Discord Bot Ecosystem
Two Discord bots for workspace automation. Evolution bot handles revenue and capability updates. Orchestrator bot manages workspace status, game updates, and cross-project awareness.
Activity Timeline
Burn-guard's per-account background-session override rose from 1 to 2. The orchestrator moved to a deadman-nudge-driven pass cycle with background task monitoring active.
The unstrand and unstrand_once paths authorized via REPORTING instead of the keystroke predicate. Validation on a 315-row capture corpus found 54 nonempty-composer scenarios at risk of an unintended Escape keystroke.
The bug reproduced in 54 of 315 real captures with non-empty composer state. It must be fixed before deployment.
unstrand() checked REPORTING predicate instead of keystroke predicate. Corpus replay quantified scope. Diff blocked pending predicate rework.
P1 defect: unstrand() authorization bypass allows escape key to dismiss dialogs for all 54 composers without predicate check.
Code review of pane-state.sh identified unstrand() authorizing through the wrong predicate and a removed safety check that allows execution with a live dialog on screen. Corpus replay of 315 real captures found 54 production-reachable failure scenarios. Dispatch halted.
Bug located in unstrand() function. Production dispatch blocked pending fix.
curl -sf | jq pipeline was opaque on API refusal; replaced with explicit error checks. Secondary credential scanner using --hidden and git check-ignore validation integrated to gh-security-audit.sh. Audit dry-run failures (exit 143 timeout, killed) remain unresolved.
pipefail interaction caused curl/jq errors to report success silently — corrected. Hidden-file and git check-ignore validation now integrated into the monthly gh-security-audit.sh run.
Paper account onboarded 08-07 with full smoke-test pass; five-stage commissioning sequence delivered.
pnpm (4.0 GB), npm (2.6 GB), and Cypress (2.6 GB) flagged as re-creatable. Hermes capability audit corrected a false report: token streaming supported via GatewayStreamConsumer; the gap is rate-limit, not missing capability.
SSH and webhook operational; Discord bot token blocked. Last-writer-wins sync creates silent data loss on simultaneous writes during boot window; 38 orphaned conflicts found from March. Auth refresh token expires 2026-08-14.
1060 segments produced via GPU transcription (53:53 total). SpaceX report covers earnings/unlock/expiry timing analysis with Kokoro TTS narration and GPT Pro cross-validation. Report card enforcement expanded to 4 checkpoints; Wave 2 queued.