CLAUDE.md: the no-fallbacks fixes are deployed

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-10-03 12:03:16 +03:30
parent 7307bfcadb
commit 7e027c167c

View File

@@ -38,6 +38,10 @@ failure never shows up anywhere. An audit on 2026-10-03 found and reproduced the
- `resolve_grade_title` had `except Exception: pass` (now logged); `curriculum_io` read - `resolve_grade_title` had `except Exception: pass` (now logged); `curriculum_io` read
`intro_text` that no file ever contains (removed). `intro_text` that no file ever contains (removed).
On the server since 2026-10-03 12:02 (`7307bfc`, service really restarted; backup
`.deploy-backups/db-before-no-fallbacks-20261003-120205.sqlite3`). Checked from outside:
`/api/home?grade=8` → 400. The server had RAG configured and no paid order without a plan.
Rules: Rules:
1. **Fail loudly over guessing.** A missing setting, row or field in production should 1. **Fail loudly over guessing.** A missing setting, row or field in production should
@@ -60,8 +64,8 @@ default hosts/CORS/cache/secret key (`/api/health` warns); `LocMemCache` without
`CACHE_URL`; `_annotation` defaults for answer-cache entries older than a field; Bazaar's `CACHE_URL`; `_annotation` defaults for answer-cache entries older than a field; Bazaar's
OAuth path beside the Pishkhan token (server still uses OAuth); `birthYear` alone in OAuth path beside the Pishkhan token (server still uses OAuth); `birthYear` alone in
`PATCH /api/user/profile` (frontend type still allows it); `totalQuestions` accepted but `PATCH /api/user/profile` (frontend type still allows it); `totalQuestions` accepted but
ignored (frontend sends it); orders with no `plan_id` from before 2026-09-25 (the ignored (frontend sends it); orders with no `plan_id` from before 2026-09-25 (none
server DB was not checked for any). paid on the server on 2026-10-03).
## Before any real user: read `docs/security-before-production.md` ## Before any real user: read `docs/security-before-production.md`