dorfteich

stwaidele/dorfteich

Fork 0

Author	SHA1	Message	Date
Claude Fable 5	4af5e6e81f	#225 : read-trail master switch and written purpose limitation All checks were successful CI / Lint, typecheck, test (pull_request) Successful in 6m2s Details CI / Build container images (pull_request) Successful in 4m1s Details CI / Auth e2e pack (pull_request) Successful in 8m26s Details CI / Import/export fidelity gate (pull_request) Successful in 58s Details CD / Build and push images (push) Successful in 18s Details CD / Deploy to Test (push) Successful in 15s Details CD / Smoke tests against Test (push) Successful in 1m23s Details CD / Promote to Int (push) Successful in 12s Details CI / Lint, typecheck, test (push) Successful in 6m6s Details CI / Build container images (push) Has been skipped Details CI / Auth e2e pack (push) Successful in 8m25s Details CI / Import/export fidelity gate (push) Successful in 1m0s Details New instance switch readTrail.enabled, default OFF: read logging is employee monitoring in a works council's eyes — an ordinary instance must not surveil reads. Off means no event is written ANYWHERE (no row, no stdout line, verified by test); the api announces the switch position once per boot, so an eventless trail is never ambiguous — a gap reads as "was off", never "was lost". The written purpose limitation ships as section 7 of the VS-NfD security documentation (#228): what is recorded (no content, no titles, no IPs, no fingerprinting), why (evidence for reads of marked content only — variant A is the technical anchor of the promise), who may read it (Site Admin, API-only), for how long (readTrail.retentionDays, audited pruning), and what it may NOT be used for (no performance or behaviour monitoring). The hardening guide's reference configuration turns the trail on (reference value true) and points to that text; the existing trail suites now enable the switch explicitly. Refs #225. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8	2026-07-31 12:35:18 +02:00

Author

SHA1

Message

Date

Claude Fable 5

4af5e6e81f

#225 : read-trail master switch and written purpose limitation

CI / Lint, typecheck, test (pull_request) Successful in 6m2s

Details

CI / Build container images (pull_request) Successful in 4m1s

Details

CI / Auth e2e pack (pull_request) Successful in 8m26s

Details

CI / Import/export fidelity gate (pull_request) Successful in 58s

Details

CD / Build and push images (push) Successful in 18s

Details

CD / Deploy to Test (push) Successful in 15s

Details

CD / Smoke tests against Test (push) Successful in 1m23s

Details

CD / Promote to Int (push) Successful in 12s

Details

CI / Lint, typecheck, test (push) Successful in 6m6s

Details

CI / Build container images (push) Has been skipped

Details

CI / Auth e2e pack (push) Successful in 8m25s

Details

CI / Import/export fidelity gate (push) Successful in 1m0s

Details

New instance switch readTrail.enabled, default OFF: read logging is
employee monitoring in a works council's eyes — an ordinary instance
must not surveil reads. Off means no event is written ANYWHERE (no row,
no stdout line, verified by test); the api announces the switch position
once per boot, so an eventless trail is never ambiguous — a gap reads
as "was off", never "was lost".

The written purpose limitation ships as section 7 of the VS-NfD
security documentation (#228): what is recorded (no content, no titles,
no IPs, no fingerprinting), why (evidence for reads of marked content
only — variant A is the technical anchor of the promise), who may read
it (Site Admin, API-only), for how long (readTrail.retentionDays,
audited pruning), and what it may NOT be used for (no performance or
behaviour monitoring). The hardening guide's reference configuration
turns the trail on (reference value true) and points to that text; the
existing trail suites now enable the switch explicitly.

Refs #225.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8

2026-07-31 12:35:18 +02:00

Compare commits

1 Commits

7ce6467385 ... 4af5e6e81f

Diff Content Not Available

Compare commits

1 Commits 7ce6467385 ... 4af5e6e81f

Diff Content Not Available

1 Commits

7ce6467385 ... 4af5e6e81f