nexxo 9e485efe87 Write the firewall's running order into the plan, not just the commit ... The previous commit moved the nftables lockdown out of Task 5 and explained why in its message. A commit message is not where the next person looks. Task 5 now carries it: the bridge is normally already there because the ISO installer writes it, the lockdown belongs in Task 9 because SecureHostFirewall ran last for a reason, and "check from outside" cannot mean what it says before the tunnel exists — so the script checks inside-out and says so. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-30 20:06:48 +02:00
..
design	Write the handoff, and rescue the approved templates into the repo	2026-07-27 20:18:20 +02:00
handoffs	Put the price recognition back, all 3526 lines of it	2026-07-30 16:35:55 +02:00
specs	docs: Phase D spec — service framing, redesign & CRUD completeness	2026-07-25 14:13:23 +02:00
superpowers	Write the firewall's running order into the plan, not just the commit	2026-07-30 20:06:48 +02:00
deployment.md	feat(deploy): releases you can pin to, and a version that tells the truth	2026-07-26 15:21:38 +02:00
handoff-plan-catalogue.md	docs: handoff for the plan catalogue rebuild	2026-07-26 10:43:17 +02:00
monitoring-uptime-kuma.md	fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe	2026-07-25 20:19:32 +02:00
wireguard-hub.md	docs(wireguard): document the ownership model and config storage	2026-07-25 22:55:14 +02:00