field note: the fixer is the worst witness - #327
Merged
Merged
Conversation
…y own fixes
Seven rounds of cold review on 2026-09-08/09, read in order rather than as a
findings list. The pattern is the subject: a rule enforced at one door and
not the others, including in the fixes I wrote for the previous round.
Every specific traces to a file in this repo:
- RequireIntactChain's own doc comment records checkpoint (round one),
append (round three), push and LoadDir (round four), and the "every
door" wording that was itself reproduced as false (round five, R3).
- scripts/check-security.sh records the gofmt gate fixed for the tool's
absence and still passing on its failure.
- certify_repo_report_selection_test.go records the withheld rate fixed
for UNCOVERED and left printing 0.00 for the import-only residual.
- certify_repo_custody_test.go records the event tape shipping audited
source with no --push-source guard anywhere on the path.
- ledgerdir.go:56 records the IsLedgerDir narrowing reverted because it
refused real ledgers; ledgerdir_integrity_test.go:384 records the
unsigned-entry rule reverted because it refused keyless chains.
- sandbox/scrub_token_test.go records the vacuous test and its negative
control.
- The release gate that made releases impossible is in the changelog.
Claims I could not trace to a primary source were cut rather than softened.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011NgkB3eLPBhgfqU1XopR1V
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Seven rounds of cold review on 2026-09-08/09, told as the pattern rather than a findings list — the findings are already in the rc.12/rc.13 changelog, and the pattern is the part that only appears when you read the rounds in order.
The subject: a rule enforced at one door and not the others — and round after round, the thing it caught was my own fix for the previous round.
--push-sourcehonored by the audit rows and not by the event tape).Verification. Every specific traces to a file in this repo —
RequireIntactChain's doc comment,scripts/check-security.sh,certify_repo_report_selection_test.go,certify_repo_custody_test.go,ledgerdir.go:56,ledgerdir_integrity_test.go:384,sandbox/scrub_token_test.go. Two claims from the first draft that I could not trace to a primary source were cut rather than softened.It also disambiguates its round numbers against the earlier field note, which counts a different series.
Guard clean, US-spelling grep clean, site builds (82 pages), docs gates pass.
🤖 Generated with Claude Code
https://claude.ai/code/session_011NgkB3eLPBhgfqU1XopR1V