2026-11-01 sanitize audit — history rebuilt to drop unsanitized blobs #1

Open
opened 2026-11-01 21:42:49 +00:00 by admin · 0 comments
Owner

Archive of the scrub decision (previously tracked in the old repo store; its thread was lost when the store was rebuilt to clear the unsanitized blobs).

What happened

  • The hub history contained an unsanitized msp/security-report blob (007dc40…) and the wholesale hub expansion (b42a8e3…, 284 skills of internal fleet content) in reachable ancestry of main (b195f81…).
  • Per the scrub decision (scrub rather than GC), the store was deleted and recreated. Current history = exactly 2 commits: 9c96092 (ConnectWise PSA baseline) → da6eadf (adds msp/security-report). The old SHAs are no longer objects in this store (upload-pack refuses direct-SHA fetches).

Sanitize sweep before re-publish (all to placeholders)

  • Client intel: client names, contract values, member/staff IDs and rosters, routing tables tied to named members.
  • Internal ids: n8n workflow/table/project ids, webhook paths, gateway/company IDs, exec/note numbers.
  • Credentials/identity: archived-page apiToken/sessionId, member addresses; integration & agent identities kept (they are the fleet's own automation accounts).
  • Own-instance working values (board/status/priority IDs, PSA base URL) retained; they are operational, not client, data.

Deliveries

  • Repo: git.tallerhawk.com/admin/zeus-skills, public, main = da6eadf.
  • .201 sandbox mirror re-staged from the tip (9 leaf dirs; 284-item hub-era mirror removed).
  • .90 prod mirror re-staged (9 leaf dirs) and live-API verified: catalog 9, source attribution zeus-skills; sec-ops pod refreshed (remove+add) with security-report; pod-volume md5 = mirror md5 = tip bytes.
**Archive of the scrub decision** (previously tracked in the old repo store; its thread was lost when the store was rebuilt to clear the unsanitized blobs). **What happened** - The hub history contained an unsanitized `msp/security-report` blob (`007dc40…`) and the wholesale hub expansion (`b42a8e3…`, 284 skills of internal fleet content) in reachable ancestry of `main` (`b195f81…`). - Per the scrub decision (scrub rather than GC), the store was deleted and recreated. Current history = exactly 2 commits: `9c96092` (ConnectWise PSA baseline) → `da6eadf` (adds msp/security-report). The old SHAs are no longer objects in this store (upload-pack refuses direct-SHA fetches). **Sanitize sweep before re-publish (all to placeholders)** - Client intel: client names, contract values, member/staff IDs and rosters, routing tables tied to named members. - Internal ids: n8n workflow/table/project ids, webhook paths, gateway/company IDs, exec/note numbers. - Credentials/identity: archived-page `apiToken`/`sessionId`, member addresses; integration & agent identities kept (they are the fleet's own automation accounts). - Own-instance working values (board/status/priority IDs, PSA base URL) retained; they are operational, not client, data. **Deliveries** - Repo: `git.tallerhawk.com/admin/zeus-skills`, public, `main = da6eadf`. - .201 sandbox mirror re-staged from the tip (9 leaf dirs; 284-item hub-era mirror removed). - .90 prod mirror re-staged (9 leaf dirs) and live-API verified: catalog 9, source attribution `zeus-skills`; `sec-ops` pod refreshed (remove+add) with `security-report`; pod-volume md5 = mirror md5 = tip bytes.
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/zeus-skills#1