mirror of
https://github.com/saphid/frame-control.git
synced 2026-10-14 00:01:18 +02:00
Independent review (pr79-review-r1) found leaks in the first version: a failure's raw text was hidden with the current headset's hosts (so switching headsets let the old one's name through), unknown hosts and other cases survived, Windows user names with spaces partly survived, the PATH scan ran on every preview, and the log throttle only caught consecutive repeats. - The always-on summary has no free text: the current error and last failure are a stage plus the telemetry error category (decided when the failure happens) and how long ago. ssh -V is reduced to its version words. - The opt-in server log line is scrubbed when written, with that attempt's hosts (case-insensitive), any name ssh gives after hostname/host/to, and then the shared scrubber. - frame_telemetry.scrub: a Windows home folder's whole name (spaces too) and the whole user part of ssh's user@host (spaces, DOMAIN\user) become <user>. - The ssh discovery runs once in the background from server start; a report waits at most 0.3 s for it. - The log throttle keeps per-failure timestamps and counts, bounded to 32. - Regression tests for each case; privacy.md says exactly what's sent. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>