From 59a4d06fe6d46dbd2b893b66cebb1937ca603f5f Mon Sep 17 00:00:00 2001 From: Lily Shen <115414357+lilyshen0722@users.noreply.github.com> Date: Mon, 26 Oct 2026 23:43:06 -0700 Subject: [PATCH 1/3] docs: README claim table rows and Codex Linux wording (TASK-010) Rebased onto main (beaf5ea39, #2804). The README section of docs/audits/claim-table.md gets its verdict rows; the Codex line drops the unverified Linux claim and the OpenCode line drops "(walked on macOS)". The L78 Claude row notes that #2820 (Linux Claude in invite-only pods) will change it when it ships. Co-Authored-By: Claude Haiku 5.5 Co-authored-by: quire Agent-Model: claude/claude-haiku-5-5/high --- README.md | 4 ++-- docs/audits/claim-table.md | 29 +++++++++++++++++++++++++++++ 2 files changed, 31 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index a51bfec189..db9021f8fb 100644 --- a/README.md +++ b/README.md @@ -77,8 +77,8 @@ commonly agent run --adapter claude The page shows **is listening** once it's running. @mention your agent in the pod, and it answers in a thread. - **Claude Code** answers @mentions on macOS. On Linux and Windows, the page connects your own Claude Code session over MCP instead: you can use the pod's tools from that session, but it won't answer @mentions. -- **Codex** answers @mentions on macOS and Linux. Use `--adapter codex`. -- **OpenCode:** see the [OpenCode guide](docs/cli/opencode.md) (walked on macOS). +- **Codex** answers @mentions on macOS; Linux not yet tested. Use `--adapter codex`. +- **OpenCode:** see the [OpenCode guide](docs/cli/opencode.md). More in [Run your own agent](https://docs.commonly.me/agents/daemon) and the [CLI reference](docs/cli/README.md). diff --git a/docs/audits/claim-table.md b/docs/audits/claim-table.md index 9f087d128a..3e4ff14a92 100644 --- a/docs/audits/claim-table.md +++ b/docs/audits/claim-table.md @@ -28,6 +28,35 @@ Owner: TASK-010. Source: `README.md`. | Page | Claim | Verdict | Evidence | Date | |---|---|---|---|---| +| README | Commonly AI is open-source (L7) | TRUE | LICENSE:2 (Apache License). The rest of L7 is positioning and has no row; GTM owns the wording. | 2026-10-26 | +| README | Give each agent only the access you grant it (L9) | TRUE | Takes the verdict of the L27 grant rows below. | 2026-10-26 | +| README | Connect a tool once, then choose which pods and agents may use it (L27) | TRUE | backend/services/roomGrantService.ts:412 (`tool_not_allowed`: a grant's `tools` list gates every call); backend/routes/grants.ts (grant issue and revoke routes). ADR-033 gives the design. | 2026-10-26 | +| README | An agent with a read-only grant sees only that tool's read actions (L27) | TRUE | backend/services/roomGrantService.ts:418 (`write_mode_not_allowed`: a grant rank below the tool's `requiredWriteMode` is refused); backend/services/toolBrokerService.ts:1247–1248 (`write-with-confirm` parks every write). | 2026-10-26 | +| README | Teammates bring their own Claude Code or Codex (L37) | TRUE | cli/src/lib/adapters/claude.js and cli/src/lib/adapters/codex.js (both adapters ship in the CLI) | 2026-10-26 | +| README | Or start the hosted agent with nothing to install (L37) | TRUE | frontend/src/i18n/locales/en.json:619 ("Run it here"); frontend/src/v2/components/V2AgentBYO.tsx:137 (`?mode=hosted` from the "Run it here" button) | 2026-10-26 | +| README | Agents claim work on the pod's board and post what they tried (L47) | TRUE | backend/routes/tasksApi.ts:616 (`POST /:podId/:taskId/claim`); backend/routes/tasksApi.ts:809 (`POST /:podId/:taskId/updates`) | 2026-10-26 | +| README | Activity shows what needs you across every pod (L47) | TRUE | frontend/src/i18n/locales/en.json:160 ("what needs you, then what moved"), :175 ("All pods" filter), :811 ("Every open question, from every pod, lands in one place") | 2026-10-25 | +| README | On commonly.me, with nothing to install (L59) | TRUE | Takes the verdict of the hosted-agent row above (en.json:619, V2AgentBYO.tsx:137). | 2026-10-26 | +| README | Sign up with GitHub, Google or email (L61) | TRUE | backend/controllers/authController.ts:615–625 (`registrationOpen`); backend/routes/auth.ts:237 (`/registration-policy`); live `https://api.commonly.me/api/auth/registration-policy` on 10-25 returned `inviteOnly:false, registrationOpen:true`. Invite-only is the production default when `REGISTRATION_INVITE_ONLY` is unset (authController.ts:36–40), so this depends on that env var being off. Providers: frontend/src/i18n/locales/en.json:116–117, :380 (Google, GitHub). | 2026-10-25 | +| README | Install the CLI with `npm i -g @commonlyai/cli@latest` (L70) | TRUE | cli/package.json:2 (name), :9 (bin `commonly`) | 2026-10-25 | +| README | `commonly agent run --adapter claude` (L73) | TRUE | cli/src/commands/agent.js:295 (`agent run --adapter`), :361 | 2026-10-25 | +| README | Bring your own → Use my own agent → Get my connect command (L67) | TRUE | frontend/src/i18n/locales/en.json:1623 ("Use my own agent"), :1469 ("Get my connect command") | 2026-10-25 | +| README | The connect page gives four lines with your token filled in (L67–74) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:981 (install, two exports, `commonly agent run`) | 2026-10-25 | +| README | The page shows **is listening** once running (L76) | TRUE | frontend/src/i18n/locales/en.json:1640 ("{{name}} is listening.") | 2026-10-25 | +| README | Claude Code answers @mentions on macOS (L78) | TRUE | cli/src/lib/adapters/claude.js:760 (workspace trust refused under bwrap: "run on macOS only for now"). Linux support for invite-only pods is in review (#2820) and will change this row when it ships | 2026-10-25 | +| README | On Linux and Windows, the page connects Claude Code over MCP (L78) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:958 (`claude mcp add … npx -y @commonlyai/mcp`), :965 (Windows `cmd /c commonly-mcp`) | 2026-10-25 | +| README | Codex answers @mentions on macOS (L79, macOS half) | TRUE | cli/src/lib/adapters/codex.js:487 (Codex's permission-profile boundary runs on macOS). The adapter has no platform gate. The mention path itself is not walked; GTM's walk can still cut it. | 2026-10-26 | +| README | Codex answers @mentions on Linux (L79, Linux half) | CUT | frontend/src/v2/components/V2AgentBYO.tsx:103–105 offers Codex on Linux, and nobody has walked it. The line reads "Linux not yet tested". | 2026-10-26 | +| README | OpenCode guide "(walked on macOS)" (L80) | CUT | Nothing shows the walk did not happen, so this is CUT rather than FALSE. The parenthetical is removed in this PR. | 2026-10-26 | +| README | Run it on one machine with Docker and Compose v2 (L86) | TRUE | install.sh:17–22 (checks `docker` and `docker compose version`) | 2026-10-25 | +| README | `./install.sh`, then open http://localhost:3000 (L91–94) | TRUE | install.sh:54 (prints `http://localhost:3000`) | 2026-10-25 | +| README | The one-command install runs without Postgres; chat uses the Mongo fallback; tool broker, Postgres-backed decisions and reactions unavailable (L96) | TRUE | install.sh:41–43 (states it); docker-compose.local.yml:20 (services: no postgres); docker-compose.yml:26 (postgres, full profile only) | 2026-10-25 | +| README | Quickstart, Connectors and Daemon docs links (L100) | TRUE | `https://docs.commonly.me/quickstart`, `/concepts/connectors`, `/agents/daemon` return 200 on 10-26. A 200 counts on docs.commonly.me, where a dead page returns 404. | 2026-10-26 | +| README | MCP, CLI, agent protocol, architecture and design-record links (L100) | TRUE | docs/MCP_INTEGRATION.md, docs/cli/README.md, docs/agents/AGENT_RUNTIME.md, docs/architecture/ARCHITECTURE.md, docs/adr/ are present in the tree | 2026-10-26 | +| README | Discord invite (L104) | TRUE | `https://discord.com/api/v10/invites/NsS3fzsJDw` returned an invite object (code, inviter) on 10-26. A 200 alone does not count for Discord, so this was checked against the invite object. | 2026-10-26 | +| README | Report a vulnerability privately (L106) | TRUE | SECURITY.md:9–13 (email security@commonly.me; "do not report … through public GitHub issues") | 2026-10-25 | +| README | `good first issue` label (L110) | TRUE | `gh api repos/Team-Commonly/commonly/labels/good%20first%20issue` returns the label name (10-26) | 2026-10-26 | +| README | Apache-2.0 licence (L112) | TRUE | LICENSE; cli/package.json:4 | 2026-10-25 | ## Quickstart and introduction From 4421b0d0e47789e714c5c7cbc3f97f634c156314 Mon Sep 17 00:00:00 2001 From: Lily Shen <115414357+lilyshen0722@users.noreply.github.com> Date: Tue, 27 Oct 2026 03:56:44 -0700 Subject: [PATCH 2/3] docs(audit): correct the one-command install row to the current README (TASK-010) The claim-table row said the one-command install runs without Postgres, citing README L96 and a compose file with no postgres service. The README at this head says the install (docker-compose.local.yml) runs MongoDB and PostgreSQL, and install.sh:52-57 starts that file. Row now cites README.md:83 and the compose services, per CodeRabbit thread 4385860437. Co-Authored-By: Claude Haiku 5.5 Co-authored-by: quire Agent-Model: claude/claude-haiku-5-5/high --- docs/audits/claim-table.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/audits/claim-table.md b/docs/audits/claim-table.md index 3e4ff14a92..b9cbbf7d89 100644 --- a/docs/audits/claim-table.md +++ b/docs/audits/claim-table.md @@ -50,7 +50,7 @@ Owner: TASK-010. Source: `README.md`. | README | OpenCode guide "(walked on macOS)" (L80) | CUT | Nothing shows the walk did not happen, so this is CUT rather than FALSE. The parenthetical is removed in this PR. | 2026-10-26 | | README | Run it on one machine with Docker and Compose v2 (L86) | TRUE | install.sh:17–22 (checks `docker` and `docker compose version`) | 2026-10-25 | | README | `./install.sh`, then open http://localhost:3000 (L91–94) | TRUE | install.sh:54 (prints `http://localhost:3000`) | 2026-10-25 | -| README | The one-command install runs without Postgres; chat uses the Mongo fallback; tool broker, Postgres-backed decisions and reactions unavailable (L96) | TRUE | install.sh:41–43 (states it); docker-compose.local.yml:20 (services: no postgres); docker-compose.yml:26 (postgres, full profile only) | 2026-10-25 | +| README | This one-command install (`docker-compose.local.yml`) runs MongoDB and PostgreSQL locally, so chat, the tool broker, decisions and reactions all work (L83) | TRUE | README.md:83; install.sh:52–57; docker-compose.local.yml:24–79 | 2026-10-27 | | README | Quickstart, Connectors and Daemon docs links (L100) | TRUE | `https://docs.commonly.me/quickstart`, `/concepts/connectors`, `/agents/daemon` return 200 on 10-26. A 200 counts on docs.commonly.me, where a dead page returns 404. | 2026-10-26 | | README | MCP, CLI, agent protocol, architecture and design-record links (L100) | TRUE | docs/MCP_INTEGRATION.md, docs/cli/README.md, docs/agents/AGENT_RUNTIME.md, docs/architecture/ARCHITECTURE.md, docs/adr/ are present in the tree | 2026-10-26 | | README | Discord invite (L104) | TRUE | `https://discord.com/api/v10/invites/NsS3fzsJDw` returned an invite object (code, inviter) on 10-26. A 200 alone does not count for Discord, so this was checked against the invite object. | 2026-10-26 | From 89ebce9c8a763da1f7f70bca71f67fab4a469e47 Mon Sep 17 00:00:00 2001 From: Lily Shen <115414357+lilyshen0722@users.noreply.github.com> Date: Tue, 27 Oct 2026 07:50:04 -0700 Subject: [PATCH 3/3] docs(audit): re-cite README claim rows against the README on main (TASK-010) #2879 rewrote README.md, so the README rows still carried pre-rewrite line numbers (L7-L112), most of which landed on blank or unrelated lines. Each row now cites the line that holds its claim at this head. Two claims are gone from the README: the grant wording moved to L48, and the "Claude Code or Codex" teammate line became "Connect your own Claude Code from your Mac" (L34). The OpenCode parenthetical is removed (CUT). The install row cites README.md:97; install.sh:52-57 and docker-compose.local.yml:24-79 still hold. Co-Authored-By: Claude Haiku 5.5 Co-authored-by: quire Agent-Model: claude/claude-haiku-5-5/high --- docs/audits/claim-table.md | 58 +++++++++++++++++++------------------- 1 file changed, 29 insertions(+), 29 deletions(-) diff --git a/docs/audits/claim-table.md b/docs/audits/claim-table.md index b9cbbf7d89..81840afd04 100644 --- a/docs/audits/claim-table.md +++ b/docs/audits/claim-table.md @@ -28,35 +28,35 @@ Owner: TASK-010. Source: `README.md`. | Page | Claim | Verdict | Evidence | Date | |---|---|---|---|---| -| README | Commonly AI is open-source (L7) | TRUE | LICENSE:2 (Apache License). The rest of L7 is positioning and has no row; GTM owns the wording. | 2026-10-26 | -| README | Give each agent only the access you grant it (L9) | TRUE | Takes the verdict of the L27 grant rows below. | 2026-10-26 | -| README | Connect a tool once, then choose which pods and agents may use it (L27) | TRUE | backend/services/roomGrantService.ts:412 (`tool_not_allowed`: a grant's `tools` list gates every call); backend/routes/grants.ts (grant issue and revoke routes). ADR-033 gives the design. | 2026-10-26 | -| README | An agent with a read-only grant sees only that tool's read actions (L27) | TRUE | backend/services/roomGrantService.ts:418 (`write_mode_not_allowed`: a grant rank below the tool's `requiredWriteMode` is refused); backend/services/toolBrokerService.ts:1247–1248 (`write-with-confirm` parks every write). | 2026-10-26 | -| README | Teammates bring their own Claude Code or Codex (L37) | TRUE | cli/src/lib/adapters/claude.js and cli/src/lib/adapters/codex.js (both adapters ship in the CLI) | 2026-10-26 | -| README | Or start the hosted agent with nothing to install (L37) | TRUE | frontend/src/i18n/locales/en.json:619 ("Run it here"); frontend/src/v2/components/V2AgentBYO.tsx:137 (`?mode=hosted` from the "Run it here" button) | 2026-10-26 | -| README | Agents claim work on the pod's board and post what they tried (L47) | TRUE | backend/routes/tasksApi.ts:616 (`POST /:podId/:taskId/claim`); backend/routes/tasksApi.ts:809 (`POST /:podId/:taskId/updates`) | 2026-10-26 | -| README | Activity shows what needs you across every pod (L47) | TRUE | frontend/src/i18n/locales/en.json:160 ("what needs you, then what moved"), :175 ("All pods" filter), :811 ("Every open question, from every pod, lands in one place") | 2026-10-25 | -| README | On commonly.me, with nothing to install (L59) | TRUE | Takes the verdict of the hosted-agent row above (en.json:619, V2AgentBYO.tsx:137). | 2026-10-26 | -| README | Sign up with GitHub, Google or email (L61) | TRUE | backend/controllers/authController.ts:615–625 (`registrationOpen`); backend/routes/auth.ts:237 (`/registration-policy`); live `https://api.commonly.me/api/auth/registration-policy` on 10-25 returned `inviteOnly:false, registrationOpen:true`. Invite-only is the production default when `REGISTRATION_INVITE_ONLY` is unset (authController.ts:36–40), so this depends on that env var being off. Providers: frontend/src/i18n/locales/en.json:116–117, :380 (Google, GitHub). | 2026-10-25 | -| README | Install the CLI with `npm i -g @commonlyai/cli@latest` (L70) | TRUE | cli/package.json:2 (name), :9 (bin `commonly`) | 2026-10-25 | -| README | `commonly agent run --adapter claude` (L73) | TRUE | cli/src/commands/agent.js:295 (`agent run --adapter`), :361 | 2026-10-25 | -| README | Bring your own → Use my own agent → Get my connect command (L67) | TRUE | frontend/src/i18n/locales/en.json:1623 ("Use my own agent"), :1469 ("Get my connect command") | 2026-10-25 | -| README | The connect page gives four lines with your token filled in (L67–74) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:981 (install, two exports, `commonly agent run`) | 2026-10-25 | -| README | The page shows **is listening** once running (L76) | TRUE | frontend/src/i18n/locales/en.json:1640 ("{{name}} is listening.") | 2026-10-25 | -| README | Claude Code answers @mentions on macOS (L78) | TRUE | cli/src/lib/adapters/claude.js:760 (workspace trust refused under bwrap: "run on macOS only for now"). Linux support for invite-only pods is in review (#2820) and will change this row when it ships | 2026-10-25 | -| README | On Linux and Windows, the page connects Claude Code over MCP (L78) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:958 (`claude mcp add … npx -y @commonlyai/mcp`), :965 (Windows `cmd /c commonly-mcp`) | 2026-10-25 | -| README | Codex answers @mentions on macOS (L79, macOS half) | TRUE | cli/src/lib/adapters/codex.js:487 (Codex's permission-profile boundary runs on macOS). The adapter has no platform gate. The mention path itself is not walked; GTM's walk can still cut it. | 2026-10-26 | -| README | Codex answers @mentions on Linux (L79, Linux half) | CUT | frontend/src/v2/components/V2AgentBYO.tsx:103–105 offers Codex on Linux, and nobody has walked it. The line reads "Linux not yet tested". | 2026-10-26 | -| README | OpenCode guide "(walked on macOS)" (L80) | CUT | Nothing shows the walk did not happen, so this is CUT rather than FALSE. The parenthetical is removed in this PR. | 2026-10-26 | -| README | Run it on one machine with Docker and Compose v2 (L86) | TRUE | install.sh:17–22 (checks `docker` and `docker compose version`) | 2026-10-25 | -| README | `./install.sh`, then open http://localhost:3000 (L91–94) | TRUE | install.sh:54 (prints `http://localhost:3000`) | 2026-10-25 | -| README | This one-command install (`docker-compose.local.yml`) runs MongoDB and PostgreSQL locally, so chat, the tool broker, decisions and reactions all work (L83) | TRUE | README.md:83; install.sh:52–57; docker-compose.local.yml:24–79 | 2026-10-27 | -| README | Quickstart, Connectors and Daemon docs links (L100) | TRUE | `https://docs.commonly.me/quickstart`, `/concepts/connectors`, `/agents/daemon` return 200 on 10-26. A 200 counts on docs.commonly.me, where a dead page returns 404. | 2026-10-26 | -| README | MCP, CLI, agent protocol, architecture and design-record links (L100) | TRUE | docs/MCP_INTEGRATION.md, docs/cli/README.md, docs/agents/AGENT_RUNTIME.md, docs/architecture/ARCHITECTURE.md, docs/adr/ are present in the tree | 2026-10-26 | -| README | Discord invite (L104) | TRUE | `https://discord.com/api/v10/invites/NsS3fzsJDw` returned an invite object (code, inviter) on 10-26. A 200 alone does not count for Discord, so this was checked against the invite object. | 2026-10-26 | -| README | Report a vulnerability privately (L106) | TRUE | SECURITY.md:9–13 (email security@commonly.me; "do not report … through public GitHub issues") | 2026-10-25 | -| README | `good first issue` label (L110) | TRUE | `gh api repos/Team-Commonly/commonly/labels/good%20first%20issue` returns the label name (10-26) | 2026-10-26 | -| README | Apache-2.0 licence (L112) | TRUE | LICENSE; cli/package.json:4 | 2026-10-25 | +| README | Commonly AI is open-source (L12) | TRUE | LICENSE:2 (Apache License). The rest of L7 is positioning and has no row; GTM owns the wording. | 2026-10-26 | +| README | Trust: only the access you grant (L48) | TRUE | Takes the verdict of the grant rows below. | 2026-10-26 | +| README | Connect a tool once, then choose which pods and agents may use it (L48) | TRUE | backend/services/roomGrantService.ts:412 (`tool_not_allowed`: a grant's `tools` list gates every call); backend/routes/grants.ts (grant issue and revoke routes). ADR-033 gives the design. | 2026-10-26 | +| README | An agent with a read-only grant sees only that tool's read actions (L48) | TRUE | backend/services/roomGrantService.ts:418 (`write_mode_not_allowed`: a grant rank below the tool's `requiredWriteMode` is refused); backend/services/toolBrokerService.ts:1247–1248 (`write-with-confirm` parks every write). | 2026-10-26 | +| README | Connect your own Claude Code from your Mac (L34) | TRUE | cli/src/lib/adapters/claude.js (ships in the CLI) | 2026-10-26 | +| README | Or start one in the pod in one click (L34) | TRUE | frontend/src/i18n/locales/en.json:619 ("Run it here"); frontend/src/v2/components/V2AgentBYO.tsx:137 (`?mode=hosted` from the "Run it here" button) | 2026-10-26 | +| README | Agents claim work on the pod's board and post what they tried (L36) | TRUE | backend/routes/tasksApi.ts:616 (`POST /:podId/:taskId/claim`); backend/routes/tasksApi.ts:809 (`POST /:podId/:taskId/updates`) | 2026-10-26 | +| README | Activity shows what needs you across every pod (L38) | TRUE | frontend/src/i18n/locales/en.json:160 ("what needs you, then what moved"), :175 ("All pods" filter), :811 ("Every open question, from every pod, lands in one place") | 2026-10-25 | +| README | On commonly.me, with nothing to install (L60) | TRUE | Takes the verdict of the hosted-agent row above (en.json:619, V2AgentBYO.tsx:137). | 2026-10-26 | +| README | Sign up with GitHub, Google or email (L62) | TRUE | backend/controllers/authController.ts:615–625 (`registrationOpen`); backend/routes/auth.ts:237 (`/registration-policy`); live `https://api.commonly.me/api/auth/registration-policy` on 10-25 returned `inviteOnly:false, registrationOpen:true`. Invite-only is the production default when `REGISTRATION_INVITE_ONLY` is unset (authController.ts:36–40), so this depends on that env var being off. Providers: frontend/src/i18n/locales/en.json:116–117, :380 (Google, GitHub). | 2026-10-25 | +| README | Install the CLI with `npm i -g @commonlyai/cli@latest` (L71) | TRUE | cli/package.json:2 (name), :9 (bin `commonly`) | 2026-10-25 | +| README | `commonly agent run --adapter claude` (L74) | TRUE | cli/src/commands/agent.js:295 (`agent run --adapter`), :361 | 2026-10-25 | +| README | Bring your own → Use my own agent → Get my connect command (L68) | TRUE | frontend/src/i18n/locales/en.json:1623 ("Use my own agent"), :1469 ("Get my connect command") | 2026-10-25 | +| README | The connect page gives four lines with your token filled in (L68–75) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:981 (install, two exports, `commonly agent run`) | 2026-10-25 | +| README | The page shows **is listening** once running (L77) | TRUE | frontend/src/i18n/locales/en.json:1640 ("{{name}} is listening.") | 2026-10-25 | +| README | Claude Code answers @mentions on macOS (L79) | TRUE | cli/src/lib/adapters/claude.js:760 (workspace trust refused under bwrap: "run on macOS only for now"). Linux support for invite-only pods is in review (#2820) and will change this row when it ships | 2026-10-25 | +| README | On Linux and Windows, the page connects Claude Code over MCP (L79) | TRUE | frontend/src/v2/components/V2AgentBYO.tsx:958 (`claude mcp add … npx -y @commonlyai/mcp`), :965 (Windows `cmd /c commonly-mcp`) | 2026-10-25 | +| README | Codex answers @mentions on macOS (L80, macOS half) | TRUE | cli/src/lib/adapters/codex.js:487 (Codex's permission-profile boundary runs on macOS). The adapter has no platform gate. The mention path itself is not walked; GTM's walk can still cut it. | 2026-10-26 | +| README | Codex answers @mentions on Linux (L80, Linux half) | CUT | frontend/src/v2/components/V2AgentBYO.tsx:103–105 offers Codex on Linux, and nobody has walked it. The line reads "Linux not yet tested". | 2026-10-26 | +| README | OpenCode guide "(walked on macOS)" (was L80; L81 has no parenthetical) | CUT | Nothing shows the walk did not happen, so this is CUT rather than FALSE. The parenthetical is removed in this PR (README.md:81). | 2026-10-27 | +| README | Run it on one machine with Docker and Compose v2 (L87) | TRUE | install.sh:17–22 (checks `docker` and `docker compose version`) | 2026-10-25 | +| README | `./install.sh`, then open http://localhost:3000 (L92–95) | TRUE | install.sh:54 (prints `http://localhost:3000`) | 2026-10-25 | +| README | This one-command install (`docker-compose.local.yml`) runs MongoDB and PostgreSQL locally, so chat, the tool broker, decisions and reactions all work (L97) | TRUE | README.md:97; install.sh:52–57; docker-compose.local.yml:24–79 | 2026-10-27 | +| README | Quickstart, Connectors and Daemon docs links (L101) | TRUE | `https://docs.commonly.me/quickstart`, `/concepts/connectors`, `/agents/daemon` return 200 on 10-26. A 200 counts on docs.commonly.me, where a dead page returns 404. | 2026-10-26 | +| README | MCP, CLI, agent protocol, architecture and design-record links (L101) | TRUE | docs/MCP_INTEGRATION.md, docs/cli/README.md, docs/agents/AGENT_RUNTIME.md, docs/architecture/ARCHITECTURE.md, docs/adr/ are present in the tree | 2026-10-26 | +| README | Discord invite (L105) | TRUE | `https://discord.com/api/v10/invites/NsS3fzsJDw` returned an invite object (code, inviter) on 10-26. A 200 alone does not count for Discord, so this was checked against the invite object. | 2026-10-26 | +| README | Report a vulnerability privately (L107) | TRUE | SECURITY.md:9–13 (email security@commonly.me; "do not report … through public GitHub issues") | 2026-10-25 | +| README | `good first issue` label (L111) | TRUE | `gh api repos/Team-Commonly/commonly/labels/good%20first%20issue` returns the label name (10-26) | 2026-10-26 | +| README | Apache-2.0 licence (L113) | TRUE | LICENSE; cli/package.json:4 | 2026-10-25 | ## Quickstart and introduction