1947 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	00da21e39e	Register OpenBao retention reactivation	2026-08-04 00:53:12 +02:00
custodian-sync	abe45cfa25	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 21:26:58 +02:00
tegwick	792d0b9f21	Mark ACTIVITY-WP-0026-T07 done after railiance ops_run smoke. ... Migration 0007 applied; FI trigger produced ops_run; claim-loop completed succeeded; claim-loop user service running on railiance01.	2026-08-03 21:24:48 +02:00
tegwick	6ce77a72bb	Document ACTIVITY-WP-0026-T07 railiance deploy checklist. ... Add deploy-ops-run-queue-railiance.md (image, migrate 0007, smoke, dual-path residual), wire OPS_RUN_* into runtime ConfigMap, and cross-link runbook/README. T07 stays open until prod smoke is executed.	2026-08-03 19:30:00 +02:00
tegwick	32f62ac1ac	chore(consistency): regenerate WORK-RECORDS.md index	2026-08-03 19:26:30 +02:00
custodian-sync	5de95c1b3d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 19:26:22 +02:00
tegwick	15eb3a2066	Implement ACTIVITY-WP-0026 ops_run claim queue (T01–T06). ... Add durable claimable ops_runs table, emit dual-write on TaskSpec, REST claim/lease/complete/fail API, ops status visibility, and consumer docs aligned with ACT-ADR-005. T07 railiance rollout remains deploy-side.	2026-08-03 19:22:50 +02:00
tegwick	a145cc4027	chore(consistency): sync workplan hub IDs [auto follow-up]	2026-08-03 19:16:50 +02:00
custodian-sync	7a9075064d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 18:53:04 +02:00
tegwick	d1e24348c3	Accept ACT-ADR-005 and open ACTIVITY-WP-0026 for ops_run claim queue. ... Split ops runs (claimable DB) from development work records (repo + State Hub), ban default Forgejo queueing for automation, and stack WP-0026 with rein-aharness and issue-core follow-ups. Forgejo-only forge language; no Gitea product path.	2026-08-03 18:51:37 +02:00
tegwick	747d63a993	Document recurring automations playbook for activity-core as organizer. ... Codify when/what/where vs rein-aharness execution vs domain instance state, and the checklist to register cron definitions without workstation cron bypasses.	2026-08-03 17:53:06 +02:00
tegwick	2b4eca0220	Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) ... Maintainer decision, 2026-07-29: adopts TRSL V1C1 as this repo's preliminary governing license, per target-revenue's workplans/TREV-WP-0008-governance-and-pilot-rollout.md T05. Full specialist legal review is deferred until out of beta (target-revenue SCOPE.md §1). No Phase is yet declared for this repo. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-29 23:48:04 +02:00
tegwick	4d90871ff0	Register freedom-intelligence daily research brief for activity-core. ... Add fi-daily-research-brief to the railiance external definitions ConfigMap and document freedom-intelligence in ACTIVITY_DEFINITION_DIRS examples so the weekday FI brief schedule can be applied on cluster deploy.	2026-07-28 01:30:55 +02:00
tegwick	70a7db500d	Add fi_brief_status resolver for Freedom Intelligence daily briefs. ... Mirror binky_rhythm daily due-checks against fi_daily_brief progress events so activity-core can schedule freedom-intelligence research without executing it.	2026-07-24 00:17:46 +02:00
tegwick	9a4f6a4d75	feat: enable daily CNPG Option A backup on railiance01 ... Wire worker kubeconfig hostPath (no PATH override), enable daily-cnpg-option-a-backup for R01 targets, ESO already synced.	2026-07-22 20:34:22 +02:00
tegwick	041ff9b495	feat: daily CNPG Option A backup shell activity (RAILIANCE-WP-0016) ... Add cnpg_option_a_backup resolver, disabled ActivityDefinition, ESO manifest, worker kubeconfig hostPath, databases RBAC, and unit tests. Enable after ESO token re-mint and host kubeconfig wiring.	2026-07-22 19:50:59 +02:00
tegwick	fee89c4ea1	Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist. ... Close T06: LLDAP activity-core-operators and Authelia domain rules are live in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design with membership pointers, and clear residual handoff notes.	2026-07-22 17:47:57 +02:00
custodian-sync	6134b82101	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 17:47:49 +02:00
tegwick	652e799969	Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002. ... Point residual and ops-sso-access design at the file-backed work records in net-kingdom rather than informal coordination notes.	2026-07-22 10:47:25 +02:00
tegwick	91353df7d0	Finish WP-0025 SSO cutover except group allowlist residual. ... Mark T03–T05 and T07–T08 done after live Authelia/TLS verification, prefer SSO principal in ops UI copy and audits, and document break-glass port-forward. Leave T06 waiting on net-kingdom LLDAP/Authelia group rules.	2026-07-22 10:23:36 +02:00
custodian-sync	27c087bcb4	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 09:53:16 +02:00
tegwick	3bd005acc9	Prefer temporal.coulomb.social; fix Ingress ACME entrypoints ... Document AAAA parking pitfall for activity.coulomb.social. Use web+websecure entrypoints and Authelia middleware on SSO Ingress manifests.	2026-07-22 01:29:23 +02:00
tegwick	54431db583	Use temporal.coulomb.social for Temporal UI SSO host ... Prefer clean short hostname temporal.coulomb.social instead of activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.	2026-07-22 01:17:52 +02:00
tegwick	2acf2baffa	chore: consistency writeback after WP-0025 active	2026-07-22 00:49:44 +02:00
custodian-sync	eb3ce73396	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 00:49:36 +02:00
tegwick	f885697e96	Activate ACTIVITY-WP-0025: Authelia SSO ingress for ops and Temporal UI ... Mark workplan active. Add Traefik ForwardAuth middleware and Ingress manifests for activity.coulomb.social and activity-temporal.coulomb.social. Prefer Authelia SSO identity for ops mutations; document DNS gate and fleet pattern (docs/ops-sso-access.md).	2026-07-22 00:47:29 +02:00
tegwick	7e71c0c837	chore: hub IDs for ACTIVITY-WP-0025 after fix-consistency	2026-07-22 00:33:34 +02:00
tegwick	7761acf86a	Link Temporal UI from ops console; propose SSO access WP-0025 ... Add nav/deep link to Temporal Web UI (configurable URL, default 127.0.0.1:8080 for port-forward). Document dual port-forward and draft ACTIVITY-WP-0025 for Keycloak SSO ingress without port-forward.	2026-07-22 00:30:17 +02:00
tegwick	6c34e2c1f1	Show last run timestamp on ops automation status ... Expose last_run_at / last_run on the status contract and display Last run and Tasks columns on the /ops/ui status page for the selected window.	2026-07-22 00:16:25 +02:00
tegwick	a304ad7397	chore: consistency writeback after WP-0024 finish	2026-07-21 23:53:20 +02:00
tegwick	71027f0a67	Implement ACTIVITY-WP-0024 operator automation console ... Add /ops REST inventory, status, runs, and fail-closed operator-token mutations (trigger, enable/disable, pause/unpause) with audit trail. Ship thin HTML UI at /ops/ui, runbook/k8s access docs, and contract tests.	2026-07-21 23:51:39 +02:00
tegwick	81d350de71	chore: hub IDs for ACTIVITY-WP-0024 after fix-consistency ... Write back state_hub_workstream_id and task ids from C-06 registration.	2026-07-21 23:44:10 +02:00
tegwick	86bb550c7a	Add ACTIVITY-WP-0024 operator automation console workplan ... Propose API-first ops console: status/inventory/runs REST, fail-closed operator token, Run now + pause controls, then thin UI. No cron edit or public Ingress in MVP.	2026-07-21 23:42:15 +02:00
tegwick	c80ac9ac51	chore: refresh WORK-RECORDS after WP-0023 closeout	2026-07-21 23:20:57 +02:00
custodian-sync	2612609e92	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 23:20:32 +02:00
tegwick	21d46927f6	Finish ACTIVITY-WP-0023: ESO FORGEJO_TOKEN and gap dispositions ... Ship ExternalSecret actcore-forgejo-admin and multi-policy ESO token bootstrap so weekly prune credentials refresh without bootstrap inject. Disposition issue-core path A and MarkiTect ROS as external owners; close workplan finished.	2026-07-21 23:19:10 +02:00
tegwick	d36adb0822	chore: consistency writeback after WP-0022/0023	2026-07-21 21:41:59 +02:00
custodian-sync	f887437f46	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 21:41:40 +02:00
tegwick	4f5399df84	Implement ACTIVITY-WP-0022/0023: safe sink default and gap closures ... Default ISSUE_SINK_TYPE to state-hub (no silent Forgejo issues), hard-fail prune apply without live-images protection, refresh-live-images script, disable TaskExecutor stub by default, and document consumer/sink contracts.	2026-07-21 21:40:08 +02:00
tegwick	5c7a90ce7c	chore: write back hub IDs for ACTIVITY-WP-0023	2026-07-21 21:20:52 +02:00
tegwick	e73575dcd6	Refresh SCOPE.md intent gap analysis; add ACTIVITY-WP-0023 ... Document production posture after WP-0020/0021, list INTENT↔practice gaps G1–G10, and open a workplan for gap closure plus operational follow-ups.	2026-07-21 21:19:47 +02:00
custodian-sync	bb7842dcdc	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 19:21:57 +02:00
tegwick	a35997878b	Finish ACTIVITY-WP-0020: enable weekly Forgejo package prune ... First apply deleted 38 stale versions; enable schedule with live-images protection file for worker pods without kubectl; restore path for live state-hub tags after an unprotected worker apply.	2026-07-21 19:20:42 +02:00
custodian-sync	2525f234e7	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 07:33:53 +02:00
tegwick	bd1c993405	Finish ACTIVITY-WP-0021: state-hub sink default + deploy verification ... Record railiance01 one-shot evidence (Binky/SBOM/triage COMPLETED), keep ISSUE_SINK_TYPE=state-hub until Forgejo PAT rotation, and re-read sink env at factory call time.	2026-07-21 07:33:03 +02:00
custodian-sync	8ca0267382	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 04:23:06 +02:00
tegwick	60d344e465	workplan: propose ACTIVITY-WP-0022 IssueSink no-default-Forgejo policy ... Filed from issue-core ISSUE-WP-0004-T05 / CUST-WP-0060 item 6. Default IssueSink must not silently create Forgejo issues for internal findings. Registered in state-hub via fix-consistency (UUIDs written back).	2026-07-21 04:22:18 +02:00
tegwick	98e8aa83bd	Implement ACTIVITY-WP-0021 production automation reliability ... Root-cause IssueSink 503 (dead Forgejo PAT on issue-core), add state-hub task sink path B, log runs before emit, harden sync_schedules, deterministic SBOM/triage reports, DB probe thrash fix, and prod automation-status helper.	2026-07-21 04:21:55 +02:00
tegwick	1209ff6973	chore: write back hub IDs for ACTIVITY-WP-0021 and WORK-RECORDS index ... fix-consistency C-06 registered the workplan and nine tasks; C-33 regenerated the work-record index.	2026-07-21 04:11:07 +02:00
custodian-sync	650895d580	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-21: - update .custodian-brief.md for activity-core	2026-07-21 04:10:49 +02:00