diff options
| author | Craig Jennings <c@cjennings.net> | 2026-07-01 21:40:11 -0400 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-07-01 21:40:11 -0400 |
| commit | 909b21be04865da56f76b1ac5416c1bc97ba73d2 (patch) | |
| tree | ef748931d0f38143189fc19f748ac34fb05d467d /docs/design | |
| parent | 356b905db4a90dc2a89dc32f0beb2957b8a47518 (diff) | |
| download | rulesets-909b21be04865da56f76b1ac5416c1bc97ba73d2.tar.gz rulesets-909b21be04865da56f76b1ac5416c1bc97ba73d2.zip | |
fix(sweep): recognize anchored /.ai/ style; warn on publicly reachable tooling
sweep-gitignore-tooling.sh decided gitignore-mode with an exact unanchored match on `.ai/`, so a project using the anchored `/.ai/` form was misclassified as track-mode and silently skipped — which left .emacs.d's tracked tooling on a public GitHub mirror until its 2026-06-30 scrub. Both forms now count for mode detection and per-pattern presence, and appended lines follow whichever style the file already uses.
Track-mode projects also get a new check: tracked tooling paths combined with a non-cjennings.net remote draw a loud WARN, since a track-mode repo on a public host is the exposure the convention exists to prevent. The convention itself is now written down in protocols.org: a non-cjennings.net remote means the tooling set is gitignored, a deliberate team-shared config being the only explicit exception, and a private remote is not proof of privacy because a server-side mirror hook republishes invisibly.
From the .emacs.d handoff (2026-06-30 tooling-exposure broadcast).
Diffstat (limited to 'docs/design')
0 files changed, 0 insertions, 0 deletions