From ff7897f9bc7a3a56ec8591a24bcbe51baa76e3ce Mon Sep 17 00:00:00 2001 From: atlas Date: Mon, 31 Aug 2026 18:13:33 +0200 Subject: [PATCH] CLAUDE.md: the mistyped label separator errors now, it does not pass MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This warned that `--label area:ops` "matches nothing and silently returns unfiltered results". That stopped being true when hive-forge learned to suggest the nearest name: it now exits non-zero with `unresolved label name(s): area:ops (did you mean "area/ops"?)` and lists the available labels. Measured, not assumed — the old text is what sent me looking for a silent failure that no longer exists, which is the specific cost of a doc that describes a fixed bug. --- CLAUDE.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index 09126243..77862443 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -11,9 +11,8 @@ when you need depth on a subsystem. This file is the index. the forge, so a hardcoded loopback address fails to connect. - Operator/agent trust-boundary design: **[docs/boundary.md](docs/boundary.md)** (`area/ops` issues - for the deployment/gateway/privsep work — the separator is a **slash**; - `--label area:ops` matches nothing and silently returns *unfiltered* - results, which reads like a backlog rather than like an error). + for the deployment/gateway/privsep work — the separator is a **slash**, + and `--label area:ops` now fails with `did you mean "area/ops"?`). - Agent trust model (trust boundary, prompt-injection threat model, capability = accepted risk), credential isolation + sandbox threat model: **[docs/security.md](docs/security.md)**.