The owner: "dont ship any secrets in the code including login names".
deploy/relay/'s two scripts read /home/<admin> where the Relay admin's
home was; SHA256SUMS is for these copies and the README keeps the
server's hashes. The builder's home in five context and docs files is
"~" now. Nothing else tracked names a login (the owner's address stays
in the engine patches' From: lines, as git records it).
The owner pushed jihad/uxp-RB_20261006 to the fork: check-pins.sh
fetches all eleven pins from their public URLs, so R11's criterion 2
and the "pins are public" criterion are met.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XM9EDSp83ZFRhggY4RCT9X
The inspector's review of b37795fb..9ff7d71a (2 P1, 7 P2, 16 P3; every
finding and its disposition in impl-review-findings-6.md, round 25).
Fixed: the toolchain container disables SELinux relabelling and runs as
any uid (world-writable /home/builder, HOME set, docker --user); both
adapter builds define QT_NO_DEBUG, so Q_ASSERT's __FILE__ no longer
bakes the checkout path into the impl (rebuilt: no home path, the shims
unchanged); build-all-device.sh initialises only the missing submodules
(an emptied one counts as missing), checks the container engine and the
device before the hour-long steps, treats a device library as present
only with the recipe's sha256, honours PDK_ROOT, captures its pipelines,
and copies only this run's three packages; the fetchers take the pin,
retry a wrong-bytes download past the CDN's cache and keep curl's error
visible; the sysroot script sources host-path.sh, fetches libpulse to a
.part, checks it on assemble and refuses a SYSROOT_OUT outside its
directory; in-container.sh forwards the scripts' settings (inside the
repository only) and rebuilds an image whose Dockerfile changed, with a
.containerignore per context; the review runner fails closed; the README
lists binutils and xz, calls docker rootful and unrecorded, starts
novacomd with sudo -b; the Mochi provenance names an outside source by
basename; build-novacom.sh uses the compiler it found; oe-env.sh's
sudo-mode checkout runs as the user; the kit's R11 criteria 2 and 4 are
back to [~] with two criteria added (public pins, path-independent
builds) and "eight" libraries.
Not fixed in code: the engine pin 706d4782 is not on the public fork.
tools/host/check-pins.sh fetches every gitlink from its URL and reports
it; the push is the owner's decision.
deploy/relay/: the Relay's jihad-splice.sh and hide-client-addresses.sh
as on the server (sha256 checked), with a README (T-478).
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XM9EDSp83ZFRhggY4RCT9X
NotAlexNoyleandClaude Fable 5.1