From a086a8c495f1f03be7f2cc5f3c356e07c7bb9008 Mon Sep 17 00:00:00 2001 From: Dan Connolly Date: Wed, 7 Oct 2026 20:33:08 -0500 Subject: [PATCH] capsite: checklist: 1g, notes on public items are public too The public cache keeps public items whole, private annotations and comments included (2,525 of 14,645). Dan finds that acceptable; the goal is to finish thinking it through, not to fix a leak. Generated-by: Claude Opus 5.5 --- capsite-checklist.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/capsite-checklist.md b/capsite-checklist.md index 0ed4c45..517e7ce 100644 --- a/capsite-checklist.md +++ b/capsite-checklist.md @@ -79,6 +79,20 @@ narrative. refresh. Stopgap today: "invalidate the last N days" on the webkey page (`invalidateRecent`), then fill. + - [ ] **1g. Policy: notes on public items are public too.** The public + cache drops private *items* (`publicOnly`) but keeps public items + whole, including annotations, comments, and sticky notes that + diigo marks private (`pri_a_count`/`pri_c_count`/ + `pri_sticky_count`: 2,525 of 14,645 stored public items, found + 2026-10-08), and `/public/` JSON serves them. **Dan + finds this acceptable as is**; this goal is to finish thinking + it through, not to fix a leak. Open points: does diigo.com's + own public view hide them (so readers are surprised)? the + `comments` array may carry *other people's* words; which fields + does potluck quote (annotations are the best commentary: see + [the issues sketch](potluck/issues-sketch.md))? If the policy + changes, stripping stored rows is a durable-state migration. + - [ ] **2. madmode reads the public cache**: public data, so no capability, no cookie, no plugin sync job, no cron on madmode's side. madmode fetches `GET /public/dckc-madmode` with