Krzysztof kuhy Rudnicki 6066201e23 Record the deployed-copy blocker; thorium autostart is dead ... Probing found a blocker the trace structurally cannot see: a script that some OTHER script copies elsewhere and runs from there cannot take an entry+lib/ shape, because the deployed entry's SCRIPT_DIR has no lib/ and dies on its first source under set -e. The trace stays green because it runs the repo copy. install_leechblock.sh is blocked on exactly this, and it is live, not theoretical: install_pacman_wrapper.sh cp's it to /usr/local/share/digital_wellbeing/, pacman_wrapper.sh:831 PREFERS that copy, and auto_install_leechblock runs on every pacman invocation. It is otherwise the best-conditioned target left (exit 0, 93 files, all hashes stable), which is exactly why it needed the check rather than the trace. setup_thorium_startup.sh is mechanically splittable — exit 0, all 8 steps covered, no deployed copy — but should not be split, because what it configures is dead. Thorium was removed in favour of chromium/librewolf; /usr/local/bin/thorium-browser is now a leftover symlink to browser-preexec-wrapper, which cannot resolve /usr/bin/thorium-browser and so treats the URL as the binary. The enabled thorium-fitatu-startup.service has been failing at every boot while reporting status=0/SUCCESS: thorium-browser: line 33: /https://www.fitatu.com/app/planner: No such file Also recorded: process spawning escapes --prefix the same way pkill does. setup_thorium_startup.sh launches a browser mid-run; check ps after tracing anything that starts a program. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011w2Pj4Ek3ZNMQVYcFHgXDY		2026-08-17 08:04:35 +02:00
..
explanations	session_autopsy: badge counts only significant candidates; zero-token aliases	2026-07-25 18:05:49 +02:00
superpowers	Split install_pacman_wrapper.sh into an entry plus four libs	2026-08-17 07:42:31 +02:00
app-split-recipes.md	Add docs/app-split-recipes.md; update the handoff to 78 left	2026-08-16 20:51:38 +02:00
device-owner-wipe-checklist.md	inFakt is SMS-only 2FA, so the wipe cannot strand the account	2026-08-10 20:04:06 +02:00
dns-filtering-parked.md	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
mcp-shortlist.html	docs: add MCP server security-triage shortlist	2026-07-17 19:16:31 +02:00
python-split-recipes.md	Apply prettier to the handoff and recipe docs	2026-08-16 18:27:18 +02:00
shared-checkout-safety.md	Retarget the handoff on verifiability; split out the shared-checkout doc	2026-08-16 23:10:25 +02:00
shell-split-recipes.md	Record the verification lessons; split the recipe doc at the cap	2026-08-16 22:06:08 +02:00
shell-split-verification.md	Record the deployed-copy blocker; thorium autostart is dead	2026-08-17 08:04:35 +02:00
syncyomi-restore-runbook.md	syncyomi_guard: refuse a collapsed payload as the new good copy	2026-08-10 15:33:18 +02:00