Files
codebase-memory-mcp/src
Martin Vogel 3fd3385564 fix(daemon): name the failing check behind every private-namespace refusal
The cache-private identity failure printed a bare status name while the
actual rule that refused - POSIX owner/mode/extended-ACL steps, Windows
owner class, mutation-capable DACL entries, ancestry components, the
owner/DACL repair - stayed mute, costing a blind CI round-trip per
guess. Both platform gates now record the object and rule at the exact
failing check (cbm_daemon_ipc_validation_detail), main.c appends it to
the identity message, and the Windows client's server-identity check
logs its two previously-silent early exits (server PID query, process
open - a dead server PID that Windows reaped or reused).

Validation policy is unchanged everywhere; refusals only stop being
anonymous.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
2026-07-18 18:51:36 +02:00
..
2026-07-18 01:26:08 +02:00