mrwulf 9092f032e0 Public-exposure self-audit: genericize DEPLOY.md, scrub provider paths ... Socratic pass over everything this public repo reveals, adversary-first: - DEPLOY.md no longer names the hosting provider or the server's other software inventory (that sentence was NEW public information - the site's front page does not advertise it). It now states its own redaction policy up front, leads with a Caddy proxy config (matching what the target site actually fronts with), adds rate-limiting and proxy timeouts for the stdlib backend, generalizes the second-mirror section, and gains an explicit key-hygiene section (the signing key never touches the public server; a compromised box has nothing to rotate). - Future attestations stop leaking provider-machine paths: the machine_protection guard path is recorded repo-relative and the Lean project dir is recorded in its configured env-var form, never machine-resolved. (The 12 already-published leaves containing local home paths are immutable by design - severity assessed low: a local username on a non-addressable dev box, no credentials - and an append-only log does not rewrite its history.) Audited clean: no keys, tokens, or credential-named files anywhere in git history; no public IPs; loopback-only binds; commit identity is the owner's long-standing public one. 54/54 tests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-06 16:16:10 +02:00
..
__init__.py	add nested proof check provider	2026-07-03 13:03:58 +02:00
__main__.py	add nested proof check provider	2026-07-03 13:03:58 +02:00
cli.py	The log goes public: git-published mirror, online service, witnesses	2026-07-06 16:05:20 +02:00
discovery.py	add nested proof check provider	2026-07-03 13:03:58 +02:00
published_assets.py	The log goes public: git-published mirror, online service, witnesses	2026-07-06 16:05:20 +02:00
service.py	Public-exposure self-audit: genericize DEPLOY.md, scrub provider paths	2026-07-06 16:16:10 +02:00
transparency_log.py	The log goes public: git-published mirror, online service, witnesses	2026-07-06 16:05:20 +02:00
web.py	The log goes public: git-published mirror, online service, witnesses	2026-07-06 16:05:20 +02:00
webdocs.py	The log goes public: git-published mirror, online service, witnesses	2026-07-06 16:05:20 +02:00