From df8dbce47bdff1e8211d5865b4b97f95c17a30b9 Mon Sep 17 00:00:00 2001 From: Craig Jennings Date: Thu, 2 Jul 2026 01:30:51 -0400 Subject: chore: archive processed broadcast notes to the outbox --- .../outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 assets/outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt (limited to 'assets/outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt') diff --git a/assets/outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt b/assets/outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt new file mode 100644 index 0000000..6f62d17 --- /dev/null +++ b/assets/outbox/2026-07-01-2143-from-rulesets-archsetup-tooling-note.txt @@ -0,0 +1,5 @@ +Security check from rulesets — action needed: your CLAUDE.md is tracked. + +Same broadcast as the tooling-check note also in your inbox, plus a project-specific finding: archsetup is gitignore-mode (anchored /.ai/ style) but CLAUDE.md is currently TRACKED in git. The fixed sweep just added /CLAUDE.md and /AGENTS.md to your .gitignore, but an ignore line never untracks an already-tracked file. + +Action: git rm --cached CLAUDE.md (keeps the file on disk), then commit. Your only remote is private cjennings.net, so no public exposure is known — but verify with Craig that the bare repo carries no mirror hook, since .emacs.d's exposure rode exactly that. -- cgit v1.2.3