SP00 T9 ruling — SharedRedisConfig wiring tests and an accurate helper Javadoc
SP00 T37 ship ruling — X-Spam-Status is checked on real inbound mail
rspamd's milter_headers skips local senders by default, so an in-cluster probe is delivered DKIM-signed but never carries X-Spam-Status.
SP00 Task 36 ship ruling — the signed-in session check is proven in-pod against a live session
SP00 Task 34 ship ruling — the signing-link check runs first and sends no email
SP00 Task 8 ruling — the seat resolver fetches the organization and opens no transaction
SP00 Task 37 rulings — rspamd pod fsGroup, bwrap image check, Redis-side ship gate
SP00 Task 36 ruling — the session check's Redis login is pinned to the Secret's key names
SP00 Task 34 ruling — the signer's turbo env declares the Redis username
SP00 Task 3 ship ruling — Step 3 asserts the AUTH reply, not a bare PONG
SP00-T2 rulings — local nats-server check, login-probe verification, bootstrap docs
SP00-T48 ruling — null-safe DataVolume check for the golden-image cleanup
SP00 preflight — contract check, conflict scan, 14 rulings
Pre-grant rt.org.> / email.notify.> in N1 (master §6.11), move kamo-internal's NATS login to N3, fix the §7.13 unforwarded-prefix rule for SP10's gateway routes...
AI Members + AI Provider Registry program — master spec, 15 sub-project specs and plans, runbook
Owner-approved 2026-09-23 (13 decisions, master spec §2). 15 sub-projects, 604 implementation tasks, cross-sub-project contracts in master §6 and the adopted de...
Kamo-internal's session-handle secret
kamo-internal 3e3c3e7a mounts **************** (SESSION_HANDLE_SECRET), which seals the per-tab session handles that replace the *** id in page script. Created ...
The member card spec, as built
Corrects what changed on the way — the card's layer is 1305 (over MUI modals), useHoverCard stayed where it was, the header wears the desktop wallpaper, calenda...
Page transitions — how a navigation is seen, the wave's timing, and the plan
House rules for UI work — layout, look, shared parts, live data [skip ci]
Pages fill their width, build from the shared components, colour only from the globals.css tokens, and take changing data over STOMP topics instead of loading o...
The opt-out design, and the client both surfaces will call
Settings -> Email -> Opt Out reads /api/email/opt-outs on EmailService; a lead's own address reads **************** on SecurityService. Long ids arrive as strin...
Kamo-careers picks up a branding change within a minute
The comment beside the Careers Logo Overlay said the careers site re-reads config.json hourly. It re-reads it every minute since kamo-careers 14c9ddb, which fix...
Why AssuranceLevel only ever reports SES
ESigService reports SES and only SES now. eIDAS Article 26 lets a signature call itself ADVANCED only if the signature creation data is something the signatory ...
The Labor Day crane is fifteen lines, not nine
The cost note counted the crane before it grew a two-leg lattice mast and a triangular jib section, which is the shape it needed to stop reading as a wobbling r...
Finish the spec's inventory, and add the order to check things in
The "where it lives" table was written before the setup service, the media handoff, the CARRIER_TO_PHONE_SERVER rail and the phone server's default text route e...
The two inbound shapes, and the rule that keeps the endpoint safe
Records what voipservice 9e9e814 and ea6d631 established, because the reasoning is not recoverable from the diff. A Telnyx messaging profile has exactly one we...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.