Krzysztof kuhy Rudnicki cc804dd311 Run enforcement from exact alarms, and re-arm it before first unlock ... The decision layer needed a runtime. A polling loop was the obvious design and the wrong one: Doze can skip a poll indefinitely, and skipping the 05:00 boundary leaves the curfew allowlist applied into the morning -- the user finds their banking app missing with no obvious cause. The transitions are known ahead of time, so they get exact alarms. The service wakes, applies, schedules the next run and stops rather than sitting resident. BootReceiver takes LOCKED_BOOT_COMPLETED as well as BOOT_COMPLETED, because the latter does not arrive until first unlock. That is not theoretical: this phone sat at RUNNING_LOCKED for minutes after an earlier reboot in this session, with no network and no app able to start. Relying on BOOT_COMPLETED alone freezes enforcement state across a reboot -- safe for hiding, not for unhiding, which is the direction that strands you without a dialer. The schedule is re-armed before unlock; the pass itself waits until storage is readable. The first on-device run logged "exact alarms not permitted", and dumpsys showed what that costs: window=+11m14s, maxWhenElapsed=+25m51s, so a 15-minute fallback could slip to 26 minutes. SCHEDULE_EXACT_ALARM is user-revocable and denied by default on Android 16; USE_EXACT_ALARM is the permission for apps whose function is acting at specific times, and is granted at install. After the change: window=0, exactAllowReason=policy_permission, whenElapsed equal to maxWhenElapsed. The service reports "not DO/PO - no enforcement applied" and does nothing when unprovisioned, rather than failing quietly, and a failure inside a pass cannot stop the next run being scheduled -- an enforcement bug should degrade one tick, not end the chain. Not yet wired: the service logs a tick rather than calling setApplicationHidden with the decision. Both halves are tested; joining them is next. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AwepyL5Lxs5QKbKkMpxxxL		2026-08-09 21:50:58 +02:00
..
agent-automation-bootstrap.json	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
app-icons-generator-2026-07-19.json	Add shared launcher-icon generator for the Flutter apps	2026-07-19 16:55:48 +02:00
billsplit-apk-buildable-2026-08-03.json	billsplit: build a real APK by dropping file_picker for file_selector	2026-08-03 14:15:40 +02:00
billsplit-move-2026-08-03.json	Move billsplit Flutter app into the monorepo	2026-08-03 12:22:22 +02:00
brother-printer-file-length-split-2026-07-17.json	fix(brother-printer): split oversized files, fix order-dependent entry test	2026-07-17 15:06:25 +02:00
brother-printer-status-accuracy-2026-07-17.json	fix(brother-printer): report the truth, not invented status codes	2026-07-17 14:49:23 +02:00
bucket-catch-2026-06-27.json	Add bucket_catch: osu!catch browser game with 100% frontend test coverage	2026-06-27 12:21:35 +02:00
byox-ladder-2026-07-17.json	feat(byox_ladder): add build-your-own-x difficulty ladder generator	2026-07-17 18:31:21 +02:00
cloud-gallery-2026-07-12.json	cloud_gallery: React media-gallery SPA served by dufs (Phase 3)	2026-07-12 06:05:52 +02:00
cloud-gallery-coverage-lint-deploy-2026-07-12.json	cloud_gallery: fix build, 100% coverage, aggressive lint; whitelist dufs_client	2026-07-12 17:29:39 +02:00
code-tutor-2026-07-10.json	Add code_tutor: interactive codebase-learning CLI	2026-07-11 00:15:46 +02:00
diet-guard-gatelock-migration-2026-06.json	Migrate diet_guard to the shared gatelock backend	2026-06-21 18:16:45 +02:00
diet-guard-meal-and-trigger-fix-2026-06-10.json	feat(diet_guard): add meal-logging screen-lock gate with trigger fix	2026-06-10 22:32:39 +02:00
digital-wellbeing-bypass-hardening-2026-05.json	security: harden digital-wellbeing bypass vectors	2026-05-16 15:41:40 +02:00
dns-filtering-parked-2026-08-05.json	Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it	2026-08-05 10:05:16 +02:00
dot-resolver-and-policy-asset-2026-08-05.json	Serve the blocklist over DoT and hand the policy to the app as an asset	2026-08-05 09:36:11 +02:00
epopeja-karta-icon-2026-08-03.json	app_icons: finish the epopeja_karta entry; whitelist it on the phone	2026-08-03 12:41:13 +02:00
extract-dufs-cloud-repo-2026-07-12.json	Extract dufs cloud (web + app + scripts) to github.com/kuhyx/dufs-cloud	2026-07-12 18:38:37 +02:00
extract-inline-python-2026-06-06.json	refactor: extract all inline Python from shell scripts into proper .py files	2026-06-06 10:31:48 +02:00
extract-session-autopsy-2026-07-26.json	Point the hook test at the extracted session_autopsy, add the artifacts	2026-07-26 20:50:44 +02:00
file-length-split-2026-06-14.json	feat: split oversized modules for 500-line limit, fix kasa coverage gap	2026-06-14 07:19:37 +02:00
focus-mode-daemon-file-length-2026-07-17.json	fix(wellbeing): split focus_mode_daemon to satisfy the 500-line limit	2026-07-17 17:36:30 +02:00
focus-owner-enforcement-engine-2026-08-09.json	Prove DPM app-hiding survives a reboot; build the enforcement decision layer	2026-08-09 21:36:26 +02:00
focus-owner-location-and-workout-2026-08-09.json	Provision home coordinates out of git; layer the workout signal; drop the test hook	2026-08-09 21:42:20 +02:00
focus-owner-service-layer-2026-08-09.json	Run enforcement from exact alarms, and re-arm it before first unlock	2026-08-09 21:50:58 +02:00
guard-lib-migration-2026-07-04.json	feat: migrate hosts-guard and shutdown-schedule-guard to guard-lib	2026-07-04 11:54:08 +02:00
import-media-archives-2026-07-12.json	import_media_archives.sh: fold Downloads media_archive zips into the cloud	2026-07-12 17:43:23 +02:00
kcd2-balatro-single-joker-face-2026-07-25.json	kcd2_dice_solver: Balatro's die has one joker face, not six	2026-07-25 16:14:04 +02:00
kcd2-dice-solver-deploy-responsive-io-2026-07-26.json	kcd2 dice solver: serve it at dice.kuhy.duckdns.org, fit all 43 dice, move inventories between devices	2026-07-26 20:01:21 +02:00
kcd2-dice-solver-initial-commit-2026-07-21.json	Track kcd2_dice_solver app and add run.sh dependency installer	2026-07-21 18:17:13 +02:00
keepass-multidevice-sync-2026-07-12.json	linux_configuration: unified multi-device KeePass sync over dufs	2026-07-12 05:00:27 +02:00
linux-config-cleanup-2026-05.json	refactor(linux_configuration): move remaining dirs + scripts/ to meta/	2026-05-15 00:53:01 +02:00
linux-config-polling-hardening-2026-05-14.json	fix(linux_configuration): harden polling/runtime scripts and add tests	2026-05-14 19:55:42 +02:00
linux-config-runtime-hardening-2026-05-08.json	Harden runtime script deployment and enforce installer safety	2026-05-08 17:44:22 +02:00
linux-config-scripts-split-2026-05.json	refactor(linux_configuration/scripts): split all scripts into single_use/ and periodic_background/	2026-05-15 00:32:35 +02:00
makepkg-stale-lock-wrapper-2026-07-16.json	fix(pacman): wrap makepkg so an orphaned db.lck can't hang makepkg -i	2026-07-17 07:46:31 +02:00
mandatory-hooks-2026-08-03.json	fix(hooks): make git hooks and their toolchain mandatory and fail-closed	2026-08-03 11:09:11 +02:00
media-cloud-sync-2026-07-12.json	linux_configuration: move Downloads media into the dufs cloud (browsable)	2026-07-12 05:19:31 +02:00
morning-routine-unified-2026-05-25.json	morning_routine: unified alarm+lock orchestrator, fix alarm audio/reliability	2026-05-25 18:55:27 +02:00
mtk-root-toolkit-2026-08-04.json	mtk_root: build the rooting toolkit before the phone lands	2026-08-04 20:38:44 +02:00
pacman-hook-stall-2026-08-03.json	Diagnose the pacman first-hook stall; fix the drift that hid a stale wrapper	2026-08-03 15:15:34 +02:00
pc-polling-runtime-validation-2026-05-10.json	Optimize polling/runtime scripts, add regressions, and sync verification artifacts	2026-05-10 02:58:11 +02:00
persistent-adb-2026-08-03.json	phone_focus_mode: reach the phone over adb without touching it	2026-08-03 13:33:45 +02:00
phone-curfew-demo-net-stopgap-2026-06-13.json	feat(phone_focus_mode): add on-demand demo curfew + netd-resistant net stopgap	2026-06-13 22:01:32 +02:00
phone-focus-cpu-hardening-2026-07-10.json	Harden phone_focus_mode CPU use; whitelist wake_alarm_sync	2026-07-11 00:16:11 +02:00
phone-focus-mode-fresh-install-2026-05-31.json	feat(phone): automate BL-9000 fresh-phone recovery after factory reset	2026-05-31 16:22:49 +02:00
phone-focus-mode-netd-cache-fix-2026-05.json	phone_focus_mode: fix YouTube DNS blocking via netd cache restart	2026-05-22 15:58:36 +02:00
phone-night-curfew-2026-06-13.json	feat(phone_focus_mode): add night curfew (23:00-05:00 at-home strict allow-list)	2026-06-13 16:48:38 +02:00
protondb-gold-silver-fix.json	fix: accept ProtonDB gold+silver combinations; add explicit skip reasons	2026-05-08 20:31:16 +02:00
pylint10-r0801-schema-validation-2026-06.json	feat: split oversized modules for 500-line limit, fix kasa coverage gap	2026-06-14 07:19:37 +02:00
reverse-survivors-2026-08-03.json	feat(reverse_survivors): migrate Reverse Survivors game into the monorepo	2026-08-03 10:45:12 +02:00
root-cleanup-2026-05-14.json	chore: spring-clean repo root (move docs, relocate batch3 script, drop stale outputs)	2026-05-14 20:01:09 +02:00
run-sh-wrapper-smoke.json	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
screen-locker-scheduled-skip-2026-05.json	screen_locker: add scheduled-skip date mechanism + hibernate on alarm nights	2026-05-22 16:00:15 +02:00
screen-locker-sick-tracker-2026-05-14.json	feat(screen-locker): add sick-day tracker and commitment debt flow	2026-05-14 19:52:15 +02:00
screen-locker-weekly-check-2026-05-28.json	screen_locker: add weekly check feature with UI integration	2026-05-28 07:04:18 +02:00
session-autopsy-package-2026-07-25.json	python_pkg: track session_autopsy, finishing its interrupted refactor	2026-07-25 16:56:43 +02:00
session-autopsy-turn-efficiency-2026-07-26.json	session-autopsy: measure turn efficiency, the dominant token cost	2026-07-26 19:29:25 +02:00
shell-tests-arch-container-2026-07-19.json	Run Arch-only shell tests in a container; harden worktree stubbing	2026-07-19 19:27:36 +02:00
shellcheck-ci-green-2026-08-04.json	Fix the 11 shellcheck findings that kept CI red since b83ce5d	2026-08-04 20:55:02 +02:00
shellcheck-strict-gate-2026-08-03.json	Fail the build on any shellcheck finding; fix the 222 the old gate hid	2026-08-03 19:49:11 +02:00
shutdown-override-i3blocks-sync-2026-07-10.json	feat(digital-wellbeing): time-boxed shutdown overrides + drift-proof i3blocks deploy	2026-07-10 21:57:05 +02:00
stats-hltb-fixes-2026-05-28.json	steam_backlog_enforcer: fix stats command — show real Rush/Leisure/Worst data	2026-05-28 07:02:48 +02:00
steam-backlog-cache-refetch-reduction-2026-05-08.json	steam_backlog_enforcer: reduce repeated cache refetches	2026-05-08 15:13:25 +02:00
steam-backlog-finished-only-next-pick-2026-05.json	steam_backlog_enforcer: only prompt next pick after game is finished	2026-05-23 21:19:44 +02:00
steam-backlog-module-split-2026-05.json	Split modules, fix tests, fix pre-commit batching	2026-05-22 22:48:28 +02:00
steam-backlog-protected-ids-2026-05-14.json	feat(steam-backlog): protect four additional Steam app IDs	2026-05-14 19:58:40 +02:00
steam-backlog-whitelist-hardening-2026-05.json	feat(steam_backlog_enforcer): harden whitelist against circumvention	2026-05-17 20:44:05 +02:00
steam-library-hide-fix-2026-05-17.json	steam_backlog_enforcer: fix library_hider crash on invalid AppIDs + improve HLTB hour extraction	2026-05-22 15:59:18 +02:00
sync-tests-fix-coverage-2026-05.json	fix: sync test paths, drop stale assertions, fix coverage gap	2026-05-16 15:46:02 +02:00
template.json	style(prettier): apply markdown/json formatting updates	2026-05-07 22:08:00 +02:00
tether-enforcer-hotspot-bypass-2026-07-13.json	phone_focus_mode: block hotspot/tethering to close the second-phone bypass	2026-07-13 10:48:59 +02:00
unrooted-focus-mode-policy-and-owner-app-2026-08-05.json	Make focus policy and blocklist usable without root; fix workout CDN unblock	2026-08-05 09:15:02 +02:00
usage-report-hz-cpu-fix-20260604.json	fix(usage_report): stop charging atop's HZ field as CPU; bundle since-last-report mode	2026-06-04 18:13:47 +02:00
vendor-agent-skills-import.json	chore(third_party): vendor agent-skills snapshot	2026-05-07 22:06:00 +02:00
wake-alarm-gatelock-migration-2026-06-22.json	Migrate wake_alarm to the shared gatelock backend	2026-06-22 07:33:49 +02:00
wake-alarm-hibernate-2026-05.json	wake_alarm + midnight_shutdown: hibernate on alarm nights instead of poweroff	2026-05-22 16:01:04 +02:00
wake-alarm-loudness-typeable-2026-05.json	wake_alarm: louder + typeable + multi-fan	2026-05-24 16:20:34 +02:00
wake-alarm-plug-fans-warnings-2026-05.json	wake_alarm: Tapo P110 plug control, fan ramp via sudo, loud warnings	2026-05-23 19:51:26 +02:00
wake-alarm-refactor-2026-05-30.json	refactor: split wake_alarm modules, fix ruff violations, enforce global coverage	2026-05-30 22:13:32 +02:00
wake-alarm-restore-display-test-gap-2026-06-22.json	Fix the real cause of the wake_alarm CI coverage gap	2026-06-22 09:14:29 +02:00
wsg-grabber-2026-07-27.json	wsg_grabber: scrape /wsg/, download every new video, triage with keep/pass	2026-07-27 14:55:30 +02:00