Claude Fable 5
9b7acab294
All checks were successful
CI / Lint, typecheck, test (pull_request) Successful in 6m21s
CI / Build container images (pull_request) Successful in 3m59s
CI / Auth e2e pack (pull_request) Successful in 8m35s
CI / Import/export fidelity gate (pull_request) Successful in 1m1s
CD / Build and push images (push) Successful in 17s
CD / Deploy to Test (push) Successful in 14s
CD / Smoke tests against Test (push) Successful in 1m17s
CD / Promote to Int (push) Successful in 12s
CI / Build container images (push) Has been skipped
CI / Auth e2e pack (push) Successful in 8m27s
CI / Import/export fidelity gate (push) Successful in 58s
CI / Lint, typecheck, test (push) Successful in 6m30s
The install path records the SHA-256 of the delivered bundle ZIP (plugins.bundle_hash; pre-#232 installs show it as unknown until reinstalled). plugins.allowlist in instance_settings names permitted ids with their pinned hashes: empty (default) = not enforced, existing instances unchanged; non-empty = installs of unlisted or deviating bundles are rejected (plugin_not_pinned / plugin_hash_mismatch, 403), and an installed plugin outside the list or with a deviating hash does not load — absent from pond mount lists, frame/assets 404. Every rejection is audited (plugin.rejected, catalogue v1.5). A version bump changes the hash and therefore requires an explicit re-pin — the intended friction (ADR 0025). Admin UI shows observed vs pinned hash per plugin with pin/re-pin/unpin. Scope stated honestly in plugin-architecture.md: the pin answers "is this the reviewed bundle"; post-install disk tampering is platform integrity (ADR 0019), sandbox containment stays the sandbox's job. Hardening guide row + catalog advisory triage; residual risk R-03 resolved. e2e: empty-allowlist compatibility, pinned load, unpinned and tampered installs rejected and audited, pin drift blocks loading while the admin still sees the mismatch, version bump needs re-pin. Full api suite 101 files / 561 green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8 |
||
|---|---|---|
| .. | ||
| 20260704171456_init | ||
| 20260704224132_auth_models | ||
| 20260705090100_ponds | ||
| 20260705185146_quotas | ||
| 20260705200714_pages | ||
| 20260708082627_attachments | ||
| 20260708101011_trash_and_jobs | ||
| 20260709060328_collab_open_sessions | ||
| 20260709062007_page_versions | ||
| 20260709062727_page_version_created_by | ||
| 20260709082418_labels | ||
| 20260709104519_page_links | ||
| 20260709111040_search_vector | ||
| 20260709115727_role_grants | ||
| 20260709140000_owner_admin_grants | ||
| 20260710035316_conversion_jobs | ||
| 20260710041215_import_pages_conversion | ||
| 20260710120000_data_export_expiry | ||
| 20260710130000_plugins | ||
| 20260711100000_setup_completed_backfill | ||
| 20260711180000_audit_log_and_job_duration | ||
| 20260711220000_comments | ||
| 20260711230000_watches | ||
| 20260712000000_notifications | ||
| 20260712010000_digest_frequency | ||
| 20260712020000_api_tokens | ||
| 20260714000000_page_hierarchy | ||
| 20260714120000_conversion_job_options | ||
| 20260716000000_page_favorites | ||
| 20260719223755_page_time_filter_indexes | ||
| 20260719224240_feed_tokens | ||
| 20260719232202_page_mentions | ||
| 20260730120000_drop_attachment_deleted_at | ||
| 20260730140000_clear_trashed_search_vectors | ||
| 20260730170000_prune_conversion_job_payloads | ||
| 20260731090000_attachment_sha256 | ||
| 20260731120000_page_classification | ||
| 20260731150000_read_events | ||
| 20260731160000_read_events_dedup | ||
| 20260731170000_read_events_partitioned | ||
| 20260731190000_idp_claim_mapping | ||
| 20260731210000_plugin_bundle_hash | ||
| migration_lock.toml | ||