chore(hygiene): replace internal hosts and personal paths with placeholders #3

Merged

troed merged 1 commit from hygiene/public-repo-sanitization into devel

2026-08-26 11:48:57 +02:00

troed commented

2026-08-26 11:45:51 +02:00

Owner

Follow-up to the public-repo security audit: tracked files carried the real LAN IP of the computer server and personal home paths. This replaces them with placeholders / empty defaults; real values remain local-only (gitignored sdkconfig, Kconfig provisioning), mirroring the policy already used in starfleet/roster.

Changes:

main/Kconfig.projbuild: SERVER_HOST default is now "" (was the LAN IP). Provisioning stays Kconfig-only per README.
README.md: provisioning table default updated to (empty).
AGENTS.md: field-test checklist no longer names the real server address; "Repo & commit conventions" expanded into a Public repo hygiene policy (no SSIDs/passwords/tokens/hostnames/LAN IPs/usernames/home paths; pre-push scan command).
host/tests/test_mww_features.py: reference WAV now resolves to the sibling ../computer checkout (overridable via MWW_TEST_WAV) instead of an absolute personal path.
docs/superpowers/**: plans/specs sanitized (IPs and /home/... paths → placeholders).
tools/wakeword-model/REPRODUCIBILITY.md, tools/wakeword-training/config_computer*.json: absolute paths → <repo> / <path-to-computer-checkout> placeholders.
main/wake_chime_data.h: provenance comment uses a generic path.

Verification: cd host/tests && python3 -m pytest -q → 43 passed; hygiene scan over tracked tree clean.

Follow-up to the public-repo security audit: tracked files carried the real LAN IP of the `computer` server and personal home paths. This replaces them with placeholders / empty defaults; real values remain local-only (gitignored `sdkconfig`, Kconfig provisioning), mirroring the policy already used in starfleet/roster. Changes: - `main/Kconfig.projbuild`: `SERVER_HOST` default is now `""` (was the LAN IP). Provisioning stays Kconfig-only per README. - `README.md`: provisioning table default updated to *(empty)*. - `AGENTS.md`: field-test checklist no longer names the real server address; "Repo & commit conventions" expanded into a **Public repo hygiene** policy (no SSIDs/passwords/tokens/hostnames/LAN IPs/usernames/home paths; pre-push scan command). - `host/tests/test_mww_features.py`: reference WAV now resolves to the sibling `../computer` checkout (overridable via `MWW_TEST_WAV`) instead of an absolute personal path. - `docs/superpowers/**`: plans/specs sanitized (IPs and `/home/...` paths → placeholders). - `tools/wakeword-model/REPRODUCIBILITY.md`, `tools/wakeword-training/config_computer*.json`: absolute paths → `<repo>` / `<path-to-computer-checkout>` placeholders. - `main/wake_chime_data.h`: provenance comment uses a generic path. Verification: `cd host/tests && python3 -m pytest -q` → **43 passed**; hygiene scan over tracked tree clean.

troed added 1 commit

2026-08-26 11:45:51 +02:00