20 commits

Author	SHA1	Message	Date
tegwick	f0eff0ac92	feat: atomically journal and deliver authorized native operation outcomes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 14:00:26 +02:00
tegwick	3c5cbfbafe	feat: compose authenticated stdio MCP with explicit runtime tool mapping ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 12:38:04 +02:00
tegwick	a15fe032b0	feat: add OIDC browser sessions with live access enforcement ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 12:17:16 +02:00
tegwick	c9b6916dac	feat: integrate durable authorization audit and runtime composition ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 12:01:42 +02:00
tegwick	3e386147fd	feat: add fail-closed Hub access profile foundation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929	2026-09-28 11:44:50 +02:00
tegwick	e89d621f18	Close HUB-WP-0009 conformance gaps (C2, C7, C9, C10); mark blocked workplans ... Implements the four residual conformance checks left open by the T04 minimal vertical: - C2: GET /ports/registry/registrations/{hub_slug} resolves missing (404), ambiguous (shared reuse_surface_id across hub_slugs), and stale (deprecated/retired descriptor) registrations; a new .../audit route exposes queryable registration history from the existing in-memory history and the PostgreSQL runtime_audit_ledger. - C7: harness proof that disabled compatibility groups deny access (404) with no fixture credentials involved, matching the existing fail-closed compat router behavior. - C9: harness proof plus a dedicated test that /readyz degrades only on an unavailable configured dependency while unrelated disabled projections stay non-blocking. - C10: ContractValidator now negotiates contract_version_min/max against the runtime's contract version and rejects incompatible or inverted ranges with an explicit 422 instead of silently accepting them. HUB-WP-0009 is now finished. HUB-WP-0006 is marked blocked: its only open task (T06) has no remaining hub-core code path and waits on an external Forgejo identity/production deployment gate. HUB-WP-0011 is marked blocked: T02/T03 already waited on external credential/deployment review, and T01 needs a source/destination ownership and retention decision against live message data before it can be implemented safely. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 310936@bnt-lap001 Assistant-Session: 00cd9abe-09a0-416b-88e0-f907b9101629	2026-09-27 23:59:46 +02:00
tegwick	6fb5ce285c	feat: add guarded State Hub inbox read projection pilot ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102	2026-09-05 10:37:09 +02:00
tegwick	f582773f5a	feat: consume Repo Manager classification publisher ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a053ff-1d6f-7fe2-ac1c-a6eb40a42a0c	2026-09-01 00:49:30 +02:00
tegwick	ed3feed310	feat: reconcile legacy message identities ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0230c-b06c-7641-808a-e191b6d1da49	2026-08-23 11:59:52 +02:00
tegwick	ab936a1e98	feat: transport authoritative workload projections ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0230c-b06c-7641-808a-e191b6d1da49	2026-08-23 10:54:40 +02:00
tegwick	e3e542f76c	feat: expose repository navigation queries ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0230c-b06c-7641-808a-e191b6d1da49	2026-08-22 00:40:42 +02:00
tegwick	3db8c9cd78	feat: ingest repository navigation projections ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0230c-b06c-7641-808a-e191b6d1da49	2026-08-22 00:35:47 +02:00
tegwick	055cf4980c	fix: preserve logical projection provenance	2026-08-21 19:10:11 +02:00
tegwick	1d258626e0	fix: fence deferred compatibility writes	2026-08-21 18:11:21 +02:00
tegwick	9adeb013cd	fix: preserve reverse migration record hashes	2026-08-21 18:03:52 +02:00
tegwick	b649ea7168	fix: canonicalize numeric legacy timestamps	2026-08-21 18:01:02 +02:00
tegwick	826874a47e	fix: enforce durable migration ownership and readiness	2026-08-21 17:54:21 +02:00
tegwick	14befd0b50	fix: serve legacy route aliases during cutover	2026-08-21 17:45:25 +02:00
tegwick	8ab1d0c09a	feat: add durable Core Hub absorption runtime	2026-08-21 16:16:42 +02:00
tegwick	7e1ec03f0c	feat: add hub runtime and extension contract	2026-08-21 10:58:03 +02:00