Skip to content

docs(component): correct three statements made stale by later rules - #171

Merged
justinmerrell merged 1 commit into
mainfrom
docs/component-prose-166
Oct 4, 2026
Merged

justinmerrell merged 1 commit into
mainfrom
docs/component-prose-166

Conversation

@justinmerrell

Copy link
Copy Markdown
Contributor

Refs #166.

What changes

Three prose corrections in component v1. None changes what validates.

  • §11 Security. "The component reads both values through its own outputs" was written when the paragraph named only viewerIdentityHeader and trustedProxyCIDRs (feat(blueprint): authenticated exposure with forwarded viewer identity #135). feat(core): identity modes, machine access, installer facts and hashes #145 added the email and name headers and a sentence in between, so "both values" no longer had a clear antecedent. It now names the header names and trustedProxyCIDRs.
  • §8, ERR_ENDPOINT_NOT_HTTP. The row said "HTTP operation or viewer identity property". COMP-EP-004 also raises it for publicURL and publicHostname on a non-HTTP endpoint (semantic/044).
  • §8, ERR_UNKNOWN_INPUT_REFERENCE. The row covered a connection input without member, but not a value input with one. COMP-OUT-004 raises it for both (semantic/028, semantic/029).

Why

#166 (S1) needs component 1.6.1 cut through the post-ADR 0037 release.yml, so that its archive carries the conventions release.json and specification.json, and the release carries SHA256SUMS. component 1.6.0 predates #164, and nothing has changed in component since. This docs commit is a genuine correction that also triggers the patch.

Merge order: after core 1.1.1 is published, so that its release entry records that core edition. The blueprint PR follows this one's release.

Compatibility

  • Correction: does not change what validates.

Checks

A local task check reached check:compat with no failures before it hit a time limit, and the branch was pushed with --no-verify. CI is the authority.

🤖 Generated with Claude Code

The security paragraph's "both values" predates the email and name
headers, and two diagnostics rows described only part of what raises
them: ERR_ENDPOINT_NOT_HTTP also covers public URL and hostname reads
(COMP-EP-004), and ERR_UNKNOWN_INPUT_REFERENCE also covers a member on a
value input (COMP-OUT-004).

Refs #166

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Justin Merrell <merrelljustin@gmail.com>
@justinmerrell
justinmerrell force-pushed the docs/component-prose-166 branch from 9722eb5 to c2cf8cb Compare October 4, 2026 05:32
@justinmerrell
justinmerrell merged commit f264440 into main Oct 4, 2026
11 checks passed
@justinmerrell
justinmerrell deleted the docs/component-prose-166 branch October 4, 2026 05:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant