02 Public records
Open source / Public releases
Inside other people’s systems.
Two very different codebases: a maintained open-source platform with reviewers and a client contract, and a shipped game whose behaviour could only be changed from the outside. Each public step is recorded with its evidence.
Open source / growilabs/growi
GROWI
Two merged fixes to the page API of GROWI, an open-source wiki platform. Found by reproducing a failure, shaped by maintainer review, and settled by a security property the first version of the fix had not accounted for.
- Investigation
Reported: rename API returns 500 for a missing page
Filed GROWI #11572 with a reproduction and a diagnosis: the route dereferenced the page before checking whether the lookup returned null.
Issue #11572 - Upstream merge
Rename fix merged upstream
GROWI #11615 merged: missing and inaccessible pages no longer produce a 500 from the rename API. Regression tests exercise the real lookup path.
PR #11615 - Review
Policy changed mid-review; follow-up merged
While reviewing the duplicate-route fix, GROWI’s maintainers decided a 403/404 split lets unauthorized users learn whether a page exists. The fix was changed to a uniform 404 and merged the same day.
PR #11753
Public release / Alien: Isolation · Nexus Mods
Peaceful Sevastopol
An Alien: Isolation modification that changes one behaviour directive, and with it the whole experience of Sevastopol. The most downloaded Alien: Isolation mod on Nexus Mods in 2025.
- Public release
Peaceful Sevastopol released
Published on Nexus Mods: the Alien’s behaviour directive set to NoBehaviour, leaving human and android threats in place.
Nexus Mods listing - Adoption
Most downloaded Alien: Isolation mod of the year
Peaceful Sevastopol was the most downloaded Alien: Isolation mod on Nexus Mods in 2025.