SP09 preflight — contract check, conflict scan, 12 rulings
KBService publishes on its own NATS connection (no nats.enabled); the AI turn limit reads SP03's resolved limits and the guard is not its own transaction; SELF_...
SP06 preflight — contract check, conflict scan, 14 rulings
Handoff refusals carry reason (SP02 reads it); every TASK_* source id starts with <itemId>: (SP10 wake mapper fixed); KBService keeps its own NATS connection; t...
SP07 preflight — contract check, conflict scan, 8 rulings
EventRequest guests/reminders accept an echoed EventDto (SP05 calendar tools; master §11 row), meeting routes read occurrence keys as their series, compile/anch...
Image bubbles draw a 480px preview; the lightbox keeps the original
A chat image is drawn at most 240x240 CSS px and the bubble downloaded the whole original to do it — 3-8 MB per phone photo, per viewer. AttachmentChip now draw...
Signature icons reach the recipient as small PNG parts
The signature's social-network icons, contact-line icons and header decorations are percent-encoded SVG data: URIs. extractInlineImages only decodes base64, so ...
Draw logos from the server's pre-sized variants, never the multi-MB original
A member saw the org header logo small in the composer but a >3 MB image in the sent mail: every logo surface linked `img/logo-full.svg` / `img/logo.svg`, which...
Draw member photos at the variant their size calls for
Every uploaded member photo has _sm (50px), _md (150px) and _lg (350px) beside the original, but surfaces picked them ad hoc: MemberAvatar drew _sm up to 40px (...
SP00-T46 ship ruling — Scylla needs --reserve-memory 768M for --memory 3G to fit in 4Gi
SP00-T49 fix round 1 — the kamo node password goes on the owner checklist
Task 52 Step 9 gains item 4: rotate the kamo node password, after Task 49 Step 3 and followed by a memory update. The item lists every copy that a value-keyed s...
SP00-T22 ship ruling — RingCentral's verificationToken cap is 32 characters; follow-up c43ec04
SP00-T46 rulings — Scylla's init container makes the pod Guaranteed; libretranslate rolls one pod at a time
SP00-T49 rulings — the worldgen agent's unit is installed before its env file; NATS violation checks grep what the server logs
Task 49 Step 3 now deploys universe-earthdata's unit on k3m1 (the live one points at 127.0.0.1 and reads no env file), logs in as kamo@k3m1, and carries its own...
Own NATS login
kamo-internal's three NATS connections (org changes, worldgen, world live) present svc_kamo_internal from the nats-user-kamo-internal Secret instead of the shar...
SP00-T44 fix round 1 — the OTA step reads memory only through a value-keyed redactor, and never under set -x
Phase A printed the node password twice, reading two memories the step cites. Step 3 now sources a preamble that holds commands only, reads memory through memre...
SP00-T21 ship ruling — the KB backlog catch-up is blocked by the embedding model's sizing; parked
A socket's one-time key is not a sign-in hand-off
Since 46191c47 every browser WebSocket authenticates with ?otk=<key>. The EmailService sockets connect through the same-origin /email-ws rewrite, so they pass t...
SP00-T31 ruling — the eleven MLOS repos roll back without restoring the unbuildable 1.6.0 pin
New mail shows on /messages as soon as the badge counts it
The badge and the list hear the same socket, and EmailService relays every arrival (verified on NATS: email.changed ARRIVED from both pods, then the unread snap...
SP00-T23 plan text — the event gate sits behind EventRequest.invitesByEmail(); tests beside the brief's
SP00-T45 ruling — the rollback deletes the Qdrant NetworkPolicy; the network check needs curl's 000
SP00-T23 ruling — a calendar save needs a seat only when it invites by email; SP07/SP08 keep the seat gate
SP00 plan — log checks read every line (kubectl logs -l prints only the last 10)
Task 29's daemon and compute checks and Task 45's RAG check now pass --tail=-1. With a label selector, kubectl logs defaults to the last 10 lines, so the daemon...
SP00-T43 ruling — the envelope test follows the selectable path; AiModel comment; build @kamo/net before the RED run
SP00-T42 ruling — the help-center import Usage block reads the Redis login
The Redis login
The pod logs in to Redis as the platform ACL user (Secret redis-auth: REDIS_USERNAME, REDIS_PASSWORD), which app/lib/redis.ts already reads, so sign-in keeps wo...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.