The milestone v4.0.0-alpha.4, in rank order: what the review after v4.0.0-alpha.3 found (Captain Bob, 2026-11-07: "a list of problems, deficiencies, smells and so on placed in issues by rank priority"), with the open issues that belong to it. One issue per finding, each with its evidence and when it is done.
must
#133 Gitea serves logins, the API and git over plain HTTP, with no redirect to HTTPS
#134 Rotate what was exposed on 2026-11-07 (with #109)
#131 Acceptance: riscv64 intermittently misses "Boot disk: not a StarshipOS stick"
#135 The developer protocol: run the nightly by hand, no Nexus, evidence in the PR
#129 CI cleans up its litter (server side done; Nexus left)
should
#136 CI: when an acceptance check fails, print the serial log around it (helps #131)
#139 Capsule trust: the signing certificate never checked against the root; an unsigned capsule only warns (a ruling)
#140 CI's one concurrency group cancels a waiting run when another joins (a ruling)
The v4.0.0 milestone (#4-#9, #83-#85: v4 equivalent to v3, K=1.0, the mesh, Verilator) is what 4.0.0 itself will be; the boards (#26-#29, #96), the stick increments (#92-#95) and the demo (#115-#117) keep their own.
Checked against the tree on 2026-11-07: no secrets or private keys in tracked files; the only warnings in a kernel build are mkcapsule's; six TODO/FIXME markers, of which only doe_log.c's matters (#142).
The milestone **v4.0.0-alpha.4**, in rank order: what the review after v4.0.0-alpha.3 found (Captain Bob, 2026-11-07: "a list of problems, deficiencies, smells and so on placed in issues by rank priority"), with the open issues that belong to it. One issue per finding, each with its evidence and when it is done.
### must
1. #133 Gitea serves logins, the API and git over plain HTTP, with no redirect to HTTPS
2. #134 Rotate what was exposed on 2026-11-07 (with #109)
3. #131 Acceptance: riscv64 intermittently misses "Boot disk: not a StarshipOS stick"
4. #135 The developer protocol: run the nightly by hand, no Nexus, evidence in the PR
5. #129 CI cleans up its litter (server side done; Nexus left)
### should
6. #136 CI: when an acceptance check fails, print the serial log around it (helps #131)
7. #139 Capsule trust: the signing certificate never checked against the root; an unsigned capsule only warns (a ruling)
8. #140 CI's one concurrency group cancels a waiting run when another joins (a ruling)
9. #137 .claude/CLAUDE.md has drifted from the tree
10. #138 The Book of Fabric, published with every release
11. #126 Downloads page on the .com, from Gitea Releases
12. #109 Revoke the access token claude-session-20261106 (part of #134)
### nice
13. #141 Every acceptance boot commits an empty DoE CSV
14. #142 doe_log.c: three DoE columns are always 0
15. #143 tools/mkcapsule.c: the kernel build's only warnings
16. #144 kernel_main.c's header still says "M7: Not started"
17. #145 Every kernel build rewrites two tracked files
18. #146 Sites: small things on the .com and .org
### Not in this milestone
The v4.0.0 milestone (#4-#9, #83-#85: v4 equivalent to v3, K=1.0, the mesh, Verilator) is what 4.0.0 itself will be; the boards (#26-#29, #96), the stick increments (#92-#95) and the demo (#115-#117) keep their own.
Checked against the tree on 2026-11-07: no secrets or private keys in tracked files; the only warnings in a kernel build are mkcapsule's; six TODO/FIXME markers, of which only doe_log.c's matters (#142).
🤖 Filed with [Claude Code](https://claude.com/claude-code)
rajames
added this to the v4.0.0-alpha.4 milestone 2026-11-07 20:16:12 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The milestone v4.0.0-alpha.4, in rank order: what the review after v4.0.0-alpha.3 found (Captain Bob, 2026-11-07: "a list of problems, deficiencies, smells and so on placed in issues by rank priority"), with the open issues that belong to it. One issue per finding, each with its evidence and when it is done.
must
should
nice
Not in this milestone
The v4.0.0 milestone (#4-#9, #83-#85: v4 equivalent to v3, K=1.0, the mesh, Verilator) is what 4.0.0 itself will be; the boards (#26-#29, #96), the stick increments (#92-#95) and the demo (#115-#117) keep their own.
Checked against the tree on 2026-11-07: no secrets or private keys in tracked files; the only warnings in a kernel build are mkcapsule's; six TODO/FIXME markers, of which only doe_log.c's matters (#142).
🤖 Filed with Claude Code