0RE not reachable from this environment), 0 failed. - [x] `pnpm run build` -- succeeds, full route manifest generated, 0 errors. - [x] `pnpm run lint` -- 12 pre-existing errors, all in files this PR does not touch (adapters/tests unrelated to docs); lint is advisory per `AGENTS.md`, not a blocking gate. - [x] `renovate.json` still valid JSON. - [x] Grepped the repo for every remaining "medvetet anvandarbeslut" / unattributed-claim occurrence after this PR: all remaining hits are explicitly framed as superseding the old claim. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
admin added 1 commit 2026-08-11 11:34:35 +00:00
docs(compliance): finish attributing the evasion-stack keep decision
CI (SIAX Cloud) / security (push) Successful in 20s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 20s
Details
CI (SIAX Cloud) / quality (push) Successful in 41s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 20s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 20s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 41s
Details
2393f52768 
PR #15 already fixed AGENTS.md/SECURITY.md with a dated, attributed
statement of the account owner's 2026-08-11 decision (Simon Axelsson, via
an interactive decision prompt, responding to this repo's own removal
proposal PR #7 which was verified clean/128 tests and closed unmerged --
no rationale beyond "keep it" was given or is invented). This PR finds and
fixes every other place in the repo that still carried the earlier
unattributed "medvetet anvandarbeslut" / "deliberate user decision" claim
a compliance audit flagged as unverifiable:

- docs/compliance/GOLDEN-STANDARD-REPORT.md: control C6 row + the
  "Bypass-undantag" formal section (the two places this doc was explicitly
  named to need checking) -- header gains a dated update note, C6 row and
  the section body get the same attributed statement as AGENTS.md/SECURITY.md.
- docs/compliance/SLUTRAPPORT.md, docs/compliance/INVENTORY.md: historical
  session doc keeps its original text and gains a dated correction
  addendum; the INVENTORY.md evidence bullet is corrected in place.
- docs/slo.md, CONTRIBUTING.md, prompts/002-compliance-audit.md,
  renovate.json, .gitea/workflows/security.yml: direct/living references
  to the exemption get the same attributed, dated pointer instead of the
  unattributed phrase.

CLAUDE.md's general §1 anti-evasion policy text is untouched, per instruction
-- this is a scoped exception note, not a change to the normative rule. No
code changes.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
admin merged commit into main 2026-08-11 11:36:39 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
siax-bot siax-ci siax-healer (siax-healer (CI self-healing agent)) admin (Simon Axelsson)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#17