Point at dejima-guard, now that there is somewhere to point #23

2026-08-29T14:14:31-07:00

dejima-agent commented

2026-08-29 14:14:31 -07:00

Summary generated by LLM agent

dejima-guard is public now, and nothing here pointed at it except the v5 upgrade note.

Three places, each for a different reader:

Under "it does not prevent root on the devbox", which is where somebody learns the limit. One sentence naming the thing that notices if it happens. This is the logical hook rather than a mention: the paragraph states a gap and now names what fills it.

A section before Tests, where the reader has just finished How it fails and is holding exactly the right question. It leads with this repository's own blind spot rather than with the guard's features, because that is the honest version of the pitch: every check on the page runs on the box it is checking, when you run it, and the baseline drift compares against lives on the machine whose drift it describes. The audit bounds an intruder who did not think to look, and has nothing at all to say at three in the morning.

A row in Further reading, beside dejima-ci-hardener, for anyone looking for the shape of the family rather than for a next step.

The section closes with what adopting it costs, in one sentence, since the question after any pitch is whether this is a weekend: a restricted key, and one firewall rule if the guard is not already on your admin subnet.

Tested: 181 passing. The link checker covers the new relative link to the v5 note.

**Summary generated by LLM agent** dejima-guard is public now, and nothing here pointed at it except the v5 upgrade note. Three places, each for a different reader: **Under "it does not prevent root on the devbox"**, which is where somebody learns the limit. One sentence naming the thing that notices if it happens. This is the logical hook rather than a mention: the paragraph states a gap and now names what fills it. **A section before Tests**, where the reader has just finished *How it fails* and is holding exactly the right question. It leads with this repository's own blind spot rather than with the guard's features, because that is the honest version of the pitch: every check on the page runs on the box it is checking, when you run it, and the baseline `drift` compares against lives on the machine whose drift it describes. The audit bounds an intruder who did not think to look, and has nothing at all to say at three in the morning. **A row in Further reading**, beside dejima-ci-hardener, for anyone looking for the shape of the family rather than for a next step. The section closes with what adopting it costs, in one sentence, since the question after any pitch is whether this is a weekend: a restricted key, and one firewall rule if the guard is not already on your admin subnet. Tested: 181 passing. The link checker covers the new relative link to the v5 note.

dejima-agent added 1 commit 2026-08-29 14:14:32 -07:00

Point at dejima-guard, now that there is somewhere to point

tests / runner-env (pull_request_target) Successful in 34s

Details

tests / tests (pull_request_target) Successful in 1m3s

Details

4b023cbc3b

Three places, each for a different reader. The line under "it does not prevent
root" is where somebody learns the limit, so it is where the thing that notices
belongs. A section before Tests makes the case, because the reader has just
finished How it fails and is holding exactly the right question. A row in
Further reading puts it beside the other sister project, where anyone looking
for the shape of the family will find it.

The pitch leads with this repository's own blind spot rather than the guard's
features: every check here runs on the box being checked, when you run it, and
the baseline drift compares against lives on the machine whose drift it
describes. That is the gap, and it is more honest than a list of what the guard
does.

It also says what adopting it costs, in one sentence, since the question after
any pitch is whether this is a weekend.

branderson approved these changes 2026-08-29 14:20:56 -07:00

branderson merged commit a81eba16c0 into main

2026-08-29 14:21:00 -07:00

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dejima/dejima-devbox-hardener#23