From 89363bca85ed42753ed964cdea597b5bcf5590ca Mon Sep 17 00:00:00 2001 From: "will.anderson" Date: Sat, 22 Aug 2026 13:07:30 -0500 Subject: [PATCH] docs(audit): part 10 - config deletion opened, dependency map logged --- FORK-AUDIT.md | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) diff --git a/FORK-AUDIT.md b/FORK-AUDIT.md index 120acdb42e..c93d3ce6d6 100644 --- a/FORK-AUDIT.md +++ b/FORK-AUDIT.md @@ -410,3 +410,37 @@ Our egress guard (src/guard/index.ts, installed at CLI entrypoint) already logs all outbound requests to ~/.local/state/neuron-guard.jsonl and blocks vendor hosts in NEURON_GUARD=strict mode. It would have caught RC#1/RC#3 traffic on day one. + +--- + +# PART 10: CONFIG DELETION - CAMPAIGN #1 OPENED (2026-08-22, uncommitted) + +## Action taken (working tree only, uncommitted) +- DELETED: packages/opencode/src/config/config.ts entirely (640 lines of + authority-routing: layering, merging, well-known discovery, remote + fetches, account/enterprise adapters). +- REPLACED WITH: ~50-line minimal local config + (~/.config/neuron/config.json; model + providerBaseURL; nothing else). + No remote fetch. No layering. No precedence machinery. +- Earlier same session: the 41-line .well-known/opencode injection block + cut from the same file (verified by diff, Part 9 RC#1). + +## THE DEPENDENCY MAP (typecheck fallout = who fed on config) +KEEP + REWIRE: provider/provider.ts (59), session/llm.ts, format, +lsp, command, skill, tool/*, snapshot, compaction, prompt, processor. +DIES WHOLE: mcp/index.ts (RC#3), share/share-next.ts + share/session.ts +(opncd.ai), agent/agent.ts remote-defined agents (replaced by Rung 1 +kernel + ledger-owned agents), server/routes experimental handlers, +control-plane/* (Part 9 RC#5). + +## STATE +- Working tree modified, NOTHING COMMITTED, nothing built from it yet. +- Next build must compile from this state; typecheck errors are the + campaign worklist above, not blockers to bundling. + +## STANDING RULE LEARNED +Context is sovereign territory: quarantined sources are characterized, +never displayed. Greps find confessions; reading finds behavior. The +problem file was packages/opencode/src/config/config.ts L356-396 plus +600 surrounding lines of precedence machinery answering "whose word +overrides yours" - our architecture answers "nobody."