[session 1] docs: feedback 1.3.0 board + endpoints, incident #347 lazy-proxy trap #69

2026-07-26T10:51:29-04:00

hiveiq commented

2026-07-26 10:51:29 -04:00

Session: 1

Guide updates for both of todays prod releases.

technical.feedback — the 1.3.0 board: status-counts + capabilities, the repeatable status param, and a new lane-mapping section with the two rules that must survive future edits (every status in exactly one lane; RELOCATED is WIP not Done). Corrected the permitAll list for #7/#42. Added gotchas for the XFF rate-limit trap (#5), label-resolution warnings (#14), and the Svelte $: reactive-timing trap that no build can catch. Recorded that #19 scoping is not in prod and why.

incident.incident-management (Claude tab) — corrected a stale line (mode resolves from the institution KEY, not the name, per #290) and documented #347 as an explicit do-not-simplify, including why it failed for BCOS_ADMIN only and that the pattern sits at 5 call sites.

coverage-reconcile: 132 modules, no gaps.

Also worth noting: #13 is stale — technical.feedback already exists and returns 200, not 404.

Session: 1 Guide updates for both of todays prod releases. **technical.feedback** — the 1.3.0 board: `status-counts` + `capabilities`, the repeatable `status` param, and a new lane-mapping section with the two rules that must survive future edits (every status in exactly one lane; RELOCATED is WIP not Done). Corrected the `permitAll` list for #7/#42. Added gotchas for the XFF rate-limit trap (#5), label-resolution warnings (#14), and the Svelte `$:` reactive-timing trap that no build can catch. Recorded that #19 scoping is **not** in prod and why. **incident.incident-management (Claude tab)** — corrected a stale line (mode resolves from the institution KEY, not the name, per #290) and documented #347 as an explicit do-not-simplify, including why it failed for BCOS_ADMIN only and that the pattern sits at 5 call sites. `coverage-reconcile`: 132 modules, no gaps. Also worth noting: **#13 is stale** — `technical.feedback` already exists and returns 200, not 404.

hiveiq added 1 commit 2026-07-26 10:51:29 -04:00

docs: feedback 1.3.0 board + endpoints, and the incident #347 lazy-proxy trap 60d513b861

technical.feedback:
- status-counts + capabilities endpoints; status param is repeatable (the board sends a lane)
- new 'Triage board lanes' section with the status->lane mapping and the two rules that must survive
  edits: every status belongs to exactly one lane (a status in no lane is an invisible row), and
  RELOCATED is WIP not Done (19 of 50 prod rows, so it matters)
- corrected the permitAll list: /h2-console/** is no longer in the shared chain (#7/#42), it lives in
  a @Profile(dev) chain and frameOptions is back to DENY. Verified 401 on prod
- gotchas: the XFF rate-limit trap (#5), label-resolution failures now warnings (#14), and the Svelte
  $: reactive-timing trap that a build cannot catch
- recorded that tenant scoping (#19) is NOT in prod and why it was held back

incident.incident-management (claude):
- corrected a stale line: mode resolves from the institution KEY, not the name (#290)
- documented #347 as a do-NOT-simplify: assertWritable must use a scalar query, never
  incident.getAtm().getInstitutionKey(). Includes why it failed for BCOS_ADMIN only (resolveScope()
  returns null for unscoped callers, so verifyIncidentAccess never initialised the proxy), that the
  pattern sits at 5 call sites, and that open-in-view comes from Spring Cloud Config so it must not
  be relied on.

coverage-reconcile: 132 modules, no gaps.

hiveiq merged commit 1bf200ffdd into develop

2026-07-26 10:51:30 -04:00

hiveiq deleted branch docs/feedback-130-and-incident-347

2026-07-26 10:51:30 -04:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: hiveiq-src/hiveops-guide#69