The escape-sequence pitfall had lost its own example on the way: the
backslash-u002d sequence landed decoded as a plain dash. It is written
back with the backslash built by chr(92) and checked with od -c.
The script's docstring no longer lists the environment and log-line
triggers dropped during calibration, and AUTH no longer matches
timingSafeEqual and createHash, which the Haut table does not name.
Replay unchanged: 20 haut out of 31.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The host side of the backups-pull mount is /srv/vps-health-api/backups-pull
(docker inspect, 2026-10-19), and the three mounts marked "to set up" are
in place. The test list gains agent-pg-backup-pull.test.js, missing until
now. REVIEW.md stated the rotation was anchored on the workstation's date:
it is anchored on the newest valid backup not after today.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
REVIEW.md sets the review level of a PR from the files it touches
(routing and auth, write surfaces, image, workstation agents, CI and
guards), the rules of each zone with their source, the verification
commands and the review pitfalls. scripts/review-levels.py replays the
levels on the 31 PRs that reached main and checks, offline, that its
patterns match the Haut table.
CLAUDE.md said "no auto-deploy": since 2026-10-12 a push to main
redeploys through the Forgejo webhook. The Deploy section now says so
and points to REVIEW.md.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
