[docs] record SM-07/08 closure and release blockers
This commit is contained in:
@@ -3,6 +3,12 @@
|
||||
## Current state
|
||||
Implementation is in progress in `/Users/kunthawat/Gitea/Chatwoot`; source changes are present and remain unpushed.
|
||||
|
||||
### Latest handoff — 2026-08-16 03:04 +0700
|
||||
- `19dc449` — SM-07 local-only observability: Sentry/APM packages and boot paths removed; exception tracking remains local-only; exact post-commit review for `372f316..19dc449` passed with empty blocking arrays.
|
||||
- `364e72f` — SM-08 dashboard arbitrary-script injection removal: `DASHBOARD_SCRIPTS` reader/config/sink removed; exact post-commit review passed with empty blocking arrays; Vite production build exited 0.
|
||||
- Current `HEAD` is `364e72f`; no push, deploy, HTTP request, DNS lookup, or credential use occurred.
|
||||
- Residual Hub cleanup is implemented in the worktree but **not committed**: fixed Hub URL/push relay/Hub changelog are removed, Enterprise shared billing callers are preserved behind validated `CHATWOOT_BILLING_URL`, and privacy audit findings are zero. Commit is blocked because fresh delegated reviewers timed out/incomplete and therefore produced no valid approval verdict.
|
||||
|
||||
### Verified checkpoints
|
||||
- `8ebb320` — privacy/branding audit harness.
|
||||
- `832a7fd` — Hub sync/registration/telemetry removal.
|
||||
|
||||
Reference in New Issue
Block a user