2100 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
codex	62b393ebc6	Activate production Clock authority and verify host convergence ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-15 23:13:42 +02:00
codex	07a0c07b7c	Prepare Clock host identity before attended key delivery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-15 23:00:26 +02:00
codex	4542c179e1	Pin Railiance01 time baseline in canonical inventory ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-15 22:04:02 +02:00
codex	0d6cc3ec3b	Add opt-in Railiance host time and private authority automation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6	2026-09-15 21:59:29 +02:00
codex	c402245207	Keep the consolidated RAIL-HO-WP-0013 owner record. ... Remote renamed the residual timesyncd draft into the host UTC baseline. Classify that live record as planning, not a second residual file. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 15:53:14 +02:00
codex	b3a9520fc3	Classify open workplans with flavor (CUST-WP-0072). ... Set flavor on open workplans from origin/prose/status. Copy existing depends_on aliases only. Do not promote residuals. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 15:52:21 +02:00
tegwick	cf8c5f9cdd	Merge branch 'main' of forgejo-remote:coulomb/railiance-infra ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3	2026-09-14 13:19:50 +02:00
repo-manager	c4714163ea	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3	2026-09-14 13:19:35 +02:00
tegwick	5a455e2a09	Qualify archived task IDs while retaining State Hub UUIDs ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3	2026-09-14 13:19:22 +02:00
custodian-sync	c03b330b6c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-14: - update .custodian-brief.md for railiance-infra Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 12:30:44 +02:00
tegwick	6a95cc37bc	Consolidate concurrent host UTC plans into original residual record ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3	2026-09-14 12:29:56 +02:00
codex	03f1732d9d	Refresh WORK-RECORDS.md after RAIL-HO-WP-0013 residual. ... Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 12:29:05 +02:00
codex	ea7577ece2	Plan declarative host UTC baseline for Railiance Clock ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbc-910e-77a0-b336-3130194350b3	2026-09-14 12:21:48 +02:00
custodian-sync	3989ef814a	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-14: - update .custodian-brief.md for railiance-infra Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 12:04:36 +02:00
codex	5a6c26ef68	Residual from RCLK-WP-0005: declare timesyncd in S1 IaC. ... RAIL-HO-WP-0013 proposed. Wait for the clock UTC contract before apply. Assistant: grok Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267	2026-09-14 12:03:28 +02:00
codex	f3e8bf3ab4	fix(workplans): qualify ad-hoc identifiers with the repository prefix ... `ADHOC-YYYY-MM-DD` is unique per date but not per repository, so any two repos opening an ad-hoc on the same day collide. The 2026-08-26 fleet projection reset refused 9 records for exactly this reason. Canon (work-record-types_v0.1, CUST-WP-0066) settled the form as `{PREFIX}-WP-ADHOC-YYYY-MM-DD`, filename unchanged, and grandfathered existing ids on the condition they are never *silently* re-derived. This is the explicit migration that clause allows for. The hub id is derived from the record id, so a changed id is a different record: stale state_hub_*_id fields are dropped and fix-consistency re-derives. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-28 00:28:23 +02:00
codex	15438dca81	fix(workplans): terminate frontmatter that ran into the document ... A missing newline fused the closing delimiter onto the last frontmatter value (`- KONT-WP-0016---`), or fused a value onto the following key. Either way the frontmatter never terminates and the whole body is swallowed. Because workplan files are selected by `type: workplan`, such a file is not invalid but invisible: it appears in no projection, raises no error, and is reported as neither a workplan nor a problem. A forge-derived reset would therefore read its correct hub record as no longer deriving and propose retiring live work. Only the missing newline is inserted; no value is altered. Refs STATE-WP-0083-T08 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-26 08:28:58 +02:00
codex	9477319783	fix(workplans): adopt ADR-007 derived identifiers for unregistered records ... These workplans exist only in the retired local hub. Their random pre-ADR-007 identifiers are refused by C-06 as stale references, so they cannot be registered. Deriving from the canonical record id takes no identity from anything: central does not hold them and the old ids die with the cache. Records central already holds were deliberately left untouched. Refs CUST-WP-0068-T06 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 20:20:13 +02:00
repo-manager	b3884a8c2d	chore(registrar): assign State Hub identifiers ... Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 17:46:22 +02:00
custodian-sync	b29cb11796	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-25: - update .custodian-brief.md for railiance-infra Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 17:46:17 +02:00
codex	923412e1a8	docs(agents): repoint remote State Hub URL to the in-cluster address ... The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the workstation. On railiance01 the State Hub runs in the cluster on that same machine, so the request left the box and came back to reach a local service. Refs CUST-WP-0067-T07 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 00:21:48 +02:00
codex	d0a5a27926	Prepare governed S1 offsite upload ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 14:11:00 +02:00
codex	2c92b97f37	Support Python 3.11 isolated restore ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 13:18:18 +02:00
codex	295bf43d54	Implement governed S1 backup recovery loop ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 13:13:13 +02:00
codex	40e295e3bd	Make S1 handoff read-only by default ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 12:41:23 +02:00
codex	24b799ec59	Record green S1 source contract CI ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 12:09:01 +02:00
codex	4f2312a7d7	Run source contracts in disposable CI lane ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 12:06:53 +02:00
codex	b93af8cc78	Implement reproducible S1 handoff contracts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 12:02:23 +02:00
codex	c8cb1c8edf	Add reproducible S1 handoff workplan ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 11:21:45 +02:00
codex	3734a1c3bc	Document actual infrastructure scope and intent gaps ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 10:45:02 +02:00
codex	186b030bee	Review attended login containment fix ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-23 01:39:09 +02:00
codex	6fb49552a3	Record WP0027 console and abort receipt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-22 23:05:46 +02:00
codex	d85237aee8	feat(review): persist WP-0024 owner receipt ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:14:22 +02:00
repo-manager	25ba5eedbd	chore(registrar): assign State Hub identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-22 15:14:32 +02:00
codex	301f88575d	Resolve repository owner requests ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-22 15:14:01 +02:00
custodian-sync	df0136b66c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for railiance-infra Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018	2026-08-22 15:12:24 +02:00
codex	61c6082ea8	Gate reef web ports on exposure grants ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 12:34:25 +02:00
custodian-sync	c569fe168a	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for railiance-infra Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa	2026-08-22 12:32:07 +02:00
codex	84dfdc4dc9	chore(consistency): register RAIL-HO-WP-0010 hub ids	2026-08-15 20:56:47 +02:00
custodian-sync	a8bed80da8	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-15: - update .custodian-brief.md for railiance-infra	2026-08-15 20:56:02 +02:00
codex	dea6c72d54	workplan: RAIL-HO-WP-0010 new reefs need a grant for 80/443 ... Intake from RMASTER-WP-0023. 6443 stays operator-only.	2026-08-15 20:52:04 +02:00
codex	33c95fc83e	chore(consistency): mark RAIL-HO-WP-0008 finished in work-records	2026-08-15 19:05:11 +02:00
custodian-sync	7b0b4c311c	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-15: - update .custodian-brief.md for railiance-infra	2026-08-15 19:05:04 +02:00
codex	0a97ce12be	Publish railiance01 resource evidence and close RAIL-HO-WP-0008 ... Non-secret identity, a reproducible capacity observation, and host-ops labor/exit inputs for resource:hosteurope:railiance01. Booked price and contract dates stay unknown for their owners.	2026-08-15 19:04:40 +02:00
codex	39070ed292	chore(consistency): mark RAIL-HO-WP-0009 finished in work-records	2026-08-15 17:58:32 +02:00
custodian-sync	423a7c8426	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-15: - update .custodian-brief.md for railiance-infra	2026-08-15 17:57:43 +02:00
codex	d0e8f9f24e	Apply Railiance01 firewall-only converge and close RAIL-HO-WP-0009 ... Operator-approved playbooks/firewall.yaml --tags firewall removed the three public 6443 grants. Live UFW now matches ADR-005 (OpenSSH + Nydus).	2026-08-15 17:57:17 +02:00
codex	4d9e77c968	Close RAIL-HO-WP-0009 declared-state gaps; leave live 6443 prune gated ... Make the k3s API tunnel-only (ADR-005), stop declaring Flannel VXLAN open to Anywhere, tag the base role so firewall can be scoped, and schedule the Goss declared-vs-live check. CoulombCore sets ufw_manage false so a converge cannot enable UFW there. T02 still needs operator approval for make converge-firewall HOST=Railiance01.	2026-08-15 15:41:59 +02:00
custodian-sync	434121be99	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-15: - update .custodian-brief.md for railiance-infra	2026-08-15 15:41:32 +02:00
codex	f43c718935	docs: point at RMASTER-WP-0017 after master prefix rename	2026-08-14 14:29:19 +02:00