diff --git a/README.md b/README.md index 2f02921..40aacfc 100644 --- a/README.md +++ b/README.md @@ -365,3 +365,31 @@ After review, the forge still had too much scaffolding and too many placeholder - Verified the affected remotes no longer track those sidecar/cache files. Keeper decision: inactive shells should be archived, not polished. Real work now belongs on repos with source, manifests, or confirmed local project content. + +## Repo-by-Repo Maintainer Decisions: 2026-05-20 + +Replaced the broad readiness checklist language with repo-specific maintainer decisions for every active repository. + +### Outputs + +- Local action report: `GITEA_REPO_ACTION_PLAN_2026-05-20.md` +- Ledger report path: `reports/GITEA_REPO_ACTION_PLAN_2026-05-20.md` +- Active readiness issues corrected: 45 +- Archived shell repos skipped: 13 +- High-confidence credential findings after remediation: 0 + +### Decision Rules Applied + +- Archived repos remain archived when they contain no real project source beyond stewardship scaffolding. +- Active repos are marked by their current blocking condition: license unresolved, artifact provenance, generic secret-review findings, or nested Git source gaps. +- Readiness issues now point to concrete next moves: review generic secret-like findings, resolve license/provenance, migrate binary artifacts to verified releases, or confirm nested Git source URLs. +- Placeholder status was not expanded further. The pass replaced it with repo-specific blocker counts and maintainer actions. + +### Still Blocked + +- Final `LICENSE` files remain blocked until ownership and upstream source licenses are proven per repo. +- Generic secret-like findings remain in 26 repos and need line-by-line review before release work. +- Release-blocking binary/archive artifacts remain in 9 repos and need either removal, release-asset migration, or provenance notes. +- Two nested Git links still lack confirmed source URLs: `c5-project/esp32-wifi-penetration-tool` and `car-key-killer/cypher-pulse`. + +Keeper decision: the next useful pass is not more scaffolding. It is targeted cleanup against the action report: secrets review first, then artifact provenance, then license resolution, then real per-project CI. diff --git a/reports/GITEA_REPO_ACTION_PLAN_2026-05-20.md b/reports/GITEA_REPO_ACTION_PLAN_2026-05-20.md new file mode 100755 index 0000000..898feca --- /dev/null +++ b/reports/GITEA_REPO_ACTION_PLAN_2026-05-20.md @@ -0,0 +1,70 @@ +# Repo-by-Repo Action Plan - 2026-05-20 + +This is the no-fluff maintainer plan after cleanup and credential remediation. Archived shells are separated from active repos. Active repos have concrete blockers and next work from the deep audit. + +| Repo | State | Kind | Files | Local Source | Main Blockers | Next Move | +|---|---|---|---:|---|---|---| +| 4-way-handshake | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| 4-way-handshake-2 | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| 4-way-handshake-3 | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| ai | BLOCKED: artifact provenance | hardware | 52 | - | 6 artifacts, license | Resolve license/provenance before adding a final LICENSE. | +| ai-girlfriend | BLOCKED: license unresolved | hardware | 70 | ai-girlfriend | license | Resolve license/provenance before adding a final LICENSE. | +| alpaca-llm-bot-v1 | BLOCKED: license unresolved | automation | 71 | - | license | Resolve license/provenance before adding a final LICENSE. | +| autogpt-workspace | BLOCKED: license unresolved | automation | 42 | autogpt | license | Resolve license/provenance before adding a final LICENSE. | +| brute-rat | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| bw16 | BLOCKED: license unresolved | hardware | 43 | bw16 | 2 secret-review, 2 nested-git, license | Review 2 generic secret-like findings and redact or mark false positive. | +| bw16-research | BLOCKED: license unresolved | hardware | 91 | bw16 raper | 16 secret-review, license | Review 16 generic secret-like findings and redact or mark false positive. | +| c5-jacked | BLOCKED: license unresolved | hardware | 40 | C5 JACKED | 5 secret-review, 1 nested-git, license | Review 5 generic secret-like findings and redact or mark false positive. | +| c5-project | BLOCKED: license unresolved | hardware | 149 | - | 25 secret-review, 1 nested-git, license | Review 25 generic secret-like findings and redact or mark false positive. | +| capture-kali | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| car-fob-killer | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| car-key-killer | BLOCKED: license unresolved | hardware | 64 | - | 1 nested-git, license | Resolve license/provenance before adding a final LICENSE. | +| carding-git-easyCarding | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| clams-av-gui | BLOCKED: license unresolved | software | 43 | clams av gui | 2 nested-git, license | Resolve license/provenance before adding a final LICENSE. | +| common | BLOCKED: license unresolved | hardware | 54 | - | license | Resolve license/provenance before adding a final LICENSE. | +| cute-handshake-capture | BLOCKED: license unresolved | hardware | 79 | - | 1 secret-review, license | Review 1 generic secret-like findings and redact or mark false positive. | +| dark-lord | BLOCKED: license unresolved | automation | 566 | - | 2 secret-review, license | Review 2 generic secret-like findings and redact or mark false positive. | +| dead-rat | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| democratic-money | BLOCKED: license unresolved | automation | 488 | - | 11 secret-review, license | Review 11 generic secret-like findings and redact or mark false positive. | +| discord-automation-workspace | BLOCKED: license unresolved | automation | 43 | discords | 4 secret-review, 2 nested-git, license | Review 4 generic secret-like findings and redact or mark false positive. | +| discord-tooling-collection | BLOCKED: artifact provenance | automation | 45 | discored raper | 6 secret-review, 1 artifacts, 6 nested-git, license | Review 6 generic secret-like findings and redact or mark false positive. | +| docker-compose-scratchpad | BLOCKED: license unresolved | software | 46 | docker | 20 secret-review, 2 nested-git, license | Review 20 generic secret-like findings and redact or mark false positive. | +| docs | BLOCKED: license unresolved | software | 46 | - | license | Resolve license/provenance before adding a final LICENSE. | +| emulator-firmware | BLOCKED: license unresolved | hardware | 45 | - | license | Resolve license/provenance before adding a final LICENSE. | +| esp32c5-workspace | BLOCKED: artifact provenance | hardware | 43 | esp32c5 | 3 secret-review, 97 artifacts, 3 nested-git, license | Review 3 generic secret-like findings and redact or mark false positive. | +| evil-bw16-orchestrator | BLOCKED: license unresolved | hardware | 66 | evil bw 16 | 26 secret-review, license | Review 26 generic secret-like findings and redact or mark false positive. | +| evil-cardputer | BLOCKED: artifact provenance | hardware | 43 | evil cardputer | 200 secret-review, 15 artifacts, 2 nested-git, license | Review 200 generic secret-like findings and redact or mark false positive. | +| gitea-stewardship-ledger | BLOCKED: license unresolved | software | 40 | - | license | Resolve license/provenance before adding a final LICENSE. | +| housing-helper | BLOCKED: license unresolved | software | 128 | - | 7 secret-review, license | Review 7 generic secret-like findings and redact or mark false positive. | +| iceman-webui | BLOCKED: license unresolved | hardware | 51 | iceman_webui | 4 secret-review, 2 nested-git, license | Review 4 generic secret-like findings and redact or mark false positive. | +| jammerremix | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| mayhem | BLOCKED: license unresolved | hardware | 43 | MAYHEM | 2 nested-git, license | Resolve license/provenance before adding a final LICENSE. | +| meetme-bot-workspace | BLOCKED: license unresolved | automation | 67 | meetme bot | 5 secret-review, 2 nested-git, license | Review 5 generic secret-like findings and redact or mark false positive. | +| meshtastic-workspace | BLOCKED: artifact provenance | hardware | 43 | meshtastic | 1 secret-review, 12 artifacts, 2 nested-git, license | Review 1 generic secret-like findings and redact or mark false positive. | +| MISFIT | BLOCKED: license unresolved | hardware | 244 | - | 10 secret-review, license | Review 10 generic secret-like findings and redact or mark false positive. | +| MONEYTOOLS | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| my-loves-calendar | BLOCKED: license unresolved | automation | 90 | - | license | Resolve license/provenance before adding a final LICENSE. | +| n8n-workspace | BLOCKED: license unresolved | automation | 44 | n8n god | license | Resolve license/provenance before adding a final LICENSE. | +| nfc-pn532-warlord | BLOCKED: license unresolved | hardware | 322 | - | 1 secret-review, license | Review 1 generic secret-like findings and redact or mark false positive. | +| nrf24-jammer-2.4ghz-boosted | ARCHIVED | hardware | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| p4-bridge | BLOCKED: license unresolved | hardware | 4500 | p4-bridge | 6 secret-review, 1 nested-git, license | Review 6 generic secret-like findings and redact or mark false positive. | +| p4-gemini-chatbot | BLOCKED: artifact provenance | hardware | 72 | p4 chatbot 83125 | 92 artifacts, 1 nested-git, license | Resolve license/provenance before adding a final LICENSE. | +| p4-voice-panel | BLOCKED: license unresolved | hardware | 54 | p4 pannel | 6 secret-review, license | Review 6 generic secret-like findings and redact or mark false positive. | +| password-cracker | BLOCKED: license unresolved | software | 54 | - | license | Resolve license/provenance before adding a final LICENSE. | +| pn532-esp32-scanner | BLOCKED: license unresolved | hardware | 53 | pn532 esp32 | 2 secret-review, license | Review 2 generic secret-like findings and redact or mark false positive. | +| pn532final | ARCHIVED | hardware | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | +| proxy-god | BLOCKED: license unresolved | automation | 134 | - | 3 secret-review, license | Review 3 generic secret-like findings and redact or mark false positive. | +| rdp-brute | BLOCKED: license unresolved | automation | 80 | - | 2 secret-review, license | Review 2 generic secret-like findings and redact or mark false positive. | +| s3-ai-friend-firmware | BLOCKED: artifact provenance | hardware | 42 | s3 ai friend | 1 artifacts, license | Resolve license/provenance before adding a final LICENSE. | +| s3-cam-mini | BLOCKED: license unresolved | hardware | 46 | s3 cam mini | 4 secret-review, license | Review 4 generic secret-like findings and redact or mark false positive. | +| s3nfc | BLOCKED: license unresolved | hardware | 43 | s3nfc | 2 nested-git, license | Resolve license/provenance before adding a final LICENSE. | +| secret-firmware-drop | BLOCKED: artifact provenance | hardware | 42 | secret firmware finaly here | 1 artifacts, license | Resolve license/provenance before adding a final LICENSE. | +| security-scripts-tools | BLOCKED: artifact provenance | hardware | 45 | hacking scripts and tools | 24 secret-review, 2 artifacts, 6 nested-git, license | Review 24 generic secret-like findings and redact or mark false positive. | +| tinder-bot-workspace | BLOCKED: license unresolved | automation | 42 | tinder bot | license | Resolve license/provenance before adding a final LICENSE. | +| wifi--killer | ARCHIVED | software | 40 | - | license | Keep archived until real source or a clear upstream import is provided. | + +## Issue Update Summary + +- Active readiness issues corrected: 45 +- Archived repos skipped: 13 +- High-confidence credential findings after remediation: 0 \ No newline at end of file