Tags: 01rabbit/Phasmid
Tags
release: 0.6.0, and give the two new behaviours claims to answer to (#… …197) `docs/VERSIONING.md` makes this a MINOR bump: no `vault.bin` format changed and no claim was removed from `docs/CLAIMS.md`. `dummy_generator.py` was removed, but nothing in `src/` imported it and no CLI, TUI or WebUI path reached it, so no documented operator behaviour left with it. The `[Unreleased]` block had accumulated three `### Added` and three `### Fixed` headings from six merges. Merged into one of each, and moved the security-impacting entries under `### Security` as this file's own Changelog Rule requires - the destroy-password path, `/destroy_face`, and both attempt limiter defects, one of which meant the CLI-side retrieval lockout never counted past a single failure. Two behaviours shipped in this cycle had no claim to answer to. CLM-46 states what the clearing password does when it is typed into the retrieval field: ends the entry it belongs to and no other, returns nothing, and is answered exactly as a mistyped password is. CLM-47 states that Doctor reports coverage as counts and never names an entry. CLM-46 needed a source, and `docs/RESTRICTED_ACTIONS.md` did not mention either clearing path, so it now carries a section on both - including the reason the silent one exists at all and the fact that its cost is that success is never reported. The submission docs and two code comments said "0.5.0" for behaviour that had not been released yet; that behaviour is this release. Co-authored-by: Claude <noreply@anthropic.com>
docs: update the deck for the nine-step demo, release 0.5.0 (#183) Slides 23 and 24 still described the eight-step, TUI-centred flow. Three things were actively wrong on stage: "Store a file with the object cue" names the TUI's Add File, deactivated in #169, when storing now happens in the WebUI; the walkthrough previewed only a successful open, while the demo's centrepiece is now one container opened by two passwords yielding two different files; and the footer legend still listed Doctor, which #169 removed from it. Applied with python-pptx rather than by hand. Only slide23.xml, slide24.xml and their two notesSlides changed - verified by ZIP part diff, with the other 22 slides and the 26-slide count untouched. LibreOffice cannot load this deck in this environment - not the edit, the original fails the same way - so overflow was checked by computing text width instead of rendering. Most of the edited shapes are Courier New, whose 0.6 em advance makes the width exact; the one Calibri shape was measured with Liberation Sans, which is wider and so errs safe. Widest result is 91% of its box, and the Walkthrough list is narrower than before. Figures are recorded in the accompanying notes file, which was a hand-off instruction sheet and is now the record of what was applied. Also cuts 0.5.0. MINOR per docs/VERSIONING.md: no vault.bin format changed and no claim was removed. The registry migration in #180 is one-way, so that is called out under its own heading rather than left for someone to discover on a downgrade. Claude-Session: https://claude.ai/code/session_01Lx4dCiPgkqtC2b17GtDU6z Co-authored-by: Claude <noreply@anthropic.com>
fix: deduplicate the 0.4.0 CHANGELOG section (#175) The 0.4.0 backfill in #174 duplicated four Fixed bullets (run_webui_probe.sh, bootstrap_pi.sh, validate_pi_environment.sh, .gitignore) that the pre-existing Unreleased section already documented, and left a second "### Changed" heading behind it - the Edit's old_string only matched through the "### Fixed" heading line, not the bullets that used to follow it, so the original content survived in place rather than being replaced or merged. Removes the newly-written duplicates, keeping the original (more detailed) wording, and merges the two Changed sections and two orphaned Fixed blocks into one of each. No content lost - the "Expert controls" and four script fixes are still present, just no longer duplicated or mislabeled as Changed. Co-authored-by: Claude <noreply@anthropic.com>
v0.3.0 WebUI page access is authenticated for peers that are not on loopback, and DNS rebinding is blocked by Host header validation. Completes remediation of GHSA-2gm6-2phc-wv26: 0.2.0 restored the loopback bind default, this release fixes the unauthenticated surfaces themselves.
v0.2.0 Simple Operator UI as the default surface, and restoration of the documented WebUI loopback bind default. Security: 0.1.4 bound the WebUI to 0.0.0.0 from the TUI 'w' key, exposing unauthenticated page HTML, the embedded mutation token, and /video_feed to any attached network. 0.2.0 restores loopback; USB gadget access is opt-in via PHASMID_WEBUI_EXPOSE_GADGET. Breaking: reaching the WebUI from another machine now requires that opt-in. 0.1.5 was never tagged; its changes ship here.