xarmian 34ef709504 docs(schedule): state the UNTIL type exception, the density refusal and MaxDuration's real overrun (TASK-4100 3a) ...

Comment-only, per the lead's 3a final-round ruling:
- doc.go: ParseRule refuses what RFC 5545 forbids EXCEPT an UNTIL whose
  value type differs from DTSTART's, which is accepted as Until defines it
  (C-M1, option B), and the refusal list names the 10,000-candidate density
  cap (H-L3).
- caps.go: MaxDuration is checked between yields, so a call can overrun it by
  one period expansion or one MaxSteps no-match stretch, and MaxSteps has no
  ceiling (H-L1).

Claude-Session: https://claude.ai/code/session_01Pa22hHpfXoZbQkEFvPtNeS

2026-10-28 18:52:08 +00:00

..

acceptance

feat(acceptance): one Go reading of a body's acceptance criteria (PLAN-3598 slice (a)) (#2091)

2026-10-11 21:19:39 -04:00

accesskick

feat(server): revoking access re-checks live connections immediately (#1744)

2026-10-02 19:43:19 -04:00

appfetch

fix(webhooks): a DNS failure is retried, and a redirect may not turn the POST into a bodyless GET (BUG-3661, BUG-3662) (#2163)

2026-10-14 10:05:08 -04:00

appmanifest

feat(apps): app install staging: apps/1 manifest, fetch policy, pending reservations, preview (TASK-3397, U8a) (#1770)

2026-10-04 07:19:07 -04:00

appstore

fix(store): a user read no longer decrypts the TOTP secret; only the second-factor check does (BUG-4019) (#2275)

2026-10-21 15:57:29 -04:00

artifact

fix(export): mark bundle bodies that were stale when written, and refuse the migration that would abandon them (BUG-3032) (#1356)

2026-09-14 01:45:30 -04:00

attachments

feat(appstore): app attachment upload, read rule and caps behind FencedTx (TASK-3396, U7a) (#1768)

2026-10-03 21:31:44 -04:00

billing

feat(billing): billing availability and prices come from the sidecar; PAD_BILLING=auto|off (TASK-3577) (#2048)

2026-10-11 01:29:49 -04:00

bodypatch

fix(items): undo of an emptied line; a patch that changes nothing is refused (PLAN-3578 retro fixes 5+6) (#2089)

2026-10-11 21:10:03 -04:00

buildtools

fix(scripts): install-refresh removes pad.pid only when it is provably not a live sibling's (BUG-4068) (#2311)

2026-10-25 06:26:02 -04:00

cli

fix(cli): session liveness reads unknown, not dead, across a PID namespace (BUG-4090) (#2328)

2026-10-26 15:34:50 -04:00

cmdhelp

refactor(cli): examples move from Long to cobra's Example field (TASK-2865, part 1) (#2020)

2026-10-10 09:50:49 -04:00

collab

feat(server): log every unguarded content write the PLAN-3555 counter counts (TASK-4062) (#2301)

2026-10-24 10:32:10 -04:00

collections

feat(skill): the skill and the ship playbook load an item's brief with pad item context (PLAN-3598 slice (d)) (#2104)

2026-10-12 10:05:35 -04:00

config

fix(config): warn on a relative PAD_DATA_DIR / PAD_DB_PATH; anchor install-refresh's marker and config reads (BUG-4066 phase 1) (#2308)

2026-10-25 01:13:51 -04:00

decision

fix(decision): a failure the store refuses is still counted, and an empty message is never a supersede (BUG-4022) (#2317)

2026-10-25 19:51:26 -04:00

diff

fix(diff): version writers never diff text that is not valid UTF-8 (BUG-3839) (#2200)

2026-10-15 10:24:24 -04:00

email

feat(auth): social claim of a never-verified account, provider subjects, cloud-only sidecar routes (TASK-3351) (#1760)

2026-10-03 12:15:04 -04:00

events

fix(mcp): MCP's long-lived streams keep alive and take a stream admission slot (BUG-3835) (#2197)

2026-10-15 13:18:36 -04:00

idspace

refactor(events): one home for the asymmetry, one assertion for the count (BUG-2736)

2026-08-22 20:48:58 +00:00

items

fix(fields): field writes keep every number's literal, so an integer above 2^53 is no longer rounded by a write that never named it (BUG-3202) (#1545)

2026-09-25 14:22:09 -04:00

jsonscan

fix(server): the request-body gate reads tokens with jsontext, so a NUL behind a repeated key or beside 1e999 is refused, and a repeated request member is refused on every body (BUG-2812) (#1550)

2026-09-25 21:48:30 -04:00

kernelevents

feat: item reminders — the fire-at-an-instant primitive, and one overdue rule for all four surfaces (IDEA-2641, closes #1010) (#1244)

2026-09-04 11:36:11 -04:00

links

test(links): mention linearity tests compare n with 4n, not an absolute bound (BUG-3995) (#2262)

2026-10-20 15:58:18 -04:00

logging

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00

materialize

fix(editor): a block marker after a hard break stays text (BUG-3584) (#2060)

2026-10-11 10:33:32 -04:00

mcp

fix(mcp): stdio's item patch gives line_hint remote's rule through one shared helper (BUG-4082) (#2315)

2026-10-25 14:08:59 -04:00

metrics

feat(metrics): signup and first-write funnel metrics; TouchUserWrite reports the first write (TASK-3926) (#2227)

2026-10-18 23:25:22 -04:00

models

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

needs

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

netpolicy

fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155)

2026-10-14 07:48:02 -04:00

notify

feat(push): the push dispatcher core and its privacy gates, not yet wired (TASK-3939, part B1) (#2280)

2026-10-22 00:38:26 -04:00

oauth

fix(security)!: a workspace-pinned API token is confined to its workspace (BUG-3982) (#2266)

2026-10-21 02:43:37 -04:00

redisdial

fix(redis): honour the caller's context on TLS dials (BUG-2754) (#1198)

2026-08-25 00:27:27 -04:00

redisns

docs: thirteen claims about code that had moved under them (BUG-2736)

2026-08-22 19:28:17 +00:00

schedule

docs(schedule): state the UNTIL type exception, the density refusal and MaxDuration's real overrun (TASK-4100 3a)

2026-10-28 18:52:08 +00:00

server

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

store

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

testtmp

test(testtmp): decide a template dir's owner by a held flock, not its pid (BUG-4088) (#2321)

2026-10-26 01:22:18 -04:00

textguard

refactor(store): delete the NUL SUSPECT path, now that the predicate sees a NUL behind a repeated key (BUG-3220) (#1561)

2026-09-26 01:09:03 -04:00

urlimport

fix(netpolicy): block Azure WireServer, and pin the cloud metadata census (BUG-3660) (#2155)

2026-10-14 07:48:02 -04:00

usertz

feat: a per-user time zone for calendar days, backend (TASK-4101 PR1) (#2337)

2026-10-28 14:51:33 -04:00

verification

feat(verify): verification evidence tied to a revision, slice 1 (TASK-3617) (#2228)

2026-10-19 10:25:43 -04:00

watchevents

feat(chat): delivery, framing and the accept-instructions opt-in (TASK-4041) (#2305)

2026-10-24 15:16:30 -04:00

webhooks

fix(webhooks): a DNS failure is retried, and a redirect may not turn the POST into a bodyless GET (BUG-3661, BUG-3662) (#2163)

2026-10-14 10:05:08 -04:00