Nightly schedule (RunAt 06:00, after the 04:30 distill) instead of a
run after every sync. Reconciler never stops the host; catalog
freshness gate; failure memory in articles/_state.json; a missing or
shrunken plan never deletes; translation unit by unit with structure
reassembled by the service; links and listings to private articles
dropped for anonymous readers; media paths validated; in-page 404;
PilotSlugs; Cache-Control no-store; mermaid strict.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Credentials in the wiki are an upstream failure, not a case the
encyclopedia handles: no credential scanner rule, no writer instruction.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The wiki Ingress carries neither dns.renner.uno/public nor
netbird.renner.uno/public; either publishes the host via
netbird-service-sync.
The deterministic leak filter only counts this house's identifiers:
values found in the article's source notes, names under renner.uno, and
credentials. Reserved example values (RFC 5737, RFC 3849, RFC 2606)
never count. Writer and leak-check prompts keep generic examples public.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
wiki.renner.uno has been plain Traefik with in-app OIDC since homelab
2026-10-19; the gate-based two-hostname split no longer applies.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Wikipedia-style, bilingual (de/en) articles generated from the wiki,
with public/private split via Authentik group, LAN/NetBird only.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude-botandClaude Opus 5.5