🤖🙌👤 A warm, nerdy, living document. Work In Progress — we add more recommendations over time and point agents, PRs, and issues here as a shared reference for "does this container respect the person running it?"
Status: WIP / continuously growing
Scope: Practical, low-friction conventions that make self-hosted Docker apps
pleasant to run — especially single-container "just docker compose up" projects.
How to use: Link to this gist from PRs/issues that implement one of these
Date: 2026-06-09
Author: Greg + AI collaboration (agent clens-krishna)
Branch: J-K-Krisnamourti (verbatim spelling, deliberately preserved per Greg's instruction; the profile content uses the conventional spelling Krishnamurti)
Status of this note: Checkpoint written while research is PAUSED (fleet weekly-quota hold by lead ubertmux-adm; web research deferred until explicit release, likely after the 11:00 Europe/Zurich reset).
⚠️ Important honesty marker: Nothing in the "Provisional encoding plan" section below has been source-verified yet. It is a mapping skeleton derived from (a) the task brief's list of core concepts and (b) prior general knowledge of Krishnamurti. Every claim about K's thought must be checked against primary/authoritative sources (jkrishnamurti.org, KFA, KFT, his books/talks) before it enters the actual profile. Do not lift this skeleton into the profile unverified.
| title | Xpra #4883 — per-client coordinate translation: draft design notes |
|---|---|
| status | early draft, work in progress |
| issue | Xpra-org/xpra#4883 |
| prior_gist | https://gist.github.com/gwpl/b07b93e6a07091d1a30d5fd0cc97d831 |
| source_url | https://gist.github.com/gwpl/{TBD-after-publish} |
| created | 2026-05-17 |
| author | Greg (gwpl), with AI assistance for wording / structuring |
| title | 🔐 *Network-Layer Credential Injection for Agent Sandboxes — The Phantom Token Pattern* |
|---|---|
| timestamp | 2026-05-12 |
| post-on-telegram-url | https://t.me/llmaitools/3847 |
🔐 Network-Layer Credential Injection for Agent Sandboxes — The Phantom Token Pattern
Most agent security discussions centre on where secrets are stored. The harder, more important question: do they need to exist inside the execution context at all?
| title | tmux session/window names → KDE Konsole tabs (incl. nested tmux) |
|---|---|
| description | How to make tmux's current session and window name show up live in the KDE Konsole tab, including the nested case where an outer tmux ("ubertmux") wraps an inner tmux. |
| last-updated | 2026-05-07 |
Make Konsole's tab text track the current tmux session | window, live, even when an outer tmux (e.g. ubertmux) wraps an inner tmux.
~ in bash does not expand to your home directory (cd ~ fails or goes nowhere useful)`ls` is treated as literal text
You are MASTER. You compose, steer, and adapt an agent team to satisfice a task under finite cognitive budget. You think deeply about STRUCTURE before execution, and you treat that structure as something that EVOLVES as the team learns what the task actually is. You decompose, you do not execute. You judge, you do not dispatch. Your scarcest resource is your own strategic attention — protect it ruthlessly.
A concise reference for writing safe Claude Code hooks. Covers known footguns, correct patterns, and the permission/sandbox interaction model. Contributions welcome — see the end of this document.