From b74ac175ca26299dc99d5770daf374706347faae Mon Sep 17 00:00:00 2001 From: verlyn13 Date: Fri, 14 Aug 2026 11:47:12 -0800 Subject: [PATCH] chore(docs): redact personal email from public documentation The address appeared in prose across public documentation on the default branch. Replaced with REDACTED-operator-google-account, which preserves the meaning of each sentence (which identity is in use) without publishing the identifier. Deliberately NOT changed: - allowed_signers principal in home/.chezmoidata.yaml. It is matched against the committer identity for SSH signature verification; changing it without also changing git user.email would break verification. - approved_by fields in policy data and their test fixtures. Those are audit records, and the fixtures must continue to match the policy. Scope note: this address is also the git author identity on every commit in this and other public repositories, so it remains publicly visible through commit metadata. Redacting the prose does not close that surface; changing user.email going forward would. --- docs/cloudflare-mcp.md | 2 +- .../device-admin/cloudflare-dns-handback-ingest-2026-05-14.md | 4 ++-- .../cloudflare-windows-multi-user-ingest-2026-05-15.md | 2 +- ...k-request-cloudflare-zero-trust-full-context-2026-05-16.md | 4 ++-- docs/google-admin-tooling.md | 4 ++-- .../2026-04-24-control-plane-broker-design.md | 2 +- ...2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/docs/cloudflare-mcp.md b/docs/cloudflare-mcp.md index 3a16a74..24ea0d3 100644 --- a/docs/cloudflare-mcp.md +++ b/docs/cloudflare-mcp.md @@ -79,7 +79,7 @@ instead of being preserved as user-added servers. ## Identity and scope -Interim OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B) per the +Interim OAuth identity is `REDACTED-operator-google-account` (Option B) per the operator Cloudflare admin identity decision. The target identity is `guardian@thenash.group` (Option C) after the Phase 2 Cloudflare account email migration lands. diff --git a/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md b/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md index fa6cf9a..8554f45 100644 --- a/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md +++ b/docs/device-admin/cloudflare-dns-handback-ingest-2026-05-14.md @@ -54,7 +54,7 @@ reply. ```text Cloudflare account: single account; owner - jeffreyverlynjohnson@gmail.com + REDACTED-operator-google-account Cloudflare team: same account; team name "homezerotrust"; team domain homezerotrust.cloudflareaccess.com @@ -127,7 +127,7 @@ Enrollment Access policies: Kid emails today: `axelptjohnson@gmail.com`, `ilagenevievemary@gmail.com`, `wynrjohnson@gmail.com`. -Adult emails: `jeffreyverlynjohnson@gmail.com`, +Adult emails: `REDACTED-operator-google-account`, `jakeshamus51@gmail.com`. All custom device profiles include `192.168.0.0/24` (home LAN) in diff --git a/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md b/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md index 6c58e7b..0eb7d5a 100644 --- a/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md +++ b/docs/device-admin/cloudflare-windows-multi-user-ingest-2026-05-15.md @@ -86,7 +86,7 @@ traffic by identity: | Windows account family | Registration identity | Target device profile | Notes | |---|---|---|---| -| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `jeffreyverlynjohnson@gmail.com` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. | +| `MAMAWORK\jeffr` and any intentional operator/admin account | Admin/adult identity, currently expected to be `REDACTED-operator-google-account` unless family-cloudflare says otherwise | Adults or a future Admin profile | Admin activity should not inherit Kids lock posture or kids-content controls. | | `MAMAWORK\ahnie` / Mama / Litecky Editing Services operator | Mama/Litecky identity, TBD | Adults, Litecky, or another adult-work profile | `ahnie` is an intentional local Administrator and must not be forced into Kids profile by the Cloudflare One Client cutover. family-cloudflare may need a policy-inputs update if the identity is not already in an adult/work group. | | Kid accounts (`axelp`, `ilage`, `wynst`, or corrected account names after operator confirmation) | Each kid's own Cloudflare identity | Kids profile | Kids profile remains locked and should continue to apply to the kids' school/learning sessions. | | Windows pre-login / no active user | Service-token registration if enabled | Headless/MDM or pre-login profile | Recommended for accurate baseline connectivity and to avoid stale previous-user attribution at the login screen. | diff --git a/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md b/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md index 15cf6e1..52e3447 100644 --- a/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md +++ b/docs/device-admin/handback-request-cloudflare-zero-trust-full-context-2026-05-16.md @@ -70,7 +70,7 @@ Cloudflare designer can finalize assignments. | Role | Name | Primary identity (preferred for Cloudflare auth) | Other identities | |---|---|---|---| -| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `jeffreyverlynjohnson@gmail.com` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) | +| Operator + family administrator | Jeff (Jefahnierocks) | `jeffrey@happy-patterns.com` (Happy Patterns business email) | `REDACTED-operator-google-account` (personal Google); `jjohnson47@alaska.edu` (academic — likely not appropriate for Cloudflare admin) | **Notes:** @@ -840,7 +840,7 @@ that answers, at minimum: 11. The operator-side identity inventory is now complete on the jefahnierocks side: - Jeff: `jeffrey@happy-patterns.com` (primary work); - `jeffreyverlynjohnson@gmail.com` (personal). + `REDACTED-operator-google-account` (personal). - Ahnie: `ahnielitecky@gmail.com` (jefahnierocks-managed Google identity). - Axel: `axelptjohnson@gmail.com`. diff --git a/docs/google-admin-tooling.md b/docs/google-admin-tooling.md index 745f172..04e8d17 100644 --- a/docs/google-admin-tooling.md +++ b/docs/google-admin-tooling.md @@ -36,8 +36,8 @@ The active local configuration is intentionally neutral: |--------|--------|---------|---------| | `thenash-guardian` | yes | `guardian@thenash.group` | unset | | `default` | no | `jeffrey@happy-patterns.com` | `happy-playground-463417` | -| `scopecam-production` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` | -| `scopecam-qa` | no | `jeffreyverlynjohnson@gmail.com` | `scopecam-qa` | +| `scopecam-production` | no | `REDACTED-operator-google-account` | `scopecam-qa` | +| `scopecam-qa` | no | `REDACTED-operator-google-account` | `scopecam-qa` | The Guardian config must not be bound to `scopecam-qa` or any Happy Patterns-owned project unless the operator explicitly asks for that project diff --git a/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md b/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md index 5c94e80..2cc4092 100644 --- a/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md +++ b/docs/host-capability-substrate/2026-04-24-control-plane-broker-design.md @@ -206,7 +206,7 @@ not change the broker's other contracts: requests, responses, and rollbacks The identity transition is also part of the baseline. The interim operator -OAuth identity is `jeffreyverlynjohnson@gmail.com` (Option B); the Phase C +OAuth identity is `REDACTED-operator-google-account` (Option B); the Phase C target identity is `guardian@thenash.group`, with the Cloudflare account email migration target date of 2026-07-15, per parent identifier `OPERATOR-CLOUDFLARE-ADMIN-IDENTITY-DECISION-2026-05-16.md`. The broker's diff --git a/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md b/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md index 90edcf5..5c71430 100644 --- a/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md +++ b/docs/host-capability-substrate/2026-05-29-tiers-snapshot-binding-metadata-fix-proposal.md @@ -13,7 +13,7 @@ priority: high **STAGED, NOT APPLIED.** This proposal does **not** change `policies/host-capability-substrate/tiers.yaml` bytes. That file is -operator-approved governance (`approved_by: jeffreyverlynjohnson@gmail.com`, +operator-approved governance (`approved_by: REDACTED-operator-google-account`, `approved_at: 2026-05-18T17:10:15Z`), so any byte change requires operator sign-off **and** a coordinated HCS snapshot re-vendor to keep the HCS generated snapshot byte-identical. This doc hands the operator the exact diff and the