mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-10-25 06:33:13 +08:00
The cache-private identity failure printed a bare status name while the actual rule that refused - POSIX owner/mode/extended-ACL steps, Windows owner class, mutation-capable DACL entries, ancestry components, the owner/DACL repair - stayed mute, costing a blind CI round-trip per guess. Both platform gates now record the object and rule at the exact failing check (cbm_daemon_ipc_validation_detail), main.c appends it to the identity message, and the Windows client's server-identity check logs its two previously-silent early exits (server PID query, process open - a dead server PID that Windows reaped or reused). Validation policy is unchanged everywhere; refusals only stop being anonymous. Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>