941 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
codex	8545bf8e4c	RPF-WP-0061-T04: request-decision opens the founder hub decision; CCR-2026-0051 decision e633607e ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 306568@bnt-lap001 Assistant-Session: 8bdf8150-ea56-41e7-9132-13f04f6b0b91	2026-10-18 12:40:36 +02:00
codex	3d971178d8	RPF-WP-0061-T03: install jsonschema in CCR intake gate ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 306568@bnt-lap001 Assistant-Session: 8bdf8150-ea56-41e7-9132-13f04f6b0b91	2026-10-18 12:39:38 +02:00
codex	10fddbc98f	RPF-WP-0061-T03: ccr/* branch gate and CI workflow; first automated platform review on CCR-2026-0051 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 306568@bnt-lap001 Assistant-Session: 8bdf8150-ea56-41e7-9132-13f04f6b0b91	2026-10-18 12:37:05 +02:00
codex	b6148da443	RPF-WP-0061-T01/T02: standard lane profile and self-service CCR submit/review-standard ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 306568@bnt-lap001 Assistant-Session: 8bdf8150-ea56-41e7-9132-13f04f6b0b91	2026-10-18 12:29:47 +02:00
codex	4398f89e02	File CCR-2026-0051 MAS TEM relay lane; propose RPF-WP-0061 self-service CCR intake ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 306568@bnt-lap001 Assistant-Session: 8bdf8150-ea56-41e7-9132-13f04f6b0b91	2026-10-18 12:22:01 +02:00
codex	d35c0f9d4b	Bind mint broker validation to exact reviewed sources and track successor obligations ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-17 22:55:51 +02:00
codex	104ed90f42	feat: declare proposed fixed KeyCape issuer ESO source contract ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa	2026-10-17 20:36:52 +02:00
codex	0a9617a62d	Prepare source-only KEY-WP-0039-T02 owner returns ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 903097@bnt-lap001 Assistant-Session: aa320c8f-c3fa-46e7-8541-0b58e1e45d23	2026-10-17 04:31:07 +02:00
codex	08c1f036f2	Review exact native signer custody and manual Argo plan ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 21:14:48 +02:00
codex	84c529f239	Separate signer runtime storage review from GitOps ownership ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 20:26:28 +02:00
codex	a3e8eb64ba	Add attended signer adapter with phase-aware read-only recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 18:44:07 +02:00
codex	7be8b6e76d	Prove trusted task chain and prepare bounded signer custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 17:29:12 +02:00
codex	76fdc0b861	Bound task execution by absolute call and credential deadlines ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 17:15:00 +02:00
codex	b9eaa20060	Recover exact task cleanup after executor process loss ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 16:43:20 +02:00
codex	d870596cc7	Verify exact task metadata baseline and readback ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 10:48:21 +02:00
codex	5f30ddd90c	security: verify backup credential requests against recovered archive and live job ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:42:10 +02:00
codex	8164c57467	security: record native backup reader and ESO delivery acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 09:21:38 +02:00
codex	e2b832b5d4	feat: journal strict task consumption before native fixture effects ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 09:20:33 +02:00
codex	d042d468df	feat(execution): bind immutable task grants before native effects ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 07:51:42 +02:00
codex	4021ca5e79	security: persist coding-agent denial of identity backup credentials ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:48:27 +02:00
codex	d79079bb21	security: record explicit approval of provider share normalization ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 07:44:37 +02:00
codex	99fd21ee37	feat(execution): prove fixed grant and cleanup against disposable OpenBao ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 07:43:52 +02:00
codex	69a792c070	security: record owner approval of NK49 backup credential packet ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 01:52:25 +02:00
codex	59d1441cf8	fix(execution): retain scoped cleanup after uncertain outcomes ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786	2026-10-16 01:51:53 +02:00
codex	3b6e647aa0	security: propose scoped NetKingdom identity backup credentials ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-16 01:37:22 +02:00
codex	6e24b09eaa	Record native receiver custody and prepare actual Approval lifecycle readback ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:40:48 +02:00
codex	ce5344da69	Match receiver exclusive reconciliation end boundary ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:32:08 +02:00
repo-manager	19b13f6f36	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:29:42 +02:00
codex	4f054046dc	Prepare bounded independent cadence observer custody readback ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:29:36 +02:00
codex	7ec54d59e0	Record explicit owner approval for exact Qonto custody packet ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:27:32 +02:00
codex	d5a86b74d1	Prepare exact Qonto audit custody and hourly receiver admission packet ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 21:26:11 +02:00
codex	643006aa25	Record approved capabilities-self apply and attended caller proofs ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2	2026-10-15 19:23:28 +02:00
codex	061d98b66e	Close hosted seven-source reader establishment ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 05:42:23 +02:00
codex	2951b69fc5	Record verified seven-source reader custody and rotation deadline ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 05:09:43 +02:00
codex	b6c4410a82	RPF-WP-0015-T03: record E2 attempts blocked by aal1 login (no run, nothing changed) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-15 04:22:19 +02:00
repo-manager	352aeea5e9	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 02:00:49 +02:00
codex	cc3c7d883b	Track manual seven-source reader rotation deadline ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 02:00:41 +02:00
codex	635daec6b4	Prepare reviewed attended reuse-reader custody execution ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 01:57:25 +02:00
repo-manager	6e8955fcd0	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 01:26:13 +02:00
codex	a570bc2f5b	Prepare restricted seven-source reuse reader and bounded recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684	2026-10-15 01:25:46 +02:00
codex	748fe6c7db	RPF-WP-0015-T03: E2 proves a fresh write (accepted then duplicate); honest retention note ... Driver baseline reports ready for accepted or duplicate and its cleanup owns no server-side object (railiance-platform round-8 review). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-15 00:24:15 +02:00
codex	6fc2dae86a	Record the State Hub ids for RPF-WP-0057-sign-in-diagnosis-caller-proof.md. ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:51:53 +02:00
codex	0f0282a436	RPF-WP-0057: capabilities-self grant for the hub-writer caller and UI workload role choice (NK-WP-0051-T06) ... credential-change.py generates sys/capabilities-self (update) when openbao.token_capabilities_self is true. Proposed CCR-2026-0045 sets it for workload-kv-read-reuse-surface-runtime so the ops-mason proof stops calling sys/capabilities with a root token. The OpenBao login page keeps its platform-admin button and adds an allow-listed workload role choice. Repo only; nothing applied to OpenBao or the cluster. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1041694@bnt-lap001 Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52	2026-10-14 23:45:00 +02:00
codex	bb6838f588	RPF-WP-0015-T03: post-reboot audit chain intact; freeze lifted ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 23:31:04 +02:00
codex	e9cf0d8884	RPF-WP-0015-T03: record coordinated reboot, attended unseal and passing recovery comparison ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 23:29:26 +02:00
codex	b797594a21	RPF-WP-0015-T03: fail closed the deferred synthetic E2 ... The 2026-10-14 reboot window stays on contract 3817c1df and does not run this E2. The follow-up harness now refuses an unclean fixture cleanup or a changed pod UID or restart count. Assistant: grok Assistant-Session: 01a13b3e-0402-7a83-a827-6b29197b7132	2026-10-14 22:23:42 +02:00
codex	dd003c9429	RPF-WP-0015-T03: post-reboot synthetic E2 mode in the reviewed sender lane ... One contained login: project one synthetic sender, event accepted, replay must be duplicate (exactly once), cleanup; no lease is touched. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 20:30:11 +02:00
codex	3e904b750f	RPF-WP-0015-T03: GO record cites round-7 approvals, custodian key check, E2 follow-up date ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 20:07:13 +02:00
codex	048362e3ef	RPF-WP-0015-T03: snapshot lane accepts the escrow key in age identity-file format ... First attended snapshot run failed closed at verify: the stored AGE_PRIVATE_KEY carries the standard '# created'/'# public key' comment lines. Nothing uploaded. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 20:04:25 +02:00
codex	a55cfbe116	RPF-WP-0015-T03: GO record cites round-6 approvals and E2 deferral terms ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 680842@bnt-lap001 Assistant-Session: 54eb9e8e-7d6b-4f0c-b7a6-a6db62075883	2026-10-14 19:51:59 +02:00