631 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
codex	98e0c3adc2	Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R5 ArgoCD lane) ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:41:34 +02:00
custodian-sync	0873e5b804	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-28: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:39:27 +02:00
codex	360cc5cdb6	Qualify wait tasks per Task Wait Qualifiers v0.1 (CUST-WP-0074-T05, gate root R2 credential provisioning) ... Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 237582@bnt-lap001 Assistant-Session: f2b3d9f1-8fb9-4b9c-bc2b-837ec5dfc826	2026-09-28 23:38:13 +02:00
codex	48a0fca631	docs(security): record verified annotation guard and approved orphan cleanup ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 18:14:34 +02:00
codex	db51ec8028	fix(gitops): pin ESO-compatible annotation guard ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 16:27:54 +02:00
codex	7daf7e9067	fix(security): rebind annotation guard after ESO metadata remediation ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 16:27:24 +02:00
codex	d2631f6112	fix(gitops): pin Target Revenue ESO metadata correction ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 16:22:25 +02:00
codex	80e053988f	fix(security): prevent ESO copying source annotations (CUST-WP-0073) ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 15:56:50 +02:00
codex	c5d65b0b40	fix(gitops): pin annotation guard to disabled enforcement ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 15:16:34 +02:00
codex	6016f72a8d	fix(security): hold annotation enforcement until ESO metadata is explicit ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 15:08:00 +02:00
codex	54885ac158	chore(gitops): pin manual secret annotation guard application ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 14:51:55 +02:00
codex	800cbfa870	feat(security): reject secret last-applied annotations (CUST-WP-0073) ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 14:51:25 +02:00
codex	7a12760160	Activate verified monthly PQRST schedule revision ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e759-301a-78b1-bbc1-040ef094b12d	2026-09-28 12:19:22 +02:00
codex	a13fa575db	Pin activity-core PQRST monthly reporting deployment ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e759-301a-78b1-bbc1-040ef094b12d	2026-09-28 12:13:47 +02:00
codex	de535a1dcd	Record approved reporting repair and reset health-evidence boundary ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e738-9e15-7600-87e6-90dec3a7beef	2026-09-28 11:31:29 +02:00
codex	2e02e69c34	Record verified SMTP custody and scoped reader admission ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f	2026-09-28 11:27:00 +02:00
codex	986b0023aa	Pin approved grant-preserving Activity Core reporting repair ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e738-9e15-7600-87e6-90dec3a7beef	2026-09-28 11:23:31 +02:00
codex	56fcc4c921	Add attended SMTP verification and exact reader admission ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f	2026-09-28 11:21:57 +02:00
codex	3d43a9b1a3	Prepare password-free telemetry SMTP entry for attended custody ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e6f1-443f-7783-9920-a16b2ffc467f	2026-09-28 11:11:34 +02:00
codex	c3607fffea	fix: pin grant-aware Activity Core worker rollout ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c	2026-09-27 21:55:35 +02:00
codex	2f4485a4b6	Record approved metered requester extension and six native creates ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c	2026-09-27 21:08:43 +02:00
codex	b15ab5774f	Prepare exact metered requester extension with scope refusal tests ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c	2026-09-27 20:34:52 +02:00
codex	debf981097	Close verified incident task and finish local workplan loose ends ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e3c3-621b-7350-9f77-50a8d3ee7657	2026-09-27 19:04:54 +02:00
codex	5781d34b3b	Prepare tenant-zero OpenBao roles and review platform essentials ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0	2026-09-27 16:43:32 +02:00
codex	4f20e755c4	Close digest-retention task with verified GitOps runtime projection ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 16:08:17 +02:00
codex	4b9c4cea80	Pin activity-core to governed retention-tool projection ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 16:05:25 +02:00
codex	ff34d596f9	Record Core authorization boundary and pending GitOps tool projection ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 16:01:33 +02:00
codex	743def17be	Protect digest-pinned packages and refuse partial-inventory pruning ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 16:00:51 +02:00
repo-manager	3f834b0556	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 15:49:46 +02:00
codex	d49906d59a	Record activity-core adoption and track digest retention readiness ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 15:49:29 +02:00
codex	a01026535a	Promote identical activity-core binaries to registry digest references ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 15:34:50 +02:00
codex	53825190ca	Point the OpenRouter cycle at memo version 3. ... Fresh receipts use the new approval IDs. A matching live policy and AppRole skips apply without claiming that approval. A difference fails closed. Assistant: grok Assistant-Session: 01a0e2a1-8058-7553-9999-b7d106c17047	2026-09-27 15:33:09 +02:00
repo-manager	1cd546e77c	repo.work.assign_missing_identifiers ... source: repo-manager reason: deterministic projection registration Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 14:01:58 +02:00
codex	f3f2b82d0c	Declare scoped activity-core ArgoCD adoption ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3	2026-09-27 14:01:47 +02:00
codex	c9bf8c90c9	Fix callback-prune test fixture for the post-prune declaration ... bcf6f9b updated the role declaration to the pruned live state; the test modelled the pre-prune role from that file and no longer did. All 377 pass. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 01:16:08 +02:00
codex	bcf6f9bf12	Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config ... Attended run 2026-09-23T23:11Z: status pruned, tunnel callback kept, all other role settings preserved and verified on readback. Declarations now match live; railiance-platform owns the mount config. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 01:14:43 +02:00
codex	df4cbae2e9	chore(consistency): regenerate WORK-RECORDS ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:57:57 +02:00
custodian-sync	9f4dca30b9	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-24: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:57:55 +02:00
codex	c3486be3c2	RPF-WP-0047 done: bao.coulomb.social serves a trusted static notice ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:57:34 +02:00
codex	153951c09f	RPF-WP-0047: pin bao-notice to 9ee20967ca ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:56:23 +02:00
codex	9ee20967ca	RPF-WP-0047: HSTS for bao.coulomb.social only (no includeSubDomains) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:56:22 +02:00
codex	a960bc4128	RPF-WP-0047: pin bao-notice to 8cd7615eea ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:54:40 +02:00
codex	8cd7615eea	RPF-WP-0047: allow Traefik to reach the cert-manager HTTP-01 solver (8089) ... The isolation policy blocked the solver pod, so the challenge got 502. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:54:40 +02:00
codex	7ff598f5eb	chore(consistency): regenerate WORK-RECORDS ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:52:52 +02:00
custodian-sync	1bd291bd42	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-24: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:52:50 +02:00
codex	3ef4a35284	RPF-WP-0047: workplan and railiance01 Application (pinned 960ed09) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:52:26 +02:00
codex	960ed0914f	RPF-WP-0047: static notice page manifests for bao.coulomb.social ... Isolated namespace (Traefik-only ingress, no egress), pinned unprivileged nginx, / -> 200 notice, every other path -> 404, letsencrypt-prod TLS, HTTP->HTTPS redirect. Nothing proxies to OpenBao. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:52:07 +02:00
codex	7f25af3cb1	Add attended prune of retired bao.coulomb.social callbacks from platform-admin ... Read-preserve-write via the reviewed loopback helper; keeps the tunnel callback and every other setting; also captures non-secret OIDC mount config. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:49:39 +02:00
codex	85f6a14892	chore(consistency): regenerate WORK-RECORDS ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:48:48 +02:00
custodian-sync	e7b6ac2905	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-09-24: - update .custodian-brief.md for railiance-platform Assistant: claude-code Assistant-Model: opus Assistant-Process: 150322@bnt-lap001 Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4	2026-09-24 00:48:47 +02:00