From 7ce1c1772ed82f6792ae0e492d92b472eac8408c Mon Sep 17 00:00:00 2001 From: iris Date: Sun, 20 Sep 2026 14:19:37 +0200 Subject: [PATCH 1/4] docs: clear write-good.Passive hits in docs/networking/network.md --- docs/networking/network.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/networking/network.md b/docs/networking/network.md index 920689e7..5a49f16b 100644 --- a/docs/networking/network.md +++ b/docs/networking/network.md @@ -7,7 +7,7 @@ Configured via `services.hyperhive.network.*`. > Isolation is the only mode — there is no shared-netns fallback. The > former `services.hyperhive.network.isolateContainers` and -> `services.hyperhive.network.upstreamDns` options were removed; a +> `services.hyperhive.network.upstreamDns` options no longer exist; a > config that still sets one fails eval with a removal message. ## Network map From 19d214289791e781bb898f73217cab58a86ef3ab Mon Sep 17 00:00:00 2001 From: iris Date: Sun, 20 Sep 2026 14:20:20 +0200 Subject: [PATCH 2/4] docs: clear write-good.Passive hits in docs/tools/scheduling.md --- docs/tools/scheduling.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/tools/scheduling.md b/docs/tools/scheduling.md index 1a4dba27..2794abc5 100644 --- a/docs/tools/scheduling.md +++ b/docs/tools/scheduling.md @@ -30,7 +30,7 @@ audit. ### `edit_schedule(id, body?, description?, interval_seconds?, next_fire_at_unix?, targets_add?, targets_remove?)` Partial-update a schedule. Pass only the fields to change; absent -fields are left alone. `targets_add` / `targets_remove` mutate the +fields stay untouched. `targets_add` / `targets_remove` mutate the recipient list in the same transaction — re-adding a previously cancelled target drops its tombstone and starts fresh. `interval_seconds` accepts positive values only via this tool (omit @@ -43,7 +43,7 @@ rows (terminal state). Cancel a schedule. Omit `targets` / pass empty to cancel the whole schedule; pass a list to cancel just those recipients (the schedule -autocancels when every target is removed). +autocancels once every target is gone). ### `fire_schedule_now(id)` From c9f7de294d51facb5ee5f315b0fbacde5d0a5d28 Mon Sep 17 00:00:00 2001 From: iris Date: Sun, 20 Sep 2026 14:20:54 +0200 Subject: [PATCH 3/4] docs: clear write-good.Passive hits in docs/scheduler/ci.md --- docs/scheduler/ci.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/scheduler/ci.md b/docs/scheduler/ci.md index 74196cd5..983f166e 100644 --- a/docs/scheduler/ci.md +++ b/docs/scheduler/ci.md @@ -186,7 +186,7 @@ nspawn containers can't create user-namespaces, so the module sets `nix.settings A malicious `default.nix` or build script in a PR can therefore: -- **Make arbitrary network requests** to any address reachable from the container. The container runs in its own netns behind the hive bridge, so it reaches the forge only through the gateway (`http://`, public/read endpoints — no admin credentials) and **can't** reach host-loopback services: the unauthenticated core dashboard at `127.0.0.1:7000` and the raw forge port are off-limits (bridge→127.0.0.0/8 is dropped). +- **Make arbitrary network requests** to any address reachable from the container. The container runs in its own netns behind the hive bridge, so it reaches the forge only through the gateway (`http://`, public/read endpoints — no admin credentials) and **can't** reach host-loopback services: the unauthenticated core dashboard at `127.0.0.1:7000` and the raw forge port are off-limits (a firewall rule drops bridge→127.0.0.0/8 traffic). - **Write to the container filesystem**, including corrupting the runner's state dir or `.runner` credentials. The core admin token (`forge-core-token`) **isn't** bind-mounted into the container. it's held and used only by hive-c0re on the host (`forge/ci_runner.rs`), which mints per-runner registration tokens; only that registration token reaches the container's env-file. A build process can still reach forge over the network, but can't use the admin token to issue privileged API calls. From df498a9abebd559f829b1de6583d677316f3f5e8 Mon Sep 17 00:00:00 2001 From: iris Date: Sun, 20 Sep 2026 14:21:30 +0200 Subject: [PATCH 4/4] docs: clear write-good.Passive hits in docs/turn-loop/claude-invocation.md --- docs/turn-loop/claude-invocation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/turn-loop/claude-invocation.md b/docs/turn-loop/claude-invocation.md index f207e371..110bdf7a 100644 --- a/docs/turn-loop/claude-invocation.md +++ b/docs/turn-loop/claude-invocation.md @@ -247,7 +247,7 @@ needs to `chown` a bind mount), once at startup: `services.hyperhive.c0re.operatorPronouns`, default `she/her`). When `services.hyperhive.agent.docs.enable` is set, `HIVE_DOCS_DIR` is present in the environment and `render()` appends a one-sentence pointer - telling the agent the docs are mounted at that path. + telling the agent where the docs live. Passed via `--system-prompt-file`. **Marker grammar.** `` opens a block; any