Docs pass: ARCHITECTURE.md, SYNC.md and the site are behind the code #80

New issue

Closed

opened 2026-07-30 04:28:20 +00:00 by Cordy · 0 comments

Cordy commented

2026-07-30 04:28:20 +00:00

Owner

Done across all repos. Every edit was applied by an asserted splice job (anchor count == 1, post-condition markers checked) after reading the real source, not from memory.

Cairn (PR #84): ARCHITECTURE.md §5.4 renamed to "Authorization and data governance" and given read-only spaces (#64), audit logging (#61), legal holds (#63), retention + trash auto-purge (#63/#77); the decorator order is now documented — and corrected: verifying against cmd/cairnd/main.go showed it is base → encrypt → quota → trash → hold → audit → scope, i.e. audit above trash and hold under audit (my prior notes had "hold → audit → trash", which was wrong). §7 gained the admin/audit + admin/holds endpoints and the stale "quota enforcement pending" line was fixed. §9 documents the shipped --target=all|api|crypto split. §10 milestones updated. README gained a Data-governance bullet.

cairn-license-server (PR #10): endpoint table now lists the org, invite, password-reset, receipts, label, and change-password routes — paths copied verbatim from the mux.HandleFunc registrations. Config gained PADDLE_API_KEY + the SMTP_* set with the degrade-quietly behaviour. Webhook row notes subscription renewal refreshes the same license; data model documents the orgs/invites maps.

cairn-site (PR #2): account.html description in the README now covers organizations, receipts/billing, and password self-service; the stale "Docs section" launch-TODO is marked done. docs.html config reference gained an audit row, the -ro read-only-group note, and retention/auto-purge on the trash row.

SYNC.md: reviewed in full — accurate to current behaviour (app passwords, .249, per-user homes). No change needed; the "interop matrix" mentioned in this issue doesn't actually live there.

Deliberately out of scope, flagged not fixed: ARCHITECTURE.md §4.3 still carries pre-implementation "design task before any implementation" encryption bullets that contradict its own (correct) implemented intro. Separate cleanup — didn't touch it blind.

Spent one-shot inspection/splice workflows were removed from all three repos afterward.

Done across all repos. Every edit was applied by an asserted splice job (anchor count == 1, post-condition markers checked) after reading the real source, not from memory. **Cairn** (PR #84): ARCHITECTURE.md §5.4 renamed to "Authorization and data governance" and given read-only spaces (#64), audit logging (#61), legal holds (#63), retention + trash auto-purge (#63/#77); the **decorator order** is now documented — and corrected: verifying against `cmd/cairnd/main.go` showed it is `base → encrypt → quota → trash → hold → audit → scope`, i.e. audit *above* trash and hold *under* audit (my prior notes had "hold → audit → trash", which was wrong). §7 gained the `admin/audit` + `admin/holds` endpoints and the stale "quota enforcement pending" line was fixed. §9 documents the shipped `--target=all|api|crypto` split. §10 milestones updated. README gained a Data-governance bullet. **cairn-license-server** (PR #10): endpoint table now lists the org, invite, password-reset, receipts, label, and change-password routes — paths copied verbatim from the `mux.HandleFunc` registrations. Config gained `PADDLE_API_KEY` + the `SMTP_*` set with the degrade-quietly behaviour. Webhook row notes subscription renewal refreshes the same license; data model documents the `orgs`/`invites` maps. **cairn-site** (PR #2): `account.html` description in the README now covers organizations, receipts/billing, and password self-service; the stale "Docs section" launch-TODO is marked done. `docs.html` config reference gained an `audit` row, the `-ro` read-only-group note, and retention/auto-purge on the trash row. **SYNC.md:** reviewed in full — accurate to current behaviour (app passwords, `.249`, per-user homes). No change needed; the "interop matrix" mentioned in this issue doesn't actually live there. **Deliberately out of scope, flagged not fixed:** ARCHITECTURE.md §4.3 still carries pre-implementation "design task before any implementation" encryption bullets that contradict its own (correct) implemented intro. Separate cleanup — didn't touch it blind. Spent one-shot inspection/splice workflows were removed from all three repos afterward.