From c8c1daf763bc94d77776007669a8fd5bee8eca0c Mon Sep 17 00:00:00 2001 From: Keysat Date: Mon, 15 Jun 2026 13:48:44 -0500 Subject: [PATCH] =?UTF-8?q?Correct=20stale=20repo=20name=20Workout-log=20?= =?UTF-8?q?=E2=86=92=20proof-of-work=20in=20roundup=20docs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The repo was renamed; note the rename in the STATUS.md scan header so the historical snapshot stays unambiguous. The dead ~/Projects/Workout-log folder (empty/crash logs, no git) was removed separately. --- ROADMAP.md | 2 +- STATUS.md | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/ROADMAP.md b/ROADMAP.md index 4d0b306..b8bb7ab 100644 --- a/ROADMAP.md +++ b/ROADMAP.md @@ -107,7 +107,7 @@ symlink is relative. The gaps were consistency: the inbox-check line was missing non-standards repos, and only `standards` had a complete canonical `.gitignore`. **Fixed — 6 repos, one commit each, pushed** (`CRM`, `premier-gunner`, `recap`, -`spark-control`, `Workout-log`; `recap-relay` committed locally — see residuals): added the +`spark-control`, `proof-of-work`; `recap-relay` committed locally — see residuals): added the repo-tagged inbox-check line and normalized `.gitignore`. **Standard improved by the audit:** the documented canonical `.claude/` block was diff --git a/STATUS.md b/STATUS.md index aa36bbe..9ec1397 100644 --- a/STATUS.md +++ b/STATUS.md @@ -1,7 +1,7 @@ # Roundup — 2026-06-14 -Repos scanned (9 git): CRM, premier-gunner, recap-relay, recap, spark-control, Workout-log, -ten31-transcripts, standards (meta/tooling). +Repos scanned (9 git): CRM, premier-gunner, recap-relay, recap, spark-control, proof-of-work +(renamed from Workout-log — same repo), ten31-transcripts, standards (meta/tooling). Skipped: **start-os** (external upstream — Start9Labs/start-os, no AGENTS.md); **15 non-git folders** under `~/Projects` (see Gaps). @@ -26,7 +26,7 @@ folders** under `~/Projects` (see Gaps). - **spark-control** — StartOS controller for a dual DGX Spark cluster (vLLM swaps, speech/embeddings/redaction). Live `v0.19.0:0`. In progress: Signal Engine flakiness (transient GPU-busy) client-side remedy drafted; one CSRF click-through unverified. -- **Workout-log** — Self-hosted multi-user workout logger (Next.js, StartOS s9pk). `v1.2.0:1` +- **proof-of-work** — Self-hosted multi-user workout logger (Next.js, StartOS s9pk). `v1.2.0:1` (Next 15 / React 19 upgrade) built + sideloaded; local checks green. Pending: on-box boot verification. Next: P3 hardening batch. - **ten31-transcripts** — macOS menu-bar app recording dual-track call audio → SparkControl @@ -62,7 +62,7 @@ folders** under `~/Projects` (see Gaps). **P3 — deferred hardening / hygiene:** - [P3] recap — request-size caps, invoice-ID hijack binding, container root, in-memory rate-limit buckets, repo hygiene, packaging polish, doc reconciliation - [P3] recap-relay — no `/relay/*` rate limiting, container root, dashboard XSS, `lan-fetch` TLS off; versions prune; stale `/relay/health` version; bulk doc fixes -- [P3] Workout-log — login timing oracle, CSP `unsafe-eval`, `/api/health` info disclosure, rate-limit map leak, `exerciseId` ownership on PATCH/sets POST, 30-day sessions, text max-length +- [P3] proof-of-work — login timing oracle, CSP `unsafe-eval`, `/api/health` info disclosure, rate-limit map leak, `exerciseId` ownership on PATCH/sets POST, 30-day sessions, text max-length - [P3] spark-control — stale README, deprecated `@app.on_event`, hardcoded version, unescaped `innerHTML` sink, packaging placeholders - [P3] ten31-transcripts — reconcile `docs/` specs with reality, `SessionController` state-machine tests, smaller items in `EVALUATION.md` @@ -71,7 +71,7 @@ folders** under `~/Projects` (see Gaps). - premier-gunner — set a real login password; confirm speed unit (mph vs km/h); decide on "log another" same-category session - recap — persist provider preference server-side; apply Export ▾ to clip-collection panel; verify "Take Recaps home" licensing; confirm cloud paid-only vs. free-signed-in intent; Zaprite recurring (BLOCKED on Zaprite API); CI lint + type-check - spark-control — on-box CSRF click-through test; forward concurrency note to Signal Engine dev; concurrency sweep; parakeet-asr `--memory` cap; start the ROADMAP tech-debt list (pytest harness first) -- Workout-log — tiered AI prompt formatting (JSON-schema output, etc.); (later) Next 15→16 upgrade; verify StartOS forwards real client IPs +- proof-of-work — tiered AI prompt formatting (JSON-schema output, etc.); (later) Next 15→16 upgrade; verify StartOS forwards real client IPs - ten31-transcripts — persist backend URL in Settings + primary→fallback on connection failure - standards — build the `/harden` quality-gate standard (item 1); the non-git-folder sweep