 windyboy
|
a3ee8c09cf
|
security: scrub live credentials from tracked notes; point values at Vaultwarden
- replace real keys/passwords/tokens/connection strings with {{SECRET_*}}
placeholders across 24 files (review-named 12 + noise-audit finds:
WAQI/Dovecot/GPS/VPN subscriptions/Work runbooks/Plane API key)
- widen verifier: OPENSSH/RSA key headers, hyphenated sk-/prefixed sk-,
credential assignments & table cells, telegram bot tokens, conn strings
- placeholder/default-value/config-name exemptions to kill doc FPs
- skip .obsidian plugin code and frozen Inbox-Clippings from value scan
- GIT_WORKFLOW: no git add ., verifier before commit, force-push exception
- final regression: 0 flagged in tracked scope (was 43)
|
2026-09-26 12:26:57 +08:00 |
|
|
windyboy
|
be56d86e84
|
refactor(vault): Phase 5 — single agent contract
- Rewrite AGENTS.md as single operations manual (PARA, permission table,
frontmatter conventions, safety rules, code style)
- Root CLAUDE.md = one-line pointer to AGENTS.md
- Delete 13 stub CLAUDE.md files across vault directories
- Delete .claude/project-instructions.md + .claude/memory/instructions/
(content merged into AGENTS.md)
- .claude/settings.json: deny plugin data.json + 04_Archive + git push;
ask on .obsidian/** edits; remove SessionStart hook (claudesidian welcome)
- Delete 3 upstream commands (init-bootstrap, install-claudesidian, upgrade)
- Add risk/writes metadata to 14 remaining commands
- Rewrite README.md (remove all claudesidian content)
- package.json: name → my-vault, remove check-updates/firecrawl scripts
|
2026-09-26 11:41:32 +08:00 |
|
|
windyboy
|
b182762e14
|
refactor(vault): Phase 3 — metadata convergence
- Backfill `created` frontmatter on 266 active notes (git date or mtime)
- Normalize `status` to 4 values: draft/active/done/archived (11 notes)
- Active/进行中/needs-review → active
- archive → archived
- 待执行/conditional → draft
- 完成/accepted → done
- Declare clipper boundary: 04_Archive/Inbox-Clippings/** exempt from migration
- Update depth rule: max 3 → max 4 levels (new notes only)
- Add metadata-converge.mjs script for reproducibility
|
2026-09-26 11:37:19 +08:00 |
|
|
windyboy
|
1e3905d304
|
vault backup: 2026-02-25 16:53:37
|
2026-02-25 16:53:37 +08:00 |
|
|
windyboy
|
40f3fe3eb8
|
vault backup: 2026-01-05 14:26:17
|
2026-01-05 14:26:17 +08:00 |
|
|
windyboy
|
be7c6cdcc9
|
vault backup: 2026-01-05 13:03:55
|
2026-01-05 13:03:55 +08:00 |
|