-
State the real constraint on applying a usbguard rule, and compose one
-
State the background rules without their history
-
The desktop background is the verb-and-hotkey panel, not a wallpaper collection
-
Strip historical narrative from documentation
-
State Alloy's Secure Boot posture, and read the firmware back
-
Give each box its own export directory, and report the PATH
-
Keep the keyboard that rescued a latched machine
-
Ship no flatpak remote, and say so when the first install has nowhere to go
-
Add a vmtest that boots an installed machine with no route
-
Pin the bases at Fedora's own registry, which keeps what quay deletes
-
Fence the first boot's layering to the carried repo
-
Report every layered component's version in alloy --version
-
Record the component versioning rule in STACK.md
-
Ship the USB keyboard gate, so deny-unknown has a release valve
-
Put usbguard in both profiles, and assert that it stays disarmed
-
Ship the firewall: firewalld, a zone per profile, tailscale exempt
-
Pick firewalld, and say which zone on each profile
-
Take the secureblue review's adopted set, nine files and a SUID strip
-
Stop the server profile carrying fonts, and let a build seed its font bases
-
Record the two hotfix-channel rulings where the code makes the claim
-
Filter translations and documentation at install time
-
Pick Firefox as the browser, drop Helium
-
Offer a fix for bad defaults, not just a description of them
-
Name the two recommended browsers, and fix what that breaks
-
Keep copied passwords out of the clipboard history
-
Move gopass to the client block, where the person it is for sits
-
Retire IosevkaTerm: the image cuts its own faces now
-
Name only fonts the image installs in the fontconfig chain
-
Say on the update screen what the layer is, before bootc says it as an error
-
Take the console and shop out of the image, and layer them at first boot