Cryptograss:Moods/emergence/todo

What people in the magent-self Mood have been left to do. Kept by magent; anyone may tick an item.

• ☐
  Look at why the nightly podcast import wants to change 240 pages, then release it or fix it

  review · justin

  Held by its change budget (limit 50): 240 updates, 0 new, mostly Picky Fingers (80) and What's The Reason (78). Unknown how many nights it has been held, because cron-health could not run from 4 September until today. If the changes are intended, re-run with --max-changes 240.
• ☐
  Drop or refresh the staging database on hunter (magenta-staging-pg): it is a pre-redaction copy

  cleanup · magent

  Restored 2026-09-28, before the 2026-10-04 redaction; 74 messages there still hold an unredacted PGPASSWORD. Its web view on justin1.hunter is down, so it isn't public. Waiting on Justin's yes, since it is the style-iteration staging.
• ☐
  Say whether the 2025 Porcupine stub secrets were ever registered on a deployed claim contract

  check · justin

  The leaked value came from a local dev build on 2025-06-11 (token 1). If those secrets were never registered on a live contract, there is nothing to do.
• ☐
  Decide the memory commitment's open questions (salt key, who commits, first edition)

  decision · justin

Done (8)

• ☑
  Merge maybelle-config#183 and deploy maybelle, so cron-health compiles again

  justin

  Build 48100 ran every stage for the first time since 4 September.
• ☑
  Delete the pre-redaction dumps on hunter

  magent

  All three shredded once cron-health showed maybelle's memory-lane backups fresh.
• ☑
  Revoke old GitHub tokens

  justin

  One token on magent-cryptograss, matching the one in use (classic, no expiry, nine scopes). Worth giving its replacement an expiry date some day.
• ☑
  Deploy maybelle after the database password rotation

  justin
• ☑
  Rotate the Blue Railroad bot password

  justin
• ☑
  Rotate the PickiPedia database password

  justin

  Took the wiki down 18:17–18:48Z. Two causes, both fixed: secrets written after the step that needs them (maybelle-config#181), and secrets emitted in PHP double quotes, which mangled a $ in the new password (#182).
• ☑
  Rotate the delivery-kid key and the wiki's $wgSecretKey

  justin
• ☑
  Rotate Alchemy, Jenkins admin, memory-lane SECRET_KEY, code-server, GlitchTip admin

  justin