selfpost

215 Commits 1 Branch 3 Tags

2 Commits

Include renames

Author SHA1 Message Date

Author	SHA1	Message	Date
mixandClaude Opus 5.5	a658da11f7	audit: stage 2c - the answers, and what they make to fix test / test (push) Canceled after 0s Details docs/assumptions-2026-10-14.md gets its second half: every entry of the inventory settled in the source of the version the image runs, with the citation now beside it in the code. 559 verdicts (the documents' claims that repeat one another answered once): 415 hold, 77 hold in part, 55 do not hold, 12 need a measurement on the stand. The plan's heuristics line is done; what the sources contradict becomes fourteen lines of stage 2c, worst first: rspamd signs a forged verdict for a client it counts as local; the sender check takes any key of the sender map where Postfix takes the first; expiry, the forced-expire flag and Postfix's time units; refusals and recipients matched by what Postfix really writes; postlogd after a rename; inbound mail over 10 MB refused by cleanup; master outside supervisord's reach; sasldb written in place; Health showing a socket file and a certificate Postfix does not serve; the Origin check refusing every POST where Sec-Fetch-Site is missing; two processes migrating at once; certbot's symlinks; the documents; and the measurements. Roadmap 31/81. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 19:41:07 +03:00
mixandClaude Opus 5.5	a8b6276b0d	audit: stage 2c - the inventory of what SelfPost assumes of other programs test / test (push) Canceled after 0s Details docs/assumptions-2026-10-14.md: four read-only readings of the tree at `0f984ff` (log tailer/Health/cmd/panel; milters/postfix/app/domain; build/deploy/inbound/DMARC/backup/e2e; store/web and the claims of architecture, security and guide), each place rated by what justifies it today. 621 entries: 3 cited, 25 measured, 535 guessed, 58 with a reason to think them false - among them expiry (Postfix logs status=expired once per message, without to=, so expired rows stay deferred), the sender check accepting a From: any key lists while Postfix takes the first key found, cleanup capping inbound mail at main.cf's 10240000 bytes, and the milter-reject line carrying sasl_username after all. Sources read: the Debian bookworm packages the image installs (apt-get source), go-milter v0.4.1 and modernc v1.60.1 from the module cache. Next: the answers, entry by entry. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 19:03:22 +03:00

mixandClaude Opus 5.5

a658da11f7

audit: stage 2c - the answers, and what they make to fix

test / test (push) Canceled after 0s

Details

docs/assumptions-2026-10-14.md gets its second half: every entry of the
inventory settled in the source of the version the image runs, with the
citation now beside it in the code. 559 verdicts (the documents' claims
that repeat one another answered once): 415 hold, 77 hold in part, 55 do
not hold, 12 need a measurement on the stand.

The plan's heuristics line is done; what the sources contradict becomes
fourteen lines of stage 2c, worst first: rspamd signs a forged verdict for
a client it counts as local; the sender check takes any key of the sender
map where Postfix takes the first; expiry, the forced-expire flag and
Postfix's time units; refusals and recipients matched by what Postfix
really writes; postlogd after a rename; inbound mail over 10 MB refused by
cleanup; master outside supervisord's reach; sasldb written in place;
Health showing a socket file and a certificate Postfix does not serve; the
Origin check refusing every POST where Sec-Fetch-Site is missing; two
processes migrating at once; certbot's symlinks; the documents; and the
measurements. Roadmap 31/81.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 19:41:07 +03:00

mixandClaude Opus 5.5

a8b6276b0d

audit: stage 2c - the inventory of what SelfPost assumes of other programs

test / test (push) Canceled after 0s

Details

docs/assumptions-2026-10-14.md: four read-only readings of the tree at
0f984ff (log tailer/Health/cmd/panel; milters/postfix/app/domain;
build/deploy/inbound/DMARC/backup/e2e; store/web and the claims of
architecture, security and guide), each place rated by what justifies it
today. 621 entries: 3 cited, 25 measured, 535 guessed, 58 with a reason to
think them false - among them expiry (Postfix logs status=expired once per
message, without to=, so expired rows stay deferred), the sender check
accepting a From: any key lists while Postfix takes the first key found,
cleanup capping inbound mail at main.cf's 10240000 bytes, and the
milter-reject line carrying sasl_username after all.

Sources read: the Debian bookworm packages the image installs (apt-get
source), go-milter v0.4.1 and modernc v1.60.1 from the module cache.
Next: the answers, entry by entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 19:03:22 +03:00