jacobh2 07c36d24a2 L-10: E-16 answers not_found for another user's device (D-156) ...

A member naming the other user's device now gets the same 404 not_found
body as an unknown id, so E-16 no longer reveals whose a device id is.
The admin keeps revoking any device except the current one (AC-3.2, §8.4).
contracts/openapi.yaml drops the 403 on E-16 and states the rule;
web/src/api/schema.d.ts regenerated. The forbidden test becomes a
not_found test, plus one asserting the body equals the unknown-id body
and that nothing was revoked.

Also bumps ctutils 0.4.3 -> 0.4.4 (lockfile only) for RUSTSEC-2026-0385,
published 2026-10-23, which failed cargo audit on main.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TQd3pEP9UeN2uifbHknQ7B

2026-10-24 11:03:19 +02:00

.claude/memory-seed

Scaffold: agent starter kit (seeded from Ebb)

2026-10-17 20:15:40 +02:00

.gitea/workflows

Server: web client under /app/ (D-132), analytics E-34 trends and E-35 forecast (D-133)

2026-10-21 20:54:21 +02:00

android

Update install failures become visible: blocked, aborted, failed (D-155)

2026-10-21 21:20:22 +02:00

contracts

L-10: E-16 answers not_found for another user's device (D-156)

2026-10-24 11:03:19 +02:00

docs

SPEC v0.33: owner answers of 2026-10-24 (D-156), small-edits rule (D-157)

2026-10-24 10:59:39 +02:00

infra

SPEC v0.33: owner answers of 2026-10-24 (D-156), small-edits rule (D-157)

2026-10-24 10:59:39 +02:00

prompts

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

server

L-10: E-16 answers not_found for another user's device (D-156)

2026-10-24 11:03:19 +02:00

tools

Server: web client under /app/ (D-132), analytics E-34 trends and E-35 forecast (D-133)

2026-10-21 20:54:21 +02:00

web

L-10: E-16 answers not_found for another user's device (D-156)

2026-10-24 11:03:19 +02:00

.dockerignore

Server: web client under /app/ (D-132), analytics E-34 trends and E-35 forecast (D-133)

2026-10-21 20:54:21 +02:00

.gitignore

.gitignore: anchor export/ to the repository root

2026-10-21 21:38:47 +02:00

CLAUDE.md

CLAUDE.md: small edits by a Haiku or Sonnet agent in the main checkout (owner decision 2026-10-24)

2026-10-24 10:56:39 +02:00

initial_prompt.md

Scaffold: agent starter kit (seeded from Ebb)

2026-10-17 20:15:40 +02:00

PLAN-M1.md

Plans and start prompts for every milestone; SPEC v0.2

2026-10-17 21:05:34 +02:00

PLAN-M2a.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M2b.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M2c-dev.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M2c-pi.md

SPEC v0.24: D-125 self-contained Pi compose project; workflow results

2026-10-20 19:29:35 +02:00

PLAN-M3.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M4.md

SPEC v0.6: M4 decisions (D-035 to D-039), HANDOFF rewritten

2026-10-18 07:33:46 +02:00

PLAN-M5.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M6.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M7a.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M7b.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7c.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M7d.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7e.md

SPEC v0.4: M2a and M2b decisions, handoff to the real state

2026-10-17 21:40:42 +02:00

PLAN-M7f.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-M8.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M9.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M10.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-M11.md

SPEC v0.24: D-125 self-contained Pi compose project; workflow results

2026-10-20 19:29:35 +02:00

PLAN-M12a.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M12b.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M12c.md

SPEC v0.19: D-118 Android overhaul (shared test fixtures, :core:design limits and failures); HANDOFF, prompts, hash remap in plans

2026-10-18 23:21:59 +02:00

PLAN-M12d.md

SPEC v0.9: M12b and M12c outcomes (D-055 to D-058), U2 values, UX-9 (D-059, M12d)

2026-10-18 08:34:45 +02:00

PLAN-U1.md

SPEC v0.3: orchestrator resolutions of the plans' open points

2026-10-17 21:23:38 +02:00

PLAN-U2.md

SPEC v0.8: UX-session decisions (D-047 to D-054), category contract v2, M12 plans

2026-10-18 08:14:12 +02:00

PLAN-W0.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W1.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W2.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W3.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W4.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W5.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W6.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

PLAN-W7.md

SPEC v0.28: web client programme (D-129 to D-134), plans W0 to W7

2026-10-21 20:49:00 +02:00

README-agents.md

SPEC v0.1 and project rules for Kvitt

2026-10-17 20:39:02 +02:00

SPEC.md

SPEC v0.33: owner answers of 2026-10-24 (D-156), small-edits rule (D-157)

2026-10-24 10:59:39 +02:00

S

Description

No description provided

140 MiB

Languages

Kotlin 44.1%

Rust 26.3%

TypeScript 23.9%

Python 2.5%

CSS 2%

Other 1.2%