---ci---
phase: 1
milestone: v1.0
status: execute
persona: backend-engineer
task: T-2.1
requirements:
covered: [REQ-01, REQ-09, REQ-10]
lessons:
- Gitea returns HTTP 404 on /raw/branch/<ref>/ for private repos unless the
Authorization header (or ?token=) is supplied. For a browser-loaded UI
there is no way to set the header, so the Pages-substitute (D-012) only
works if the evidence repo is public.
- Shell variable expansion 'echo "Token: ${TOKEN:+<set>}${TOKEN:-<unset>}"'
concatenates the literal token into the output, leaking it to logs. Use
an explicit if/else and only print the length.
---/ci---
Retry of T-2.1 after verify_phase01.sh failed check 3 (raw URL 404).
Root cause: acdl-evidence was created private; Gitea's /raw/ URL requires auth
for private repos. Fix: gitea_setup.sh step 2b now PATCHes acdl-evidence to
public (acdl-contracts stays private). verify_phase01.sh also retries the raw
URL with an Authorization header as a defensive fallback and no longer leaks
the token in its log line. verify_phase01.sh now PASSES.
Jon Chery
4593be0463