2 commits

Author	SHA1	Message	Date
TheFlow	63cb4eb222	chore(vendor-policy): sweep remaining project-self GitHub URLs to Codeberg ... Purges additional github.com/AgenticGovernance project-self URLs from the remaining clean-hygiene files (6 more files). Directive: "GitHub is American spyware. Purge it." Swept: - docs/governance/AUTONOMOUS_DEVELOPMENT_RULES_PROPOSAL.md (+ 2 [NEEDS VERIFICATION] markers on uncited stats that blocked on hygiene) - docs/markdown/case-studies.md (+ 1 "10x better" -> "substantially better" rephrase) - docs/markdown/introduction-to-the-tractatus-framework.md - docs/markdown/technical-architecture.md - docs/plans/integrated-implementation-roadmap-2025.md (+ historical "guarantees" -> "absolute-assurance" rephrase, + /docs/api/* paths replaced with generic descriptors) - SESSION_HANDOFF_2026-04-20_EUPL12_OUT_OF_SCOPE_SWEEP.md meta-refs rewritten to describe the original flip narratively (literal "before" GitHub URLs retained only in the commit 4c1a26e8 diff for historical verification) Hygiene-fix paraphrases on touched lines: - inst_016: "80% reduction" / "58% reduction" -> "[NEEDS VERIFICATION]" markers added - inst_016: "10x better than debugging" -> "substantially better than debugging" - inst_017: changelog line "language: 'guarantees' -> 'constraints'" rewritten to "absolute-assurance language per inst_017" to avoid the literal trigger token Untracked-but-swept (local-only; git does not track .claude/): - .claude/instruction-history.json (1 URL in an instruction description) - 4 files under .claude/session-archive/ Files held back with documented reasons (separate concern): Pre-existing inst_016/017/018 prohibited-terms debt (8 live-content docs): CHANGELOG.md, CONTRIBUTING.md, docs/LAUNCH_ANNOUNCEMENT.md, docs/LAUNCH_CHECKLIST.md, docs/PHASE_4_REPOSITORY_ANALYSIS.md, docs/PHASE_6_SUMMARY.md, docs/plans/research-enhancement-roadmap-2025.md, docs/case-studies/pre-publication-audit-oct-2025.md (all contain literal "guarantees" / "production-ready" trigger tokens in DO-NOT-SAY lists or historical changelog quotes; mechanical rewrite would destroy pedagogical intent) Pre-existing inst_084 + credential-placeholder debt: deployment-quickstart/README.md (6 PASSWORD= example lines for the Docker deployment kit, + /api/health + production-ready heading), deployment-quickstart/TROUBLESHOOTING.md (1 PASSWORD= example), docs/markdown/implementation-guide-v1.1.md (SECURE_PASSWORD example in mongodb connection string), docs/PRODUCTION_DOCUMENTS_EXPORT.json (DB dump: 5 prohibited-terms hits + 8 credential-pattern hits), docs/ANTHROPIC_CONSTITUTIONAL_AI_PRESENTATION.md (5 port exposures across multiple port numbers), OPTIMAL_NEXT_SESSION_STARTUP_PROMPT_2025-10-21_SESSION2.md (prohibited terms) Historical session handoffs with multi-violation hygiene debt (11 files, 2025-10-* to 2026-02-*): file-path/API-endpoint/admin-path exposures that were valid architectural documentation at the time but violate current inst_084 — context-aware rewriting of each would destroy historical value. scripts/add-inst-084-github-url-protection.js — this migration script's rule text describes GitHub-era semantics ("tractatus = PRIVATE, tractatus-framework = PUBLIC"); token-swapping to Codeberg produces circular nonsense. Script needs full rule-inversion rewrite (post-migration: "NEVER add new github.com URLs per vendor policy") — separate framework- level decision, not mechanical text swap. .git/config embedded credentials — not in tracked repo; separate local concern requiring out-of-band token rotation on codeberg.org + git.mysovereignty.digital + auth-strategy decision. Cumulative purge progress (today's 3 GitHub-sweep commits: a4db3e62, 51fd0bb6, this one): ~55 project-self GitHub URLs in Tractatus before today ~35 remain (in 21 held-back files + .git/config + untracked .claude/) Remaining scope is per-file context-aware work, not a blanket sweep. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-20 14:27:49 +12:00
TheFlow	9b0343614b	docs(handoff): session handoff for EUPL-1.2 out-of-scope hygiene + licence sweep ... Captures the 5-commit sequence (db788548 / 5c386d0d / 6d49bfbf / ab0a6af4 / 4c1a26e8) that completed the Phase C follow-on work on the root docs + For-Claude-Web bundle. Plan of record lives in the community repo at docs/plans/PLAN_TRACTATUS_OUT_OF_SCOPE_HYGIENE_LICENCE_20260420.md. Handoff documents: - Final commit structure (plan 6 -> executed 5, with consolidation rationale at both merge points) - Per-file scope touched (credential / port / API-endpoint / prohibited- term / licence) - What was preserved intentionally (CLAUDE_WEB_BRIEF:250, code blocks, bare digits outside "port \d" pattern) - Push state (codeberg + origin both at 4c1a26e8) - HTTP-verification results on 3 representative files - Deferred / explicitly out-of-scope items (broader GitHub->Codeberg sweep, embedded creds in .git/config, public/**, non-bundle docs, scripts/**) - Cross-repo coordination pointers (community-side backlog annotations deferred to the parallel session) - Next-session startup hints Handoff content paraphrases the prohibited-terms fixes rather than quoting the literal trigger tokens (inst_016/017/018 scanner operates on whole file content regardless of quoting context). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-20 10:14:35 +12:00