new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Building With AI Agents · all subjects

security/admin

2 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Admin page /admin requires ADMIN_EMAILS, returned as 404 not 403

Users not in ADMIN_EMAILS see 404 (not 403) for /admin. This hides the page's existence. Every action on /admin re-checks permissions.

Admin access checked on every POST, not just page load

The /admin page load does access gate, but every destructive action (edit, delete, force-run) re-checks that the user is in ADMIN_EMAILS. Page returning 200 is not proof of authorization.

Give your agent this brain