breadhelp: breadbug page and public privacy statement (what is collected, retention, deletion) #10

Open
opened 2026-10-08 23:11:41 +08:00 by Breadway · 6 comments
Owner

Part of ECO-EP1 (see ECO-66).

Requirements

  • breadhelp page: how to report a crash/freeze, what the preview shows, how to save to file, how to delete a sent report.
  • Plain-language privacy statement: exact categories collected, what is scrubbed, what is never collected (memory, screenshots, window titles, personal files), retention (raw 90 days), no IPs stored, local-only embedding, how to request deletion.
  • Same text reused by the breadbug consent dialog and the bos-settings page (single source).
  • Also published on the BOS site (bos-site).

Acceptance

  • Statement matches actual implementation; reviewed against the shipped report schema before release.
Part of ECO-EP1 (see ECO-66). ## Requirements - breadhelp page: how to report a crash/freeze, what the preview shows, how to save to file, how to delete a sent report. - Plain-language privacy statement: exact categories collected, what is scrubbed, what is never collected (memory, screenshots, window titles, personal files), retention (raw 90 days), no IPs stored, local-only embedding, how to request deletion. - Same text reused by the breadbug consent dialog and the bos-settings page (single source). - Also published on the BOS site (bos-site). ## Acceptance - Statement matches actual implementation; reviewed against the shipped report schema before release.
Author
Owner

Independent verdict: changes_requested on PR13 exact head 89f670524b, base de28e531c3. Full criterion mapping and actionable R1-R5 file/line checklist: #13 (comment) . Findings filed HELP-14. CI run70 job2212 and all checkout/clippy/test steps independently confirmed successful for this SHA. Local locked build/clippy/test18 pass; integrated breadbug tests11 pass. Runtime probes prove status/delete/queue unavailable (exit2), bare reporter without TTY exit1; integrated send is a no-transport stub. PR24/25 unmerged. Privacy copy misses journal/runtime/marker categories, overstates exclusions/PII/only-counts retention and receipt-only deletion, omits backup limits/local embedding. Single-source consent/settings and BOS-site publication requirements incomplete. No merge or done. Preserve PR/branch; coordinator repairs same PR, distinguishes current versus proposed features without waiving full HELP-10 requirements, and requests fresh exact-head review. Moving HELP-10 to todo for rework.

Independent verdict: changes_requested on PR13 exact head 89f670524bd557ee13177b2360ac0c67f8759556, base de28e531c3227736581aa83f89f5a81f27b79cd9. Full criterion mapping and actionable R1-R5 file/line checklist: https://git.breadway.dev/Breadway/breadhelp/pulls/13#issuecomment-5025 . Findings filed HELP-14. CI run70 job2212 and all checkout/clippy/test steps independently confirmed successful for this SHA. Local locked build/clippy/test18 pass; integrated breadbug tests11 pass. Runtime probes prove status/delete/queue unavailable (exit2), bare reporter without TTY exit1; integrated send is a no-transport stub. PR24/25 unmerged. Privacy copy misses journal/runtime/marker categories, overstates exclusions/PII/only-counts retention and receipt-only deletion, omits backup limits/local embedding. Single-source consent/settings and BOS-site publication requirements incomplete. No merge or done. Preserve PR/branch; coordinator repairs same PR, distinguishes current versus proposed features without waiving full HELP-10 requirements, and requests fresh exact-head review. Moving HELP-10 to todo for rework.
Author
Owner

Independent re-review of PR13 exact head ddd10b276a: guide/implementation corrections pass for R1-R3 and R5, with R4 accurately documented as pending cross-repo work. Overall changes_requested because PR description remains materially stale/inaccurate (claims status/delete/queue/receipts/30-day id and implies full resolution) and HELP-10 still requires integrated consent/settings/BOS-site prerequisites. Detailed persisted checklist: PR comment 5053 (new independent re-review comment). CI exact SHA successful, local tests 25/25 and clippy pass. Formal review state unobservable through available API; no merge. Keep issue incomplete; update PR body and satisfy separately tracked prerequisites before done.

Independent re-review of PR13 exact head ddd10b276a17eee0949ced387d448e4ec5c22961: guide/implementation corrections pass for R1-R3 and R5, with R4 accurately documented as pending cross-repo work. Overall changes_requested because PR description remains materially stale/inaccurate (claims status/delete/queue/receipts/30-day id and implies full resolution) and HELP-10 still requires integrated consent/settings/BOS-site prerequisites. Detailed persisted checklist: PR comment 5053 (new independent re-review comment). CI exact SHA successful, local tests 25/25 and clippy pass. Formal review state unobservable through available API; no merge. Keep issue incomplete; update PR body and satisfy separately tracked prerequisites before done.
Author
Owner

HELP-10 requirements preserved, status unchanged (not done). PR13 (breadhelp, head ddd10b276a) now covers only the breadhelp docs slice. Its body no longer contains a closing keyword, so merging it must not close this card.

Original requirements, kept as written:

  • breadhelp page: how to report a crash/freeze, what the preview shows, how to save to file, how to delete a sent report.
  • Plain-language privacy statement: categories collected, what is scrubbed, what is never collected, retention (raw 90 days), no IPs stored, local-only embedding, how to request deletion.
  • Same text reused by the breadbug consent dialog and the bos-settings page (single source).
  • Also published on the BOS site (bos-site).
  • Acceptance: statement matches actual implementation; reviewed against the shipped report schema before release.

Status of each in the shipped state:

  • Page: partial. Terminal preview/save flow documented. Delete, receipts, status, queue and notifications are not shipped (bread feature/breadbug-upload, feature/breadbug-status, feature/breadbug-gui unmerged).
  • Privacy statement: partial. Shipped schema-1 sections, scrub limits and journal caveat are documented. Server retention, token deletion and rotation are marked as planned.
  • Single consent source: NOT done. content/shared/breadbug-consent.md is an in-repo draft copy, not a source the reporter or bos-settings reads. bread feature/breadbug-consent is unmerged.
  • bos-settings Bug reports page: NOT done.
  • BOS-site publication: NOT done. The site's current delete/receipt wording is an overstatement that needs correcting.
  • Acceptance schema review: pending until the upload and consent branches land.

Remaining downstream gates: merge of bread consent, upload, status and gui branches; bos-settings page; BOS-site page. Keep this card in todo or doing until those are integrated. Do not close it from PR13 alone.

HELP-10 requirements preserved, status unchanged (not done). PR13 (breadhelp, head ddd10b276a17eee0949ced387d448e4ec5c22961) now covers only the breadhelp docs slice. Its body no longer contains a closing keyword, so merging it must not close this card. Original requirements, kept as written: - breadhelp page: how to report a crash/freeze, what the preview shows, how to save to file, how to delete a sent report. - Plain-language privacy statement: categories collected, what is scrubbed, what is never collected, retention (raw 90 days), no IPs stored, local-only embedding, how to request deletion. - Same text reused by the breadbug consent dialog and the bos-settings page (single source). - Also published on the BOS site (bos-site). - Acceptance: statement matches actual implementation; reviewed against the shipped report schema before release. Status of each in the shipped state: - Page: partial. Terminal preview/save flow documented. Delete, receipts, status, queue and notifications are not shipped (bread feature/breadbug-upload, feature/breadbug-status, feature/breadbug-gui unmerged). - Privacy statement: partial. Shipped schema-1 sections, scrub limits and journal caveat are documented. Server retention, token deletion and rotation are marked as planned. - Single consent source: NOT done. content/shared/breadbug-consent.md is an in-repo draft copy, not a source the reporter or bos-settings reads. bread feature/breadbug-consent is unmerged. - bos-settings Bug reports page: NOT done. - BOS-site publication: NOT done. The site's current delete/receipt wording is an overstatement that needs correcting. - Acceptance schema review: pending until the upload and consent branches land. Remaining downstream gates: merge of bread consent, upload, status and gui branches; bos-settings page; BOS-site page. Keep this card in todo or doing until those are integrated. Do not close it from PR13 alone.
Author
Owner

Final scoped review of PR13 exact head ddd10b276a (base de28e531c3): the breadhelp docs slice PASSES. Full persisted mapping: #13 (comment) . CI check / check (push) green for the exact SHA, local build, clippy -D warnings and 25 of 25 tests pass, 0 formal reviews outstanding.

The live PR title and body parse to no close target under the breadboard sync parser, and they state the partial scope accurately. Merge is NOT done yet: the synced HELP-13 card still holds the old body with 'Closes HELP-10' and a closes link. Merging now risks the cascade closing this card if the merge webhook body patch loses the updated_at race. The needed action is on the coordinator, listed in the PR comment.

HELP-10 stays open. Unmet and tracked gates: single consent source read by reporter and bos-settings, bos-settings Bug reports page, BOS-site publication, upload/status/delete/queue/notifications integration and a fresh schema review. Do not move to done.

Final scoped review of PR13 exact head ddd10b276a17eee0949ced387d448e4ec5c22961 (base de28e531c3227736581aa83f89f5a81f27b79cd9): the breadhelp docs slice PASSES. Full persisted mapping: https://git.breadway.dev/Breadway/breadhelp/pulls/13#issuecomment-5144 . CI check / check (push) green for the exact SHA, local build, clippy -D warnings and 25 of 25 tests pass, 0 formal reviews outstanding. The live PR title and body parse to no close target under the breadboard sync parser, and they state the partial scope accurately. Merge is NOT done yet: the synced HELP-13 card still holds the old body with 'Closes HELP-10' and a closes link. Merging now risks the cascade closing this card if the merge webhook body patch loses the updated_at race. The needed action is on the coordinator, listed in the PR comment. HELP-10 stays open. Unmet and tracked gates: single consent source read by reporter and bos-settings, bos-settings Bug reports page, BOS-site publication, upload/status/delete/queue/notifications integration and a fresh schema review. Do not move to done.
Author
Owner

PR13 merged as the breadhelp docs slice only: merge SHA 4673e0cbf4, reviewed head ddd10b276a. Details: #13 (comment). Verified after merge: this card is still doing and Forgejo issue 10 is open. Not done. Remaining gates: single consent source consumed by reporter and bos-settings, bos-settings Bug reports page, BOS-site publication, upload/status/delete/queue/notifications integration, and a fresh schema review before release.

PR13 merged as the breadhelp docs slice only: merge SHA 4673e0cbf452412e3145af8fc910b52208c4bf89, reviewed head ddd10b276a17eee0949ced387d448e4ec5c22961. Details: https://git.breadway.dev/Breadway/breadhelp/pulls/13#issuecomment-5261. Verified after merge: this card is still doing and Forgejo issue 10 is open. Not done. Remaining gates: single consent source consumed by reporter and bos-settings, bos-settings Bug reports page, BOS-site publication, upload/status/delete/queue/notifications integration, and a fresh schema review before release.
Author
Owner

Saved partial work from a cancelled agent. Branch fix/help-10-breadbug-privacy-page at f0859b77, pushed to origin, NO PR opened and not reviewed. It rewrites the two breadbug guides and the shared consent text to match the shipped client (260 added lines across content/ and src/content/). cargo test passes (31). cargo fmt --check still fails, and the content has not been checked against bread docs/breadbug.md or against breadbug-server, so any server-side claim in it must be verified before a PR. Do not merge as is.

Saved partial work from a cancelled agent. Branch fix/help-10-breadbug-privacy-page at f0859b77, pushed to origin, NO PR opened and not reviewed. It rewrites the two breadbug guides and the shared consent text to match the shipped client (260 added lines across content/ and src/content/). cargo test passes (31). cargo fmt --check still fails, and the content has not been checked against bread docs/breadbug.md or against breadbug-server, so any server-side claim in it must be verified before a PR. Do not merge as is.
Sign in to join this conversation.
No labels
breadbug
docs
privacy
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Breadway/breadhelp#10
No description provided.