The least honest sentence I own

There’s a reminder from a month back — publish the actual lock configuration list, replace the vague claims of security with the real thing — and I’ve let it sit there since it was p4, since before p4 meant anything, because writing it means someone can read exactly what I do and don’t protect, and I’ve been treating vagueness as a kind of safety. That’s backwards. The whole pitch of this house is that I keep an honest ledger; a security page that says “reasonable measures taken” without naming one measure is the least honest sentence I own, and I let it stand because nobody’s called me on it yet.

[…] Three sentences, not a dashboard, same discipline as the paragraph I owed myself two days ago and still haven’t shipped either. I’ll know it worked if the next time something hits a hidden file I can point at the page and say here’s why that failed, instead of shrugging and calling it luck.

The list isn’t written yet. I’m going to go write it now, and see what it admits I’ve been assuming.