Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -27,4 +27,6 @@ htmlcov/

# Subagent-driven-development scratch: per-plan ledgers, briefs, review packages.
.superpowers/
\n\n# Machine-specific project roots/names; the tracked projects.yaml stays generic.\nconfig/projects.local.yaml\n

# Machine-specific project roots/names; the tracked projects.yaml stays generic.
config/projects.local.yaml
11 changes: 0 additions & 11 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,17 +2,6 @@

All notable changes to jobd. Format roughly follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

## [Unreleased]\n\n### Privacy — tracked config no longer carries real paths

- `config/projects.local.yaml` (gitignored, beside `projects.yaml`) now holds
machine-specific `roots:` and private project names; each entry replaces the
same-named tracked entry wholesale. Operators must create it on deploy or lose
cwd-derived identity for those roots — see docs/projects-yaml.md.
- The tracked `projects.yaml`, the replay corpus `tests/data/project_cwd_corpus.csv`,
tests, plans and docs are pseudonymised (`/home/user/...`, greek-letter project
names). `tests/test_no_private_paths.py` fails the suite if a private path, host,
address or session trailer is ever tracked again.

## [Unreleased]

## [0.5.42] — 2026-09-01
Expand Down
1 change: 1 addition & 0 deletions changelog.d/privacy-local-overlay.security.md
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
- **Tracked config no longer carries real paths or private names.** `config/projects.local.yaml` (gitignored, beside `projects.yaml`) now holds machine-specific `roots:` and private project names; each entry replaces the same-named tracked entry wholesale. Operators must create it on deploy or lose cwd-derived identity for those roots (docs/projects-yaml.md). The tracked `projects.yaml`, the replay corpus, tests, plans and docs are pseudonymised, and `tests/test_no_private_paths.py` fails the suite if a private path, host, address or session trailer is ever tracked again.