Ilker ManapandClaude Opus 5 cd3233ffe8 Do not leave the key store world-readable ...

SQLite creates its file with the process umask, which on a stock system means
every account on the machine can read it. What is in there is not a working
credential — keys are stored hashed — but it is the whole tenancy tree and
every request anyone made, and that should not depend on an operator
remembering to chmod it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-16 09:01:41 +02:00

..

accounting

Enforce budgets and rate limits, and write usage off the request path

2026-09-16 08:52:36 +02:00

agent

Add the llama.cpp engine, and let a profile ask for no GPU

2026-09-16 08:14:05 +02:00

auth

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00

cli

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00

config

Enforce budgets and rate limits, and write usage off the request path

2026-09-16 08:52:36 +02:00

control

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00

obs

Switch the project language to English

2026-09-16 01:15:21 +02:00

router

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00

sim

Switch the project language to English

2026-09-16 01:15:21 +02:00

store

Do not leave the key store world-readable

2026-09-16 09:01:41 +02:00

tlsconf

Add a private CA and mutual TLS for the agent stream

2026-09-16 07:28:56 +02:00

version

Switch the project language to English

2026-09-16 01:15:21 +02:00

web

Add a landing page and a read-only cluster dashboard

2026-09-16 08:58:05 +02:00