Follow-up to #7 (same class of problem: hand-maintained prose drifting from reality).
CLAUDE.md: "18 hosts" was a stale hardcoded count (actually 20); reworded to not need updating as hosts are added. Also filled in a missing tailscale-exit-node in one build-type list that had it correctly everywhere else in the same file.
AGENTS.md: same missing tailscale-exit-node build type.
docs/auto-installer.md: the hand-enumerated lxc-* list was missing lxc-tailscale-exit-node.
flake-target-refactor-spec.md: added a "Status: implemented" note so this completed historical spec cannot be mistaken for an open plan with unresolved Open Questions.
remove-sensetive-info-refactor.md: the Definition of done checklist was entirely unchecked despite most of the work being done. This is what led to finding a real issue: a GitHub PAT had been committed in plaintext in flake.nix/common/home.nix (2025-07-16 to 2026-02-09), later migrated to sops-nix but never scrubbed from git history. That scrub has now been performed separately (git-filter-repo + force-push across all branches, verified content-identical, all confirmed on origin). Checklist updated to reflect actual status; credential rotation (an operator action against GitHub, not a repo change) is flagged as the one remaining open item.
Follow-up to #7 (same class of problem: hand-maintained prose drifting from reality).
- CLAUDE.md: "18 hosts" was a stale hardcoded count (actually 20); reworded to not need updating as hosts are added. Also filled in a missing tailscale-exit-node in one build-type list that had it correctly everywhere else in the same file.
- AGENTS.md: same missing tailscale-exit-node build type.
- docs/auto-installer.md: the hand-enumerated lxc-* list was missing lxc-tailscale-exit-node.
- flake-target-refactor-spec.md: added a "Status: implemented" note so this completed historical spec cannot be mistaken for an open plan with unresolved Open Questions.
- remove-sensetive-info-refactor.md: the Definition of done checklist was entirely unchecked despite most of the work being done. This is what led to finding a real issue: a GitHub PAT had been committed in plaintext in flake.nix/common/home.nix (2025-07-16 to 2026-02-09), later migrated to sops-nix but never scrubbed from git history. That scrub has now been performed separately (git-filter-repo + force-push across all branches, verified content-identical, all confirmed on origin). Checklist updated to reflect actual status; credential rotation (an operator action against GitHub, not a repo change) is flagged as the one remaining open item.
Same class of problem as the deployedTargets/README fixes: hand-maintained
prose that drifted from reality and nobody was obligated to update.
- CLAUDE.md: "18 hosts" was a stale hardcoded count (actually 20); reworded
to not need updating as hosts are added. Also added the missing
tailscale-exit-node build type to a list that had it everywhere else in
the file except one bullet.
- AGENTS.md: same missing tailscale-exit-node build type.
- docs/auto-installer.md: the hand-enumerated lxc-* list was missing
lxc-tailscale-exit-node.
- flake-target-refactor-spec.md: added a "Status: implemented" note so this
completed historical spec (referenced elsewhere purely for rationale)
can't be mistaken for an open plan with unresolved Open Questions.
- remove-sensetive-info-refactor.md: the "Definition of done" checklist was
entirely unchecked despite most of the work being done. Checked off what's
actually done (sops-nix migration, history scrub just performed, the
pre-commit gitleaks hook), and left rotation of the GitHub PAT found in
history explicitly flagged as the one still-open item -- an operator
action against GitHub, not something this repo can attest to itself.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-up to #7 (same class of problem: hand-maintained prose drifting from reality).