coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
482 commits 2 branches 0 tags 5.6 MiB
Commit graph

3 commits

Author SHA1 Message Date
tegwick
535bab7ddc FLEX-WP-0040-T07: compact-sitting v14 released (Helm revision 14)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details 
Founder-run 2026-11-01 per docs/compact-sitting-v14-release-runbook.md:
revision 13 (6c6dc263, v13) confirmed in force; dry-run/diff as expected;
helm upgrade --atomic -> revision 14 at 14:27:06 +0100 with image main-f4c9f2b
sha256:dce2ce6f...dd6c and policy v14 8911458f; informed-decision pinned v14
in the same window (005709a, image ca75f0be). Native checks: v14
self_approval_refused and approval_action_not_admitted, no token 401, consumer
review page loads. Receipt in docs/evidence/2026-11-01-compact-sitting-v14/;
release-unit pin moves to dce2ce6f / 4d5ae6e. Rollback: revision 13.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
 2026-11-01 14:41:13 +01:00
tegwick
4d5ae6e7ec FLEX-WP-0040-T07: v14 release candidate is the Go 1.26.10 image (main-f4c9f2b)
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m39s
Details 
Candidate image forgejo.coulomb.social/coulomb/flex-auth@sha256:dce2ce6f1def41d162c999818caeee09dc5404331f305b0d20306fade450dd6c
(revision label f4c9f2b). Read-only checks: v14 and v13 policy directories
byte-identical to source, package digests 8911458f (v14) and 31be5985 (v13),
in-image validate 46/46 and 32/32, offline verify requests answer
self_approval_refused / approval_action_not_admitted on v14, Trivy
HIGH/CRITICAL = 0 (same pinned scanner). Values, twin, pin test, runbook
(scan gate passed; informed-decision side ready at RELEASE_SHA 005709a3,
image ca75f0be, carrying 80ef840) and evidence move to this digest; the
154726d2 image is superseded.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
 2026-11-01 11:55:27 +01:00
tegwick
58a12d258f FLEX-WP-0040-T07: compact-sitting v14 release candidate and founder runbook 
Values (direct edit; not applied): sitting release -> CI image main-2de0f86
sha256:154726d25ba2ce88ef41551dcb3bb395557095eff19e767a29d0331fafec4776 and the
v14 policy path; access-engine twin regenerated for this pin only. The image's
policy directory is byte-identical to 2de0f86 and its package digest is
sha256:8911458f...0fde. Image in force per FLEX-WP-0034 rev 13 is 6c6dc263
(v13); rollback values are values/informed-decision-lifecycle-review.candidate.yaml.
Scan: the same four Go 1.26.7 stdlib HIGH CVEs as the image in force (founder
gate in the runbook). Runbook: docs/compact-sitting-v14-release-runbook.md,
coordinated with informed-decision's v14 pin.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
 2026-11-01 11:26:26 +01:00