From 7e027c167c4f8ed37de8ea3112bc570e178144ce Mon Sep 17 00:00:00 2001 From: Zareian Date: Sat, 3 Oct 2026 12:03:16 +0330 Subject: [PATCH] CLAUDE.md: the no-fallbacks fixes are deployed Co-Authored-By: Claude Opus 5.5 --- CLAUDE.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index cbc7f17..8cb0a70 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -38,6 +38,10 @@ failure never shows up anywhere. An audit on 2026-10-03 found and reproduced the - `resolve_grade_title` had `except Exception: pass` (now logged); `curriculum_io` read `intro_text` that no file ever contains (removed). +On the server since 2026-10-03 12:02 (`7307bfc`, service really restarted; backup +`.deploy-backups/db-before-no-fallbacks-20261003-120205.sqlite3`). Checked from outside: +`/api/home?grade=8` → 400. The server had RAG configured and no paid order without a plan. + Rules: 1. **Fail loudly over guessing.** A missing setting, row or field in production should @@ -60,8 +64,8 @@ default hosts/CORS/cache/secret key (`/api/health` warns); `LocMemCache` without `CACHE_URL`; `_annotation` defaults for answer-cache entries older than a field; Bazaar's OAuth path beside the Pishkhan token (server still uses OAuth); `birthYear` alone in `PATCH /api/user/profile` (frontend type still allows it); `totalQuestions` accepted but -ignored (frontend sends it); orders with no `plan_id` from before 2026-09-25 (the -server DB was not checked for any). +ignored (frontend sends it); orders with no `plan_id` from before 2026-09-25 (none +paid on the server on 2026-10-03). ## Before any real user: read `docs/security-before-production.md`