archipelagoandClaude Opus 5
6542f7f736
Open-source readiness plan, Phase 1 items 3 and 5. Item 3 turned out to be far narrower than the plan's "93 files" once each hit was classified rather than bulk-replaced. Sanitized only genuine operator identifiers: - FIPS test fixtures and a pine_ha comment carried real node LAN addresses -> RFC 5737 TEST-NET-1, the convention already used elsewhere in this repo. - Real tailnet addresses in fips/endpoints.rs, mock-backend.js and the mesh test runner -> the base of the CGNAT range, obviously synthetic. - Incident comments in appgate/mod.rs and apps/fedimint/manifest.yml named a specific node; the role is what carries the meaning, so the address is gone. - CHANGELOG.md held five real addresses in published release notes — the most exposed of the lot. Deliberately NOT touched, because the plan's item-3 list is over-broad and following it literally would break working code: - 192.168.1.1 / .254, 192.168.0.0/16 and 100.64.0.0/10 are generic router defaults, RFC1918 classification in backup_rpc, and CGNAT range logic in pine_ha / CompanionIntroOverlay. Not leaked infra. - `tx1138` is listed as a hostname to scrub but is two live things: the user-facing default block explorer (`DEFAULT_TX_EXPLORER`) and `RETIRED_TX1138_HOST`, the migration constant whose entire job is stripping that retired registry from existing nodes' saved mirror lists. Scrubbing either breaks a feature. The plan needs this correction. - Android's `192.168.1.100` strings are UI placeholder text. Item 5: added *.key, *.pem, id_rsa*, *.sqlite, *.db to .gitignore, with a negation for core/archipelago/src/appgate/testdata/*.key. Checked those first — they are documented throwaway TLS fixtures compiled in via include_bytes!, not node identity — and the negation stops the new rule silently dropping them if they are ever regenerated. Verified both directions: fixtures not ignored, a stray key elsewhere caught. Verified: residual grep for real infra addresses is clean; audit-secrets.sh still 5/5; app-catalog drift 0 (the fedimint edit is a YAML comment, which does not survive parsing into the signed catalog); 44/44 fips tests pass with the rewritten assertion fixtures. Note: these test runs shared the working tree with another agent's in-flight LND work, which was present but unstaged and is not part of this commit. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
162 lines
4.0 KiB
Plaintext
162 lines
4.0 KiB
Plaintext
# SSH keys and sandbox copies
|
|
.ssh/
|
|
|
|
# Rust build output
|
|
target/
|
|
**/target/
|
|
|
|
# Node.js
|
|
node_modules/
|
|
**/node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
pnpm-debug.log*
|
|
|
|
# Build outputs
|
|
dist/
|
|
dist-ssr/
|
|
build/
|
|
*.local
|
|
|
|
# Vite build cache
|
|
neode-ui/.vite/
|
|
|
|
# IDE / editor
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
.DS_Store
|
|
._*
|
|
Thumbs.db
|
|
|
|
# Environment and local overrides
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
.env.production
|
|
core/.env.production
|
|
scripts/deploy-config.sh
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
|
|
# Testing
|
|
coverage/
|
|
.nyc_output/
|
|
|
|
# Image / release artifacts
|
|
*.iso
|
|
*.img
|
|
*.dmg
|
|
*.app
|
|
*.apk
|
|
*.keystore
|
|
*.s9pk
|
|
*.tar.gz
|
|
|
|
# Release artifacts live in release attachments, not Git history.
|
|
releases/**
|
|
!releases/
|
|
!releases/manifest.json
|
|
# The signed app catalog and the registry trust floor are source, not build
|
|
# output: nodes fetch the catalog from this path on main, and the floor is what
|
|
# scripts/check-catalog-registry-trust.py checks it against. Both were being
|
|
# swallowed by the rule above — app-catalog.json only stayed tracked because it
|
|
# predates it.
|
|
!releases/app-catalog.json
|
|
!releases/registry-trust-floor.json
|
|
|
|
# Image recipe output
|
|
image-recipe/output/
|
|
image-recipe/*.iso
|
|
image-recipe/*.img
|
|
|
|
# Loop tool artifacts
|
|
*/loop/
|
|
loop/loop/
|
|
loop/loop.log.bak
|
|
|
|
# Separate repos nested in tree
|
|
web/
|
|
|
|
# Resilience harness reports contain session cookies.
|
|
scripts/resilience/reports/
|
|
|
|
# Codex / pnpm / python caches / editor backups
|
|
.codex
|
|
.codex-target-*/
|
|
.codex-tmp/
|
|
.claude/
|
|
.pnpm-store/
|
|
|
|
# Key material and local databases — belt-and-braces so a stray key or a
|
|
# copied node database can never be committed. Open-source readiness plan,
|
|
# Phase 1 item 5: `.claude/settings.local.json` was previously only caught by
|
|
# a machine-global ignore rule, which protects one machine and no contributor.
|
|
*.key
|
|
*.pem
|
|
id_rsa*
|
|
*.sqlite
|
|
*.sqlite3
|
|
*.db
|
|
|
|
# ...except the throwaway TLS fixtures the appgate tests compile in via
|
|
# include_bytes!. They are documented non-identity material (see that
|
|
# directory's README) and are already tracked; the negation stops the rule
|
|
# above from silently dropping them if they are ever regenerated.
|
|
!core/archipelago/src/appgate/testdata/*.key
|
|
**/__pycache__/
|
|
*.bak
|
|
|
|
# Local evidence screenshots; intentional UI screenshots should live under an
|
|
# app/docs asset path with a descriptive filename.
|
|
Screenshot *.png
|
|
uploads/
|
|
|
|
# ── Local-only material ─────────────────────────────────────────────────────
|
|
# Present on disk, never tracked: everything describing Archipelago's own
|
|
# infrastructure or internal development process. The repo is source code and
|
|
# guidelines only. Inventory: .local-only/manifest.txt — wipe: .local-only/wipe.sh
|
|
/.local-only/
|
|
/.planning/
|
|
/loop/
|
|
/docs/operations-runbook.md
|
|
/docs/hotfix-process.md
|
|
/docs/PRODUCTION-MASTER-PLAN.md
|
|
/docs/UNIFIED-TASK-TRACKER.md
|
|
/docs/FIPS-UPTIME-AND-UI-STATE-PLAN.md
|
|
/docs/HANDOFF-2026-07-20-fips-peer-files.md
|
|
/docs/HANDOFF-2026-07-23-companion-apk-deploy.md
|
|
/docs/qr-scanner-snappiness-handover.md
|
|
/docs/RETICULUM-TRANSPORT-PROGRESS.md
|
|
/docs/combined-test-plan-2026-07-22.md
|
|
/docs/pine-voice-release-test-plan.md
|
|
/docs/OPEN-SOURCE-READINESS-PLAN.md
|
|
/docs/archive/HANDOVER-2026-07-02-iso-feedback.md
|
|
/docs/archive/SESSION-1.8.0-OTA-PROGRESS.md
|
|
/docs/security/KEY-02-FLEET-ROTATION.md
|
|
/docs/security/KEY-03-SIGNING-POSTURE.md
|
|
/tests/production-quality/TRACKER.md
|
|
/scripts/deploy-config-defaults.sh
|
|
/scripts/deploy-tailscale.sh
|
|
/scripts/deploy-to-target.sh
|
|
/scripts/setup-target-dev.sh
|
|
/scripts/setup-aiui-server.sh
|
|
/scripts/setup-https-dev.sh
|
|
/scripts/debug-frontend.sh
|
|
/scripts/node-profile.sh
|
|
/scripts/fleet-fips-pair.sh
|
|
/scripts/fleet-fips-unpair.sh
|
|
/image-recipe/sync-from-live.sh
|
|
/docs/security/PHASE-10-VERIFICATION-GUIDE.md
|
|
/docs/security/KEY-01-ON-NODE-VERIFICATION.md
|
|
/docs/security/KEY-02-ROOTFS-EVIDENCE.md
|
|
/docs/security/ENTROPY-SEED-AUDIT-2026-07-31.md
|
|
/image-recipe/INTEGRATION-GUIDE.md
|
|
/docs/multinode-testing-plan.md
|
|
/docs/bitcoin-version-bulletproof-rollout.md
|