open/llm-security
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions

chore(llm-security): STATE — codename scrub complete (history rewritten + force-pushed)

Browse source
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 11:40:27 +02:00
commit 731d61f801
1 changed files with 19 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

37
STATE.md
View file

@ -1,21 +1,22 @@
# STATE — llm-security
**Active focus:** Removing an internal codename from Forgejo (operator request) — a full
git history-rewrite + force-push, in progress this session. v7.8.0 itself is RELEASED; the
security-fix track (F-1/F-2/F-3) + the TRG/SIG/AST scanners are ALL DONE. Only loose end =
**F-4 (optional, LOW)**, still open.
**Active focus:** NONE active. v7.8.0 RELEASED; security-fix track (F-1/F-2/F-3) +
TRG/SIG/AST scanners ALL DONE; **internal codename fully scrubbed from Forgejo + force-pushed
(DONE this session).** Only loose end = **F-4 (optional, LOW)**. Clean, quiescent state.
## Codename scrub (THIS session — operator: "must not appear anywhere on Forgejo")
- Tip prose reworded by hand (CHANGELOG, CLAUDE.md, README, docs/version-history.md, STATE.md).
## Codename scrub (THIS session — operator: "must not appear anywhere on Forgejo") — DONE
- Full history-rewrite via `git filter-repo` + **force-push** (`d11de9a` → `a19e9eb`).
Verified: 0 occurrences in any blob across all refs, 0 in any commit message, 0 filenames.
- Tip prose reworded by hand (CHANGELOG, CLAUDE.md, README, docs/version-history.md, STATE.md);
scanners now referred to as TRG/SIG/AST only.
- Two `docs/plans/` docs (a gap-analysis + its trekplan, both named after the codename)
deleted from ALL history via `git filter-repo --invert-paths` (the matching `.html`
render was git-ignored — deleted locally only). Their whole subject was the external
reference tool, so they were removed rather than scrubbed in place.
- Leftover historical blobs + 2 commit messages (the gap-analysis docs commit + the v7.8.0
release-commit body) scrubbed via filter-repo `--replace-text`/`--replace-message`
(`(?i)<codename> ==> TRG/SIG/AST`).
- Backup before rewrite: `/tmp/llm-security-pre-scrub-backup.bundle` (all refs; pre-scrub
HEAD `d11de9a`). origin = Forgejo `open/llm-security`; force-push required after rewrite.
deleted from ALL history via `--invert-paths` (the `.html` render was git-ignored — deleted
locally only). Leftover historical blobs + 2 commit messages scrubbed via
`--replace-text`/`--replace-message` (`(?i)<codename> ==> TRG/SIG/AST`).
- Backup of pre-scrub history: `/tmp/llm-security-pre-scrub-backup.bundle` (all refs; old HEAD
`d11de9a`) — LOCAL only, never on Forgejo; delete once satisfied.
- RESIDUAL (server-side): old unreachable objects may linger on Forgejo until git GC. To
guarantee physical removal, run repo housekeeping/GC as Forgejo admin (`ktg`).
## What shipped (DONE — do NOT re-derive)
- **v7.8.0 release — Session C. DONE** (pure version-sync; no production code). Bumped
@ -36,10 +37,10 @@ security-fix track (F-1/F-2/F-3) + the TRG/SIG/AST scanners are ALL DONE. Only l
symlink inside the tree pointing out. Known, accepted.
## COLD START (next session)
1. `pwd` + `git status`. Confirm the force-pushed history is on `origin/main` and that
`git grep -i <codename> $(git rev-list --all)` is empty.
2. No active task queued (assuming the scrub completed). Options: F-4 confirm-gate if wanted,
or a new direction. Do NOT invent scope — ask.
1. `pwd` + `git status`. Tip should be `a19e9eb` (or later) on `origin/main`.
2. No active task queued. Options: F-4 confirm-gate if wanted, or a new direction. Do NOT
invent scope — ask. (If the codename ever needs re-checking: `git grep -i <codename>
$(git rev-list --all)` must stay empty.)
## Continuity notes
- origin = Forgejo `open/llm-security` (never GitHub). Push window: weekdays 20:00–23:00;