docs: a status handoff for picking Miranda up cold - #116
Conversation
Records where the project stands after the beta build-out, the invisible-tmux redesign and G1 sharing; names the next goal (carry herdr as a second engine) with the measured findings and the decisions still open; and lists the traps that have already cost time so they cost none again. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KeiotDVE94wEzvc7wcvm1y
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f743f07d4c
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - [#19–#23](https://github.com/srcfl/miranda/issues) from an earlier security | ||
| review: SAS width, registration-proof squat window, non-root agent, an | ||
| RP-ID overstatement in SECURITY.md, and a residual TOCTOU in `redeploy.sh`. |
There was a problem hiding this comment.
When a contributor uses this handoff to select security work, this entry incorrectly presents all of #19–#23 as open. Commit 8009839 explicitly fixed #21–#23: mir up now refuses root in go/internal/cli/agent_cmds.go, the RP ID is scoped to the exact host in web/src/rp.js, and deploy/lightsail/redeploy.sh closes #23's install-time TOCTOU using verified root-only staging. List only the issues that remain unresolved so work is not duplicated and the security status is accurate.
Useful? React with 👍 / 👎.
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
1 participant
docs/status.md: where things stand, what comes next (the herdr engine seam, with the measured findings and the five open decisions), what is waiting on Fredrik, the open backlog, how this repo has been worked, and the traps that have already bitten us.CLAUDE.md now points at it, so any agent starting cold reads it first.
Part of #107.
🤖 Generated with Claude Code
https://claude.ai/code/session_01KeiotDVE94wEzvc7wcvm1y
Note
Low Risk
Documentation-only; no application, relay, or crypto behavior changes.
Overview
Adds
docs/status.mdas the first-read handoff for anyone (especially agents) picking Miranda up cold: current release/deploy state, shipped feature snapshot, the herdr second-engine roadmap with measured pros/cons vs tmux, five open product decisions, Fredrik blockers, backlog pointers, repo workflow norms, and documented foot-guns.CLAUDE.mdnow steers cold starts to that file and listsdocs/status.mdunder Layout. No runtime or crypto changes.Reviewed by Cursor Bugbot for commit f743f07. Bugbot is set up for automated code reviews on this repo. Configure here.