diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-20 07:27:16 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-20 07:27:16 -0500 |
| commit | f5c571712834c87615a040b2901fc3a21e4a98aa (patch) | |
| tree | 46708b4e2e3c0c2b725be83b2f27828f157fbdb0 /working/clock-display-references/README.org | |
| parent | 25f16a8f995cad5c6edc8050c3b17b7fbab2ff95 (diff) | |
| download | archsetup-f5c571712834c87615a040b2901fc3a21e4a98aa.tar.gz archsetup-f5c571712834c87615a040b2901fc3a21e4a98aa.zip | |
docs: log overnight code audit and file triaged installer bugs
Overnight sentry ran its hygiene passes plus a code-inspection pass over the installer and the scripts/ directory. It archived 6 completed tasks to Resolved and logged 19 bugs and 12 refactors in docs/design/2026-07-19-sentry-code-findings.org. I filed the bugs as tasks graded by severity times frequency. Nothing in the codebase changed, this was detection only.
Two things stand out. The installer does no partitioning (it's a post-install config layer), so the real data-loss surface is boot config, and it overwrites GRUB_CMDLINE wholesale, which can drop a cryptdevice or resume param and leave a machine unbootable. Three WireGuard configs with live private keys are tracked in git, flagged for a rotate-or-keep decision.
Diffstat (limited to 'working/clock-display-references/README.org')
0 files changed, 0 insertions, 0 deletions