-
Require the font-tool conditional to test the profile
-
Catch every spelling of a renamed process::Command
-
Stop the radio warn line naming a cause it does not know
-
Retry the scripted-helper exec while it reports ETXTBSY
-
Say what the fontconfig measurement did not cover
-
Close the helper out however the conversation ends
-
Say on the usb screen whether anything is policing the bus
-
Ship the USB keyboard gate, so deny-unknown has a release valve
-
Re-resolve the lock against the current siblings
-
Put usbguard in both profiles, and assert that it stays disarmed
-
Write down the four defaults the friction audit keeps, and why
-
Ship the alloy usb view: the bus and the Type-C connectors, from sysfs
-
Re-resolve the lock against the current siblings
-
Ship the firewall: firewalld, a zone per profile, tailscale exempt
-
Pick firewalld, and say which zone on each profile
-
Re-resolve the lock against the current siblings
-
Take the secureblue review's adopted set, nine files and a SUID strip
-
Gate the SHOP_REV bump on a build that actually happened
-
Move both base pins; the pinned digests were gone from quay
-
Correct the js arm's weight to what a mint actually costs
-
MIGRATION-FW13: sccache's absence is no longer fatal
-
Add a js arm to LANGS, so the image can supply node and npm
-
docs: the glibc conclusion was right, my reasoning for overturning it was not
-
docs: correct Phase 0's stale and mis-measured statements
-
docs: measure the postgres and glibc premises Phase 0 left open
-
manual: state the ssh posture, and how a key gets onto a machine
-
Ship rsync and minisign in the base image
-
docs: fw13 cutover runbook
-
yazi: show hidden files, matching the helix file picker
-
ssh: seed the installer's key from the medium it was minted with