docs(operations): mark the dedicated-account migration untested on hardware - #293
Open
CrazyWillBear wants to merge 1 commit into
Open
docs(operations): mark the dedicated-account migration untested on hardware#293CrazyWillBear wants to merge 1 commit into
CrazyWillBear wants to merge 1 commit into
Conversation
…rdware The checklist reads as validated; it is not. It was written from the code and its one trial run stopped at step 4, because Apple declined to issue the second Apple ID and the dedicated posture rests on one iMessage account per user session. Say so at the top, name the known-open holes (#289, #290, #291), and point at the reason the interactive path is the risky part: installer-e2e runs --non-interactive and skips the whole dedicated branch, which is where all three high findings in the #288 review lived. Also record what IS verified on real macOS 26.5.2 — sysadminctl reads the piped password, and the "No clear text password" line it prints is noise, not a failure — so the next person does not re-derive it, and move the Apple ID warning onto step 4 where they will actually hit it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
docs/OPERATIONS.md→ "Migrating a live box to the dedicated account" reads as a validated procedure. It isn't. It was written from the code, and its one trial run stopped at step 4: Apple declined to issue the second Apple ID, and the dedicated posture rests on one iMessage account per user session, so there was nothing to migrate to.Nobody following that checklist today can tell it's untrodden. The failure mode it hides isn't cosmetic — the account plan makes real, privileged system changes partway through, which is exactly what #289 and #291 describe.
What
Two edits, docs only.
installer-e2eruns--non-interactiveand skips the whole dedicated branch, which is where all three high-severity findings in the chief runs as its own system user, with its own Apple ID (#286) #288 review lived. Names the known-open holes (grant_reason is weaker than the guarantee three docs make for it (#288 review) #289, Dual-store reach double-delivers group chats both accounts are in (#288 review) #290, Uninstall offers to delete an account it never created, and reports success regardless (#288 review) #291) and invites an issue with a step number.It also records what is verified on real macOS 26.5.2, so the next person doesn't re-derive it:
sysadminctl -addUser … -password -does read the password from piped stdin (#292), and theNo clear text password or interactive option was specifiedline it prints appears on success too. That line reads exactly like a parse-time refusal and cost this session a wrong conclusion beforedscl -authonlysettled it.The notice is self-deleting: first person to complete a migration removes it.
Check
uv run pytest785 passed ·uv run ruff check .clean ·uv run mypy .clean🤖 Generated with Claude Code