From b765daf0b2df9c4659a963b498f749daab31f6ea Mon Sep 17 00:00:00 2001 From: CodePilot Date: Sat, 4 Jul 2026 09:51:02 +0200 Subject: [PATCH 1/2] docs: add public screenshot manifest --- docs/SCREENSHOTS.md | 41 ++++++++++++++++++++ ops/agents/triage/2026-07-04-issue-triage.md | 5 ++- 2 files changed, 44 insertions(+), 2 deletions(-) create mode 100644 docs/SCREENSHOTS.md diff --git a/docs/SCREENSHOTS.md b/docs/SCREENSHOTS.md new file mode 100644 index 00000000..743aeef0 --- /dev/null +++ b/docs/SCREENSHOTS.md @@ -0,0 +1,41 @@ +# Screenshot Plan + +No public screenshots are committed yet. + +Create real screenshots only from sanitized demo data. Run `scripts/privacy-audit.sh` before committing screenshot references, then manually inspect every image because the script cannot read pixels. + +## Demo Data Contract + +Use only these public-safe values while capturing screenshots: + +- Account names: `Work`, `Personal`, `Demo`. +- Gateway host: `codepilot.example.com`. +- Project names: `demo-ios-app`, `demo-gateway`, `demo-docs`. +- Thread names: `Fix onboarding copy`, `Review gateway status`, `Draft beta notes`. +- Upload examples: `sample-log.txt`, `demo-screenshot.png`, `release-notes.md`. + +Do not show real local paths, private repository names, prompts, hostnames, account identifiers, Apple IDs, team IDs, signing details, TestFlight account details, gateway bearer tokens, auth file contents, QR secrets, or live desktop content. + +## Beta Screenshot Manifest + +Capture the initial public beta set with these filenames under `docs/assets/screenshots/`: + +| File | Surface | Required safe state | +| --- | --- | --- | +| `mac-menu-status.png` | Mac menu bar status | Demo account usage only; no personal menu bar extras in frame. | +| `mac-setup-checklist.png` | Mac setup checklist | Ready and optional states visible; no local paths or private account details. | +| `mac-cloudflare-wizard.png` | Cloudflare wizard | Uses `codepilot.example.com`; no tunnel IDs, tokens, or dashboard account data. | +| `ios-connection-cloudflare.png` | iPhone connection setup | Cloudflare mode only for public beta; no Same Network setup path shown. | +| `ios-thread-list.png` | iPhone thread list | Demo thread and project names only. | +| `ios-file-upload.png` | File upload confirmation | Demo filenames only; no document previews with private content. | +| `ios-remote-desktop-permission.png` | Remote Desktop permission state | Pending or approval copy only; no live desktop pixels. | + +## Review Checklist + +Before committing or publishing screenshots: + +- Confirm every image uses the manifest filename and safe state above. +- Inspect the full-resolution image, not only a thumbnail. +- Verify no private names, email addresses, hostnames, local usernames, machine names, paths, tokens, account identifiers, repositories, prompts, Apple identifiers, or private screenshots appear. +- Verify cropped windows do not expose private menu bar items, browser tabs, terminal prompts, desktop files, notifications, or status menus. +- Update README, GitHub Pages, TestFlight, or App Store metadata only after the images pass this review and maintainer approval covers that use. diff --git a/ops/agents/triage/2026-07-04-issue-triage.md b/ops/agents/triage/2026-07-04-issue-triage.md index 7697ee32..c47457cf 100644 --- a/ops/agents/triage/2026-07-04-issue-triage.md +++ b/ops/agents/triage/2026-07-04-issue-triage.md @@ -15,7 +15,7 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t - #8 Prepare sanitized public screenshot set - Current labels: `documentation`, `severity: low`. - Maintainer approval found for sanitized demo-only screenshots. - - Action: not captured in this pass; no screenshot assets were created or published. + - Action: created a dedicated screenshot manifest on branch `agent/issue-8-screenshot-plan` and opened draft PR #16; no screenshot assets were captured or published. ## Local Changes @@ -23,6 +23,7 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t - Changed Remote Desktop pairing so `pairing.complete` verifies the phone proof and returns `pending_mac_approval`; Mac approval is now required before the device is trusted. - Removed the unused iOS pairing-code field and kept Start Session disabled until refresh sees a paired Mac state. - Added focused Mac and iOS tests for public-beta connection modes and pending Mac approval. +- Added `docs/SCREENSHOTS.md` on `agent/issue-8-screenshot-plan` so the README screenshot link resolves and the beta screenshot capture has fixed demo data, filenames, and manual privacy-review checks. ## Verification @@ -34,4 +35,4 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t ## Blockers - OTA build and public OTA asset verification require an allowed release/OTA run outside this issue-triage policy. -- #8 screenshot capture remains launch work, but no maintainer decision is blocking it after the 2026-07-03 approval comment. +- #8 screenshot capture remains launch work; the manifest is ready, but actual image capture still needs a sanitized app/device state and manual pixel review. From ef00163df7d359d32c2c502fbe3f1deb9fc27a6a Mon Sep 17 00:00:00 2001 From: CodePilot Date: Sat, 4 Jul 2026 16:16:25 +0200 Subject: [PATCH 2/2] docs: record issue triage follow-up --- ops/agents/escalations/issue-triage.md | 2 ++ ops/agents/triage/2026-07-04-issue-triage.md | 9 +++++++++ 2 files changed, 11 insertions(+) diff --git a/ops/agents/escalations/issue-triage.md b/ops/agents/escalations/issue-triage.md index b89f8285..bd74c3f0 100644 --- a/ops/agents/escalations/issue-triage.md +++ b/ops/agents/escalations/issue-triage.md @@ -3,4 +3,6 @@ Date: 2026-07-04 - No active maintainer decision escalations for issue triage. +- Follow-up check found no new GitHub issues created on 2026-07-04. - OTA build and public OTA asset verification are still required for the iOS changes, but were not run in this unattended pass because non-GitHub external system mutation is prohibited by the current public write policy. +- Public screenshot capture remains pending; the manifest exists, but actual image capture still needs sanitized app/device state and manual pixel review before any public use. diff --git a/ops/agents/triage/2026-07-04-issue-triage.md b/ops/agents/triage/2026-07-04-issue-triage.md index c47457cf..4e22c213 100644 --- a/ops/agents/triage/2026-07-04-issue-triage.md +++ b/ops/agents/triage/2026-07-04-issue-triage.md @@ -17,6 +17,15 @@ Remote write policy: public GitHub writes are allowed after privacy audit when t - Maintainer approval found for sanitized demo-only screenshots. - Action: created a dedicated screenshot manifest on branch `agent/issue-8-screenshot-plan` and opened draft PR #16; no screenshot assets were captured or published. +## Follow-up Check - 2026-07-04 + +- Checked open GitHub issues for `codepilotios/codepilot`: #2, #3, and #8 remain the only open issues. +- Checked issues created on 2026-07-04: none found. +- Confirmed draft PR #15 remains open for #2/#3 on `agent/issue-2-3-public-beta-setup`. +- Confirmed draft PR #16 remains open for #8 on `agent/issue-8-screenshot-plan`; CI `Test and Audit` is passing. +- Ran `scripts/privacy-audit.sh`: passed. +- No new public GitHub writes were needed in this follow-up pass. + ## Local Changes - Disabled Same Network from the iOS public beta connection picker and updated setup docs to point users to Cloudflare.