8121d8a4ac
All checks were successful
ci/woodpecker/push/default Pipeline was successful
Viktor (owner) wants agents to stop refusing file reads the OS already permits. wizard holds passwordless root ((ALL) NOPASSWD: ALL), so the managed-settings rule 'never read another user's ~/.claude' was stricter than the OS itself. The managed-settings policy (/etc/claude-code/managed-settings.json) was updated out-of-band to defer to OS/sudo authorization with no extra prompt; backup kept at .bak-2026-06-26. This ADR records the decision, its symmetry across sudo-holders, and the larger blast radius. ADR-0011's usage-telemetry design is unchanged; only the cross-user privacy norm it referenced is superseded. The original ask was to delete ADR-0011 — superseded instead to preserve the audit trail and the ADR-0012/0013 references. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 0001-android-emulator-in-cluster.md | ||
| 0002-all-image-builds-off-infra-gha-ghcr.md | ||
| 0003-keep-forgejo-canonical-complete-mirror.md | ||
| 0004-homelab-unified-cli.md | ||
| 0005-homelab-v01-scope.md | ||
| 0006-homelab-work-and-tf.md | ||
| 0007-homelab-k8s-verbs.md | ||
| 0008-homelab-memory-verbs.md | ||
| 0009-homelab-ci-deploy-verbs.md | ||
| 0010-homelab-net-obs-verbs.md | ||
| 0011-homelab-usage-telemetry.md | ||
| 0012-homelab-ha-verbs.md | ||
| 0013-homelab-browser-verbs.md | ||
| 0014-service-identity-and-east-west-observability.md | ||
| 0015-os-is-the-authorization-boundary.md | ||