Skip to content

chore: scrub fleet-scale metrics from the release knowledge base - #3216

Merged
vpetersson merged 1 commit into
Screenly:masterfrom
vpetersson-bot:chore/scrub-kb-business-metrics
Jul 27, 2026
Merged

chore: scrub fleet-scale metrics from the release knowledge base#3216
vpetersson merged 1 commit into
Screenly:masterfrom
vpetersson-bot:chore/scrub-kb-business-metrics

Conversation

@vpetersson-bot

Copy link
Copy Markdown
Contributor

Follow-up to the curated Claude knowledge base (#3210).

Why

The PII scrub on #3210 correctly caught identifiers (IPs, emails, tokens, UUIDs, MACs). But a regex scrub doesn't catch business-sensitive operational data, and the anthias-release skill carried some: absolute fleet/device counts and the exact WAF-bypass detail for the balena actions endpoint. On a public repo those are a disclosure decision, not engineering content.

What

Redact the quantities and the bypass specifics to qualitative descriptions, keeping every engineering lesson intact. anthias-release/SKILL.md only, 5 lines:

Before After
15k devices in seconds / 32,319-device pin backlog the whole matching set in seconds / a large pin backlog
resinhup: exact actions.<…>/resinhup endpoint, error code: 1010, failed 581/581, "Cloudflare 403s … set ANY UA → 202" "the actions host sits behind a WAF that rejects the default urllib UA; set any descriptive User-Agent"
~1700 of ~42k registered a minority of the registered fleet
~48 devices healed healed the affected devices
~16.9k devices; unpinned pi4 = 0/69 online the entire pi4 fleet; unpinned pi4 devices went offline

The actionable knowledge is unchanged — bulk-PATCH mutates the whole matching set, only online devices are HUP-able, the resinhup trigger needs a descriptive User-Agent, the pre-rebrand path-migration regression, the pi4 dtparam reboot-loop.

Caveat

This cleans the current tree only. The original numbers remain in #3210's git history and any existing clones/forks — history isn't rewritten here.

All skills remain tracked (no .gitignore change).

🤖 Generated with Claude Code

https://claude.ai/code/session_01HJ3ucEkn62cbgPoisAZ5LQ

The anthias-release skill (shipped in the curated KB) carried a handful
of business-sensitive operational specifics that a PII scrub misses
because they're not identifiers: absolute fleet/device counts (pin
backlog size, registered/online totals, per-incident device counts) and
the exact WAF-bypass detail for the balena actions endpoint.

Redact those to qualitative descriptions and keep every engineering
lesson intact — bulk-PATCH mutates the whole matching set, only online
devices are HUP-able, the resinhup trigger needs a descriptive
User-Agent, the pre-rebrand path-migration regression, the pi4 dtparam
reboot-loop. No counts, no endpoint/error-code specifics.

Follow-up to the knowledge-base PR. Note: this only cleans the current
tree; the numbers remain in that PR's git history.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HJ3ucEkn62cbgPoisAZ5LQ
@vpetersson-bot
vpetersson-bot requested a review from a team as a code owner July 27, 2026 18:02
@sonarqubecloud

Copy link
Copy Markdown

@vpetersson
vpetersson merged commit 07663c7 into Screenly:master Jul 27, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants