From ede40018993a950830c3f3f0d55c58cc2d7b187a Mon Sep 17 00:00:00 2001 From: Mikko Numminen Date: Thu, 16 Jul 2026 18:22:53 +0300 Subject: [PATCH 1/2] chore: ignore local poro-findings.pdf export; record TODO #9 (deploy) done The canonical Poro findings are docs/poro-findings.md; the root PDF is a personal export, so gitignore it rather than track a binary. Also commits the already-recorded TODO item #9 (rebuild+restart to pick up the #58/#59 demoted-content fixes, verified live 2026-07-15). --- .gitignore | 4 ++++ docs/TODO.md | 1 + 2 files changed, 5 insertions(+) diff --git a/.gitignore b/.gitignore index 68e8adb..9ed9dc4 100644 --- a/.gitignore +++ b/.gitignore @@ -24,3 +24,7 @@ dist/ .feedctl/ node_modules/ .testbld/ + +# Local doc-export artifact: the canonical Poro findings live in +# docs/poro-findings.md; the root PDF is a personal export, not a tracked file. +/poro-findings.pdf diff --git a/docs/TODO.md b/docs/TODO.md index 4781447..080cddb 100644 --- a/docs/TODO.md +++ b/docs/TODO.md @@ -13,3 +13,4 @@ session task list; this file is the durable copy. | ~~6~~ | ~~5-minute demo rehearsal on a fresh seed (`docs/demo-script.md`)~~ **DONE 2026-07-07** | — | — | | ~~7~~ | ~~Announce a GPU window for the full LIVE run-through~~ **DONE 2026-07-04** — live loop verified end to end (see CLAUDE.md run-through status); the keyword-free alert-nomination case still waits for the real corpus | — | — | | 8 | Maintenance watch: bump `SQLitePCLRaw.bundle_e_sqlite3` when upstream ships SQLite ≥ 3.50.2 (GHSA-2m69-gcr7-jv3q has no patched version as of 2026-07-03; exposure assessed low — see docs/audits/dotnet-2026-07-03.md) | upstream release | clean vulnerability scan | +| ~~9~~ | ~~Rebuild + restart the local API/desk instance to pick up the merged demoted-content fixes (PRs #58/#59)~~ **DONE 2026-07-15** — `feedctl down` → rebuild API → `feedctl up`; verified live on `/live/report` (Yhteenveto rated-only, moderation buckets count-only with no trend) | — | — | From 925d8ac13a58f3ad12f2fd6a6fff90cedcdcdb0d Mon Sep 17 00:00:00 2001 From: Mikko Numminen Date: Thu, 16 Jul 2026 18:35:48 +0300 Subject: [PATCH 2/2] =?UTF-8?q?docs:=20mark=20TODO=20#8=20(SQLite=20securi?= =?UTF-8?q?ty=20watch)=20done=20=E2=80=94=20resolved=20by=20#55?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bundled SQLite is now 3.50.4 (>= 3.50.2), clearing GHSA-2m69-gcr7-jv3q. --- docs/TODO.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/TODO.md b/docs/TODO.md index 080cddb..cc1e5c5 100644 --- a/docs/TODO.md +++ b/docs/TODO.md @@ -12,5 +12,5 @@ session task list; this file is the durable copy. | ~~5~~ | ~~Review `docs/mock-data-register.md`; approve each replacement/retirement~~ **DONE 2026-07-07** | — | — | | ~~6~~ | ~~5-minute demo rehearsal on a fresh seed (`docs/demo-script.md`)~~ **DONE 2026-07-07** | — | — | | ~~7~~ | ~~Announce a GPU window for the full LIVE run-through~~ **DONE 2026-07-04** — live loop verified end to end (see CLAUDE.md run-through status); the keyword-free alert-nomination case still waits for the real corpus | — | — | -| 8 | Maintenance watch: bump `SQLitePCLRaw.bundle_e_sqlite3` when upstream ships SQLite ≥ 3.50.2 (GHSA-2m69-gcr7-jv3q has no patched version as of 2026-07-03; exposure assessed low — see docs/audits/dotnet-2026-07-03.md) | upstream release | clean vulnerability scan | +| ~~8~~ | ~~Maintenance watch: bump `SQLitePCLRaw.bundle_e_sqlite3` when upstream ships SQLite ≥ 3.50.2 (GHSA-2m69-gcr7-jv3q)~~ **DONE 2026-07-16** — Dependabot PR #55 bumped `SQLitePCLRaw.bundle_e_sqlite3` 2.1.\* → 3.0.\* (and `Microsoft.Data.Sqlite` 8.\* → 10.\*); verified the bundled SQLite is **3.50.4** (≥ 3.50.2, clears the GHSA), full suite green on net8.0 | — | — | | ~~9~~ | ~~Rebuild + restart the local API/desk instance to pick up the merged demoted-content fixes (PRs #58/#59)~~ **DONE 2026-07-15** — `feedctl down` → rebuild API → `feedctl up`; verified live on `/live/report` (Yhteenveto rated-only, moderation buckets count-only with no trend) | — | — |