1969 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	e7f615be38	docs: realign WP-0029 and boundaries with canon and nexus owners ... Review ACTIVITY-WP-0029 against info-tech-canon, policy-nexus, and State Hub retirement: activity-core keeps schedule and ops_run; repo-manager owns consistency; hub-core owns progress ports. Mark WP-0026 finished. Refresh INTENT, SCOPE, and repo-boundary.	2026-08-18 10:27:29 +02:00
tegwick	3a8fe6585a	chore(consistency): record ACTIVITY-WP-0030 hub IDs ... Write back the workplan and task UUIDs from fix-consistency so the daily SBOM catch-up plan stays indexed in WORK-RECORDS.md.	2026-08-18 09:52:20 +02:00
tegwick	c415e3e0bd	docs(ACTIVITY-WP-0030): propose daily bounded SBOM catch-up ... Child of CUST-WP-0062. Replace the weekly stale-repo task flood with a daily sbom-nexus catch-up that updates N oldest SBOMs (default 3).	2026-08-18 09:49:04 +02:00
custodian-sync	7e9f89f859	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-18: - update .custodian-brief.md for activity-core	2026-08-18 09:46:05 +02:00
tegwick	5c606f791a	chore(consistency): record ACTIVITY-WP-0029 hub IDs ... Write back the workplan and task UUIDs from fix-consistency so the proposed hub-port alignment plan stays indexed in WORK-RECORDS.md.	2026-08-18 09:44:45 +02:00
tegwick	3d5ee0cb1b	chore: track OpenBao closeout as RMASTER-WP-0020	2026-08-14 14:29:19 +02:00
tegwick	05424965d8	docs(ACTIVITY-WP-0029): propose hub port and schedule alignment ... Parent prj-state-hub-retirement SHR-WP-0001 stream S5.	2026-08-09 21:22:55 +02:00
tegwick	192942244e	feat(activity): multi-service config, make help default, install-cli ... Bare make lists targets. make install-cli installs the activity tool via uv. Named activity-core backends live in ~/.config/activity/services.json with list/add/use/default/which; -s/--service selects one call without changing the default; --activity-url is a one-shot override.	2026-08-06 17:25:54 +02:00
tegwick	9f4993d9e7	docs: mark activity CLI v1 implemented (WP-0028)	2026-08-06 13:07:38 +02:00
custodian-sync	fbf260580b	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-06: - update .custodian-brief.md for activity-core	2026-08-06 13:06:43 +02:00
tegwick	01ba1865ce	feat(activity): repo-scoped automation review CLI (WP-0028) ... Ship the activity console script for consumer-repo morning review: list, status, runs, deliverables, inbox, checkpoint, and ack. Offline-first with git + local defs; enriches from ops API and State Hub. Multi-source trust matrix never reports did-not-run when git has the artefact. Adds target_repo filter on GET /ops/automations.	2026-08-06 13:05:46 +02:00
custodian-sync	0a7fcfa4a0	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-06: - update .custodian-brief.md for activity-core	2026-08-06 11:03:54 +02:00
tegwick	1789c535c5	docs+workplan: activity CLI for repo-scoped automation review ... Rigorous review of the review-CLI concept; rename to activity, lock offline- first multi-source design, and open ACTIVITY-WP-0028 for implementation.	2026-08-06 11:02:57 +02:00
custodian-sync	7fb14e7610	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-05: - update .custodian-brief.md for activity-core	2026-08-05 17:57:57 +02:00
tegwick	4e605a6839	fix(edge): retry+degrade side-effect POSTs; finish ACTIVITY-WP-0027 ... Consistency sweep and recently-on-scope retry transient 502/503/504 then return a degraded context snapshot instead of thrashing Temporal. Document edge-relay resilience. Retire Binky dual-clock host timers after claim-loop smoke.	2026-08-05 17:53:00 +02:00
custodian-sync	2b3fc6a556	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-05: - update .custodian-brief.md for activity-core	2026-08-05 17:27:48 +02:00
tegwick	0161b470d8	workplan: ACTIVITY-WP-0027 progress — T01–T05,T08 done ... llm-connect host ClusterIP path live; ops UI artefact links deployed. T06 edge-relay soft-fail and T07 Binky timer retirement remain.	2026-08-05 17:26:04 +02:00
tegwick	7711bf9c70	feat(ops): run artefacts in API/UI + llm-connect host access design ... ACTIVITY-WP-0027: document durable ClusterIP host access for llm-connect; join activity_runs to ops_runs; surface Forgejo artefact links on /ops/ui automation detail and new run detail pages.	2026-08-05 17:23:02 +02:00
custodian-sync	9965af2096	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-05: - update .custodian-brief.md for activity-core	2026-08-05 16:04:29 +02:00
tegwick	d22b57f087	workplan: ACTIVITY-WP-0027 llm-connect access + run artefacts in ops UI ... Capture post-FI-cutover reliability caveats: durable host llm-connect for rein-aharness, and operator review of deliverables from activity.coulomb.social without SSH.	2026-08-05 16:00:55 +02:00
tegwick	3b2528ab84	docs: claim loop is primary for FI; dual-clock timer retired ... Record 2026-08-05 cutover after per-fire ops_run keys were fixed and the FI host timer disabled on railiance01.	2026-08-05 15:33:21 +02:00
tegwick	21dc228cb1	fix(ops_run): unique triggering_event_id per cron fire ... Cron schedules always passed trigger_key="scheduled", so ops_run idempotency collapsed every weekday into one key. After the first fire, create_ops_run was a silent no-op, the claim loop starved, and dual-clock host timers produced empty FI briefs. Map scheduled fires to run_id (or scheduled:{iso}) via emit_triggering_event_id; log duplicate skips; document the contract.	2026-08-05 15:30:00 +02:00
tegwick	00da21e39e	Register OpenBao retention reactivation	2026-08-04 00:53:12 +02:00
custodian-sync	abe45cfa25	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 21:26:58 +02:00
tegwick	792d0b9f21	Mark ACTIVITY-WP-0026-T07 done after railiance ops_run smoke. ... Migration 0007 applied; FI trigger produced ops_run; claim-loop completed succeeded; claim-loop user service running on railiance01.	2026-08-03 21:24:48 +02:00
tegwick	6ce77a72bb	Document ACTIVITY-WP-0026-T07 railiance deploy checklist. ... Add deploy-ops-run-queue-railiance.md (image, migrate 0007, smoke, dual-path residual), wire OPS_RUN_* into runtime ConfigMap, and cross-link runbook/README. T07 stays open until prod smoke is executed.	2026-08-03 19:30:00 +02:00
tegwick	32f62ac1ac	chore(consistency): regenerate WORK-RECORDS.md index	2026-08-03 19:26:30 +02:00
custodian-sync	5de95c1b3d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 19:26:22 +02:00
tegwick	15eb3a2066	Implement ACTIVITY-WP-0026 ops_run claim queue (T01–T06). ... Add durable claimable ops_runs table, emit dual-write on TaskSpec, REST claim/lease/complete/fail API, ops status visibility, and consumer docs aligned with ACT-ADR-005. T07 railiance rollout remains deploy-side.	2026-08-03 19:22:50 +02:00
tegwick	a145cc4027	chore(consistency): sync workplan hub IDs [auto follow-up]	2026-08-03 19:16:50 +02:00
custodian-sync	7a9075064d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-03: - update .custodian-brief.md for activity-core	2026-08-03 18:53:04 +02:00
tegwick	d1e24348c3	Accept ACT-ADR-005 and open ACTIVITY-WP-0026 for ops_run claim queue. ... Split ops runs (claimable DB) from development work records (repo + State Hub), ban default Forgejo queueing for automation, and stack WP-0026 with rein-aharness and issue-core follow-ups. Forgejo-only forge language; no Gitea product path.	2026-08-03 18:51:37 +02:00
tegwick	747d63a993	Document recurring automations playbook for activity-core as organizer. ... Codify when/what/where vs rein-aharness execution vs domain instance state, and the checklist to register cron definitions without workstation cron bypasses.	2026-08-03 17:53:06 +02:00
tegwick	2b4eca0220	Adopt Target Revenue Source License V1C1 (org-wide preliminary rollout) ... Maintainer decision, 2026-07-29: adopts TRSL V1C1 as this repo's preliminary governing license, per target-revenue's workplans/TREV-WP-0008-governance-and-pilot-rollout.md T05. Full specialist legal review is deferred until out of beta (target-revenue SCOPE.md §1). No Phase is yet declared for this repo. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-29 23:48:04 +02:00
tegwick	4d90871ff0	Register freedom-intelligence daily research brief for activity-core. ... Add fi-daily-research-brief to the railiance external definitions ConfigMap and document freedom-intelligence in ACTIVITY_DEFINITION_DIRS examples so the weekday FI brief schedule can be applied on cluster deploy.	2026-07-28 01:30:55 +02:00
tegwick	70a7db500d	Add fi_brief_status resolver for Freedom Intelligence daily briefs. ... Mirror binky_rhythm daily due-checks against fi_daily_brief progress events so activity-core can schedule freedom-intelligence research without executing it.	2026-07-24 00:17:46 +02:00
tegwick	9a4f6a4d75	feat: enable daily CNPG Option A backup on railiance01 ... Wire worker kubeconfig hostPath (no PATH override), enable daily-cnpg-option-a-backup for R01 targets, ESO already synced.	2026-07-22 20:34:22 +02:00
tegwick	041ff9b495	feat: daily CNPG Option A backup shell activity (RAILIANCE-WP-0016) ... Add cnpg_option_a_backup resolver, disabled ActivityDefinition, ESO manifest, worker kubeconfig hostPath, databases RBAC, and unit tests. Enable after ESO token re-mint and host kubeconfig wiring.	2026-07-22 19:50:59 +02:00
tegwick	fee89c4ea1	Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist. ... Close T06: LLDAP activity-core-operators and Authelia domain rules are live in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design with membership pointers, and clear residual handoff notes.	2026-07-22 17:47:57 +02:00
custodian-sync	6134b82101	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 17:47:49 +02:00
tegwick	652e799969	Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002. ... Point residual and ops-sso-access design at the file-backed work records in net-kingdom rather than informal coordination notes.	2026-07-22 10:47:25 +02:00
tegwick	91353df7d0	Finish WP-0025 SSO cutover except group allowlist residual. ... Mark T03–T05 and T07–T08 done after live Authelia/TLS verification, prefer SSO principal in ops UI copy and audits, and document break-glass port-forward. Leave T06 waiting on net-kingdom LLDAP/Authelia group rules.	2026-07-22 10:23:36 +02:00
custodian-sync	27c087bcb4	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 09:53:16 +02:00
tegwick	3bd005acc9	Prefer temporal.coulomb.social; fix Ingress ACME entrypoints ... Document AAAA parking pitfall for activity.coulomb.social. Use web+websecure entrypoints and Authelia middleware on SSO Ingress manifests.	2026-07-22 01:29:23 +02:00
tegwick	54431db583	Use temporal.coulomb.social for Temporal UI SSO host ... Prefer clean short hostname temporal.coulomb.social instead of activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.	2026-07-22 01:17:52 +02:00
tegwick	2acf2baffa	chore: consistency writeback after WP-0025 active	2026-07-22 00:49:44 +02:00
custodian-sync	eb3ce73396	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-07-22: - update .custodian-brief.md for activity-core	2026-07-22 00:49:36 +02:00
tegwick	f885697e96	Activate ACTIVITY-WP-0025: Authelia SSO ingress for ops and Temporal UI ... Mark workplan active. Add Traefik ForwardAuth middleware and Ingress manifests for activity.coulomb.social and activity-temporal.coulomb.social. Prefer Authelia SSO identity for ops mutations; document DNS gate and fleet pattern (docs/ops-sso-access.md).	2026-07-22 00:47:29 +02:00
tegwick	7e71c0c837	chore: hub IDs for ACTIVITY-WP-0025 after fix-consistency	2026-07-22 00:33:34 +02:00
tegwick	7761acf86a	Link Temporal UI from ops console; propose SSO access WP-0025 ... Add nav/deep link to Temporal Web UI (configurable URL, default 127.0.0.1:8080 for port-forward). Document dual port-forward and draft ACTIVITY-WP-0025 for Keycloak SSO ingress without port-forward.	2026-07-22 00:30:17 +02:00