Krzysztof kuhy Rudnicki 1ea94e142c lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window ... Gateway mode routes LAN devices through the PC: forced DNS, DoH/DoT dropped. The work laptop still bypassed it through Cloudflare WARP, so the WARP ingress is dropped too. warp_window.sh opens it for the LAN only Mon/Fri 09:00-15:30 (nft set with a timeout to 15:30), asked for over a forced-command key by warp_home.sh, which keeps WARP off at home otherwise because WARP fails closed. Also: dnsmasq upstreams, AAAA filtering, DoH canary, and extracted_repo_dir resolving ~/src first (the nightly blocklist refresh had failed since 2026-09-11). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019C8pdLR4MePsLocE1pWz7F		2026-10-25 09:52:40 +01:00
..
contracts	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
evidence	lan blocker: gateway mode, WARP drop with a Mon/Fri 09:00-15:30 window	2026-10-25 09:52:40 +01:00
memory	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
plans	Re-point paths for the ~ reorganisation (home-tidy)	2026-09-11 20:50:19 +02:00
sessions	chore(agent): add governance checks and artifact workflow scaffolding	2026-05-07 22:03:43 +02:00
specs	Adopt the four markdown namespaces and gate them	2026-08-24 15:55:46 +02:00
workflows	chore(agent): add governance checks and artifact workflow scaffolding	2026-05-07 22:03:43 +02:00