Krzysztof kuhy Rudnicki b1de6f8d38 Take the geofence out of YouTube's reach, and pin infakt on ... Leaving the house was an off switch. The AWAY branch returned early with packagesToShow = every installed package, so walking 150m from home restored YouTube -- which is the exact affordance device owner was provisioned to remove. always_blocked_packages is exempt from all four branches: AWAY hides them, the allowlist loop cannot show them, and the workout release skips them, because otherwise "go for a run" is the off switch instead. Chrome is included as a second route to the same content; Firefox stays, and carries the uBlock filters. Play is deliberately left geofenced so apps can still be installed away from home -- and a hidden package cannot be reinstalled from Play anyway. infakt moves from the allowlist to SYSTEM_NEVER_DISABLE. Allowlisting only held while it stayed in BOTH the day and night lists, and dropping it from either would silently make it hideable; isAllowed() consults the never-disable list before the curfew split, so it now holds under every condition. It is device-paired to a bank over SMS, so losing it strands the same re-authentication chain a hidden Messages app would. The exporter now refuses an always-blocked package that is not also blockable: the runner filters unopted system packages out of installedPackages, so such an entry would never be hidden and nothing would say so. Verified: 128 Python tests at 100% branch coverage, 16 Kotlin tests, the new ones canary-checked by breaking an assertion and confirming the suite actually fails. On device, youtube/music/chrome/vending are hidden=true, infakt hidden=false, uninstall still refused. The AWAY path itself is unit-tested but NOT verified on hardware: with no home_location.json every pass decides LOCATION_UNKNOWN, so the branch is unreachable on this phone until coordinates can be provisioned. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_014DqEd1uUhyT52KjaNeLanC		2026-08-10 21:28:25 +02:00
..
cleanup-2026-05	chore: spring-clean repo root (move docs, relocate batch3 script, drop stale outputs)	2026-05-14 20:01:09 +02:00
explanations	session_autopsy: badge counts only significant candidates; zero-token aliases	2026-07-25 18:05:49 +02:00
superpowers	Take the geofence out of YouTube's reach, and pin infakt on	2026-08-10 21:28:25 +02:00
device-owner-wipe-checklist.md	inFakt is SMS-only 2FA, so the wipe cannot strand the account	2026-08-10 20:04:06 +02:00
dns-filtering-parked.md	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
mcp-shortlist.html	docs: add MCP server security-triage shortlist	2026-07-17 19:16:31 +02:00
syncyomi-restore-runbook.md	syncyomi_guard: refuse a collapsed payload as the new good copy	2026-08-10 15:33:18 +02:00