Federation spec: proxies-at-home lineage recon (Akurosia/kclipsto) + future-work note - #103
Merged
Merged
Conversation
§6(b) additions (design doc only, no build): - Concrete finding: Akurosia/proxies-at-home (public fork of acoreyj/proxies-at-home) is the accessible copy of the codebase powering the production proxxied.com deployment. Its claimed source, kclipsto/proxies-at-home, does not resolve (404; the kclipsto account's only other public repo is unrelated). - License is genuinely unclear, not confidently MIT: README claims MIT, package.json says ISC, no LICENSE file exists, GitHub's license API returns null. Named without a confident license label, per this doc's own established practice (matches the earlier alex-taxiera/ proxy-print correction) rather than repeating that mistake. - Confirmed by reading its actual source: real MPC-Autofill-style search API integration (POST /api/mpcfill/search, /batch-search) and an attribute-free <order>/<fronts>/<backs>/<card> XML dialect, compatible with this export's scryfall_id/set+collector_number join keys. - XML dialect-tolerance note for the PR-7 XML 2.0 provenance-attribute design: their importParsers.ts uses DOMParser + tag-name lookups only, no schema/whitelist validation — unknown attributes/elements would be silently ignored, not rejected. - One-line correction: the doc's earlier "production, proprietary" framing (citing only the MIT upstream, treating proxxied.com's own deployment as an unexamined closed service) is superseded — the actual production fork is public and readable, though its license remains unresolved. New §8 (future work, no build): reference-consumer implementations (a Django import command for mpc-autofill, a TS verdict-lookup module for proxies-at-home) planned upstream-shaped, with contribution intent gated on the export going live and, for proxies-at-home, on initial contact given the license ambiguity just found. No outreach, no PRs against acoreyj/Akurosia/kclipsto's repos — documentation only, per instruction. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AHfxN9bbWAWHs8rfzVtBWt
WilfordGrimley
pushed a commit
that referenced
this pull request
Jul 18, 2026
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AHfxN9bbWAWHs8rfzVtBWt
Replaces the prior "genuinely unclear, not confidently MIT" framing with a SHA-pinned "stated MIT" attribution (2a5826788ff7c1827b73c6042d0b4b5d1a4e8340, 2026-02-22) plus a footnote explaining why: credits the maintainer's clearly expressed permissive intent (README) and treats package.json's ISC as near-equivalent permissive, rather than withholding attribution over the discrepancy. The practical rule is unchanged from the prior wording: patterns may be referenced freely; actual code reuse still waits on a LICENSE file or the operator's word, which the eventual first-contact outreach (§8) can raise directly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AHfxN9bbWAWHs8rfzVtBWt
WilfordGrimley
pushed a commit
that referenced
this pull request
Jul 18, 2026
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AHfxN9bbWAWHs8rfzVtBWt
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Documentation-only update to
docs/federation/public-export-v1.md§6(b), following up on a lead the owner found:Akurosia/proxies-at-home, a fork whose README documentsproxxied.com's own production deployment.(1) Lineage check:
kclipsto/proxies-at-home(the repo the README claims as its own source) does not resolve —api.github.com/repos/kclipsto/proxies-at-home404s, and thekclipstoaccount's only other public repo (proxxied-issues) is unrelated.Akurosia/proxies-at-homeis a public fork ofacoreyj/proxies-at-home, last pushed 2026-04-02, and is the actual accessible copy of the codebase — used as the basis for the rest of this recon sincekclipsto's own repo can't be read directly.(2) Consumer story (b), concrete finding: named in the spec. License attribution (amended per owner decision after the first pass): "stated MIT", SHA-pinned to the README's own most recent commit (
2a5826788ff7c1827b73c6042d0b4b5d1a4e8340, 2026-02-22), withpackage.json's"ISC"noted as near-equivalent permissive rather than a disqualifying contradiction, and the missingLICENSEfile flagged as the one real gap — with a footnote explaining the rationale (credit the maintainer's clearly-expressed intent, snapshot it so the claim can't silently drift, don't treat a missing file as grounds to omit the project). Practical rule stays unchanged: patterns referenced freely; actual code reuse waits on aLICENSEfile or the operator's word.(3) XML dialect read:
mpcXmlExport.tsproduces an attribute-free<order>/<fronts>/<backs>/<card>dialect;importParsers.tsparses viaDOMParser+ tag-name lookups only, no schema/whitelist — confirmed it would silently ignore (not reject) unknown attributes or child elements. One paragraph added, flagged as informing the PR-7 XML 2.0 provenance-attribute design.(4) One-line correction: the doc's earlier framing (naming only the MIT upstream, treating the
proxxied.comproduction deployment as an unexamined closed service) is superseded — the actual production fork is public and its integration code is readable.New §8 (future work, no build): reference-consumer implementations (a Django import command for mpc-autofill, a TS verdict-lookup module for
proxies-at-home) planned upstream-shaped, with upstreaming intent gated on the export going live and, forproxies-at-home, on initial contact — which can also politely raise the README/package.json/LICENSE discrepancy.No outreach, no PRs against any of
acoreyj/Akurosia/kclipsto's repos — documentation only, per instruction.Test plan
python3 .github/scripts/docs_lint.py— clean.npx prettier@2.7.1 --check(pinned version) on the touched file — clean.🤖 Generated with Claude Code
https://claude.ai/code/session_01AHfxN9bbWAWHs8rfzVtBWt