This repository was archived by the owner on Aug 21, 2026. It is now read-only.
docs: tell the truth about the image before re-archiving - #142
Merged
Conversation
The retirement banner said `ghcr.io/widgrensit/asobi_lua` "keeps being published from this repository". The commit that wrote it (03aac64) deleted docker-publish.yml in the same change, and entrypoint.sh has been printing "THIS IMAGE IS NO LONGER REBUILT" on every start ever since. A self-hoster who believed the banner would sit on a frozen image built from asobi v0.71.0, receiving no fixes including security fixes, while asobi ships v0.94.0. That is the worst thing this repository could say, and archiving it would have frozen it in place. README now leads with the rename, names ghcr.io/widgrensit/asobi, and says plainly that the old name is not rebuilt. It borrows entrypoint.sh's wording, which has been correct all along. 265 lines -> 52: the "kept for reference" section described a pre-merge layout that no longer exists, and a disclaimer part-way down does not survive someone landing mid-file from a search engine. Also fixes the logo (docs/media/logo.png, not docs/logo.png), the SECURITY.md anchor that never existed, and the contradiction between "this tracker is closed" and a link inviting bug reports here. guides/ deleted - all six were older, shorter forks of asobi's, and each still taught the retired image. security-sandbox.md had dropped the require/math contract and the per-callback budget sections entirely. docs/adr/ is KEPT, against the audit's advice: 0001 and 0002 exist nowhere else and are the reasoning behind decisions asobi still lives with. Archiving makes them read-only, which is the right home for them. AGENTS.md carried the same false alias claim - an agent reading it would repeat the error - and the CI comment claimed the image could not be rebuilt if the job went red, which is now moot. Findings from widgrensit/asobi#537 (P0-1, P0-6, P2-5, P2-6).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This repo was archived on 2026-08-06 with a false banner, and archiving froze the one sentence that most needed changing. Unarchived briefly to land this, then re-archived.
The banner was false
README.md:11-15, live on a public repo until now:The commit that wrote it - 03aac64, "chore: stop publishing the old image name" - deleted
docker-publish.ymlin the same change.entrypoint.sh:26has printed "THIS IMAGE IS NO LONGER REBUILT" on every start ever since.A self-hoster who believed the banner sits on a frozen image built from
asobiv0.71.0, receiving no fixes including security fixes, whileasobiships v0.94.0. The "kept for reference" disclaimer at:32does not cover it: the banner sits above that line and was the newest prose in the repo.What changed
ghcr.io/widgrensit/asobi, states plainly that the old name is not rebuilt. It borrowsentrypoint.sh's wording, which has been correct all along and reaches the operator where they actually look. The "kept for reference" half described a pre-merge layout that no longer exists - and a disclaimer part-way down a file does not survive someone landing mid-file from a search engine.docs/media/logo.png, notdocs/logo.png- a broken image at the top of a public README), theSECURITY.md#sandbox-modelanchor that never existed, and the contradiction between "this tracker is closed to new issues" and a link three sections later inviting bug reports here.guides/deleted. All six were older, shorter forks ofasobi's and each still taught the retired image.security-sandbox.mdhad dropped therequire/mathcontract and per-callback budget sections entirely, so the copy people found here was strictly worse than the real one.AGENTS.mdrepeated the same alias claim - an agent reading it would repeat the error.One deviation from the audit
It recommended deleting
docs/too.docs/adr/is kept: 0001 (shared-state bridge module) and 0002 (skip bounded eval forhandle_input) exist nowhere else and are the reasoning behind decisionsasobistill lives with. Read-only is the right home for a decision record, not deletion.Findings from widgrensit/asobi#537 - P0-1, P0-6, P2-5, P2-6.