3 Commits

Include renames

Author	SHA1	Message	Date
Pouya LajevardiandClaude Opus 5	99889a3491	feat: rule Q63 in three limbs; take the human headcount off /legal/privacy/; close R10; ratify /med-arb/ ... Pouya's rulings, 2026-09-02. Q63(a) — wording approved with two trims: the editorial closing sentence is struck, and the mailbox clause is rewritten per (b). Q63(b) — info@smlcompany.ca is a delegated mailbox read by Pouya and by administrative staff. The page said "anyone who can reach that mailbox"; it now says who. The answer reached four sentences, not the one the ruling named, in three sections: "my mailbox" had been written as a personal one throughout. Q63(c) — the account root credential is held by Pouya, has no programmatic key and carries MFA. The page now states the first two. And the answer to (c) took the human headcount off the page. His attestation: "two people is an exaggeration... a handful is accurate — the simulation counts identities, not humans, and the two are not the same claim." The enumeration was exhaustive and the inference off it was not: two IAM identities is a LOWER BOUND on people and was published as an exact count. The page now attributes read access to "the account's administrators — me, and the small number of people who administer it with me", and the false inference is corrected at its source in docs/reference/intake-table-access-verification.md as well as on the page. R10 — CLOSED on a fresh one-line confirmation, not on the 2026-08-28 stamp. ADRIC, ADRIO, the three OBA sections and the CTF all current. Re-stamped on all four stamp-bearing sites; the row stays live, because its trigger is an event. /med-arb/ — ratified as shipped, no credential line restored. His note for the record: med-arb is a service he provides, not a designation. The tripwire is unchanged and proven both ways: exit 0 on the revised page, exit 1 with 5 matches on the pre-correction bytes rebuilt from bd282aa. A sentence added to back the correction had no command behind it. "The table carries no policy of its own granting access to anyone" was published with nothing in the repo establishing it — a DynamoDB resource policy is invisible to describe-table, and every simulation on file asks what a principal may do. Measured rather than deleted: get-resource-policy returns PolicyNotFoundException, and describe-organization returns AWSOrganizationsNotInUseException, which is what makes the Identity Center zero conclusive rather than merely local. Both recorded as commands 7 and 8; R21 gains claim (v) and two falsifiers. Q64 OPENED, with a TODO(pouya) and an unticked cutover item: "I hold it" is true whether or not a second person holds it, and reads as sole custody one paragraph below "the small number of people who administer it with me". The request to strike the possessive now is declined with a reason — he dictated the clause — and the page cannot ship while the TODO stands. Two review rounds, 22 findings, 21 resolved, 1 declined. Nine of round 2's twelve were defects in round 1's own repairs. Stopped at two per D19. Gates, exit status read: check 0 · build 0 (23 pages) · check:claims 0 · og:proof 0 · check:intake 0 · lint 0 · router.test 0 (30/30) · lighthouse 0, worst of 23 99/100/100/100, /legal/privacy/ 100/100/100. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Md3GndFqWPzK78xAoebsg5	2026-09-02 11:00:15 -04:00
Pouya LajevardiandClaude Opus 5	6aaf089b05	feat: rule Q62 by stating the truth; strike the /med-arb/ gloss; re-stamp R18 ... Pouya's four rulings of 2026-09-01, applied 2026-09-02. Q62 — RULED "state the truth", not "remove the access". /legal/privacy/ now says two people can read the intake table, names their role, and adds the two stronger facts the false sentence had crowded out: the handler role holds PutItem only, and adr-sml-deploy is implicitDeny on all seven read and write actions. Wording is subject to Pouya's read-through — Q63(a), with a TODO(pouya) beside the copy. The ruling named one sentence; a vocabulary sweep found the falsehood in three places, and the audit then found two more. Five paragraphs now answer "who can see it" and change together. The tripwire stays permanently, per ruling, and grew from two alternatives to five. Every alternative is one string that reached dist/. Proven both ways against the pre-correction page rebuilt from bd282aa: exit 1 with 5 matches at dist/legal/privacy/index.html:54,67,67,68,72; exit 0 on the corrected page, self-test 12 patterns / 36 approved strings. /med-arb/ — the gloss is struck with no replacement, per ruling. The strike left "the section above" pointing at the ADRIC rule set and "the agreement" with no antecedent; both fixed. The bare designations line sitting under ADRIC's quoted competence requirement is also struck, which goes beyond the ruling and is flagged for Pouya. R18 — re-stamped, two-tier: (a)(c)(d) re-verified against a source, (b)(e)(f)(g) held on a cadence judgement. All seven hold, no shipped sentence changed. R18's trigger had NO cutover checklist item and had stamped five extracts of seven; both fixed. Candidate limb (h) flagged. R10 — fired and unsatisfied; left open on instruction. The evidence behind the new privacy sentence was weaker than the sentence. Re-measured: 33 of 33 roles simulated (23 of 26 carried inline policies nobody had read; the two CDK lookup roles can read the table), four trust policies, the CloudFormation escalation path for all five users, 0 federated providers, root recorded. Every read path terminates at the same two people. Two review rounds, 36 findings. 35 fixed, 1 declined. Five of round 2's were defects in round 1's own fixes; stopped at two per D19. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Md3GndFqWPzK78xAoebsg5	2026-09-02 07:59:50 -04:00
Pouya LajevardiandClaude Opus 5	bd282aa47d	feat: production run — Q61 ramp, /404/, CloudFront router, cutover runbook ... Five items of Pouya's production run, 2026-09-01. Q61 — scroll-padding-top becomes a max() ramp on `10lh - 83px`, with the plain calc() first as the fallback for engines without `lh`. Hidden focus stops under minimumFontSize=32: 290 of 1,455 -> 0, control build still 290. Default settings byte-identical (0 differences over 352 page-widths x 17 fields). The 12 residual cells at minimumFontSize=16/20 are pre-existing and unchanged-or-better; reported, not widened, per instruction. Intake backend + CloudFront — docs/09-cutover-runbook.md is the copy-paste sequence for admin execution: every command followed by its verification and expected output, rollback per part, and Part 10 is Q60's TTL test. infra/cloudfront/router.js is the trailing-slash function (30-case suite; 8 fail against the pre-review version, incl. a protocol-relative open redirect). infra/cloudfront/configure.mjs is dry-run-by-default and idempotent. scripts/intake-env.mjs emits the six Lambda env vars from src/data/site.ts. Four launch blockers found by reading the running system: - handler.mjs wrote pk/sk; the live table's key is submissionId with no sort key, so every submission would have failed validation silently - the Lambda invoke permission is scoped to the old route path - 22 of 23 pages 403 without the router function - there was no 404 page; src/pages/404.astro adds it Claims audit (D20 cutover pass) — five gloss over-reaches corrected on /practice/energy/, /practice/insurance/ (x2), /practice/technology/ and /med-arb/. Three findings left open for Pouya: Q62, the /med-arb/ gloss, and Q60. Q62 — one frozen-tripwire pattern added under the freeze's own breach exception, with a probe and four negative fixtures. check:claims exits 1 until the false /legal/privacy/ sentence is corrected, so both deploy paths are blocked by a mechanism rather than by memory. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Md3GndFqWPzK78xAoebsg5	2026-09-02 06:52:20 -04:00