Commit graph

  • 5679b86281 docs: close verifier custody and track client admission residual codex 2026-09-09 07:06:05 +02:00
  • c6dc4286e2 feat: verify live KeyCape custody and preserve versions on resume codex 2026-09-09 02:18:12 +02:00
  • b7861de20e feat: admit and exercise KeyCape verifier custody activation codex 2026-09-09 01:32:45 +02:00
  • 52b24eab9a Close issuer pin prerequisite and prepare named custody review decisions codex 2026-09-09 00:40:23 +02:00
  • e06d7fc390 docs(records): attach issuer proof to the receiving admission task tegwick 2026-09-09 00:07:02 +02:00
  • 8f40d73d0f docs(identity): record verified live upstream issuer and completed cleanup tegwick 2026-09-08 23:50:55 +02:00
  • a94d06dbcf docs(custody): record attended KeyCape first-provision authority proof tegwick 2026-09-08 22:40:04 +02:00
  • a0bbae842c chore(consistency): sync task status from DB [auto] custodian-sync 2026-09-08 14:53:55 +02:00
  • f3ba7ca882 Admit KeyCape approval-engine client custody paths and delivery codex 2026-09-08 14:53:32 +02:00
  • 805e0e5a2b Verify telemetry essentials recovery from versioned Scaleway archive codex 2026-09-06 23:46:20 +02:00
  • 92a0f5ed59 Establish attended telemetry Grafana custody and record private activation codex 2026-09-06 22:36:09 +02:00
  • 4c320cf053 Track Q2 receiver implementation and live acceptance dependency codex 2026-09-06 19:18:14 +02:00
  • 31386c8e63 Validate OpenBao snapshot evidence and record assurance closure gates codex 2026-09-06 15:24:58 +02:00
  • a867ec269a Record archive recovery lifecycle and validate receipt provenance codex 2026-09-06 14:53:15 +02:00
  • 445f1361dc Advance blocked assurance and operator callback work codex 2026-09-06 14:16:49 +02:00
  • a3ca4b708f Verify full and essentials recovery and implement bounded retention tooling codex 2026-09-06 11:10:50 +02:00
  • 11322a5256 Bind essentials recovery to explicit manifest and verified offsite provenance codex 2026-09-06 09:25:26 +02:00
  • 4707bf08d7 Implement bounded primary archive transfer and explicit essentials capture codex 2026-09-06 08:00:59 +02:00
  • 69187c2f45 Size backup retention and design Nextcloud essentials tier codex 2026-09-06 01:41:43 +02:00
  • 5567fa979e Record successful full offsite Forgejo recovery and remaining custody gate codex 2026-09-06 01:36:39 +02:00
  • 603c2926fa Keep isolated SQL import on trusted container socket codex 2026-09-06 01:25:14 +02:00
  • 3614985c5a Wait for final PostgreSQL listener before recovery import codex 2026-09-06 01:23:02 +02:00
  • 121f11de6a Allow bounded atomic import of full Forgejo SQL archive codex 2026-09-06 01:16:43 +02:00
  • a9c1da4bd7 Bound rejected backup fixture cleanup to successful replacement recovery codex 2026-09-06 01:05:27 +02:00
  • 4a9d6e6c7f Record verified Forgejo Scaleway backup and recovery codex 2026-09-06 01:03:02 +02:00
  • be45c4e3fd Extend isolated Scaleway recovery checks to Forgejo database metadata codex 2026-09-06 00:51:55 +02:00
  • 54819fb3f4 repo.work.assign_missing_identifiers repo-manager 2026-09-06 00:48:27 +02:00
  • 978383fadb Define scoped Forgejo native backup on the Scaleway primary codex 2026-09-06 00:48:25 +02:00
  • 63b5d6d426 Restore contained attended browser launch on WSL without xdg-utils codex 2026-09-06 00:44:08 +02:00
  • d05c3000c5 Verify Scaleway primary recovery and distinguish secondary backup coverage codex 2026-09-06 00:34:43 +02:00
  • 9269d9d8f4 Prepare bounded recovery verification from the Scaleway primary codex 2026-09-06 00:29:35 +02:00
  • 0af2c5148b docs: link Anthropic custody to native delivery adoption codex 2026-09-06 00:25:06 +02:00
  • 195a51a62c Record rejected historical backup, verified fresh capture and worker activation codex 2026-09-05 22:35:20 +02:00
  • 34b9385bee Deliver validated backup capture to worker via immutable runtime bundle codex 2026-09-05 22:32:30 +02:00
  • 480d181549 Bind isolated restore to fetched artifact and document archive integrity gates codex 2026-09-05 22:21:54 +02:00
  • 0cca68da96 Prepare isolated offsite restore and stream large backup transfers codex 2026-09-05 22:18:05 +02:00
  • d0c7249a0d Reject unfinished or truncated Forgejo backup archives before encryption codex 2026-09-05 22:10:22 +02:00
  • 6124a15c24 Prepare contained real-backup offsite retrieval for WP-0029 codex 2026-09-05 21:35:26 +02:00
  • 34e78e8937 Review blocked platform obligations and archive completed ESO recovery codex 2026-09-05 21:16:53 +02:00
  • b2c2848e49 feat: verify Anthropic custody through metadata only codex 2026-09-05 21:15:14 +02:00
  • a16c33942a feat: prepare empty Anthropic custody entry for UI handoff codex 2026-09-05 21:10:43 +02:00
  • cb6396caab Record verified Backup account activation and consumer refresh codex 2026-09-05 20:50:26 +02:00
  • b6d648bfbe Accept file-drop method-not-allowed denial response codex 2026-09-05 20:47:49 +02:00
  • 3aa1f64eb0 docs: register Glas Anthropic credential request codex 2026-09-05 20:47:48 +02:00
  • 47425d35bb Verify denied operations on the actual file-drop DAV endpoint codex 2026-09-05 20:41:23 +02:00
  • feee30988b Request create-only Nextcloud share without public-upload permission override codex 2026-09-05 20:40:26 +02:00
  • 708ba5d174 repo.work.assign_missing_identifiers repo-manager 2026-09-05 20:35:14 +02:00
  • 8fb4407832 Prepare dedicated Backup account cutover with quota and recovery verification codex 2026-09-05 20:35:13 +02:00
  • 5ef016be01 Contain backup upload credentials and prepare provider recovery gates codex 2026-09-05 19:21:06 +02:00
  • 08a406f2f8 Close three-lane ESO recovery with live verification and cleanup evidence codex 2026-09-05 19:00:19 +02:00
  • 3759850cc4 Document recovered ESO lanes and recognize explicit invalid-token responses codex 2026-09-05 18:51:40 +02:00
  • 153223983f Verify fresh ESO reconciliation and safely retire unused delivery tokens codex 2026-09-05 18:40:46 +02:00
  • dfc1641c49 repo.work.assign_missing_identifiers repo-manager 2026-09-05 18:38:20 +02:00
  • bd2e6e86b8 Prepare bounded Kubernetes authentication recovery for three ESO lanes codex 2026-09-05 18:38:19 +02:00
  • 5d6d8724b4 Complete live State Hub signing activation and rotation acceptance codex 2026-09-05 18:12:37 +02:00
  • ae27a42b18 Require signature rejection in predecessor acceptance codex 2026-09-05 17:58:01 +02:00
  • 6f89388901 Add contained live signing and rotation acceptance probe codex 2026-09-05 17:55:08 +02:00
  • 9c86983f1a Allow bounded ESO token self-validation and cleanup codex 2026-09-05 16:47:26 +02:00
  • 238d261536 fix: preserve unrelated live boundary rules during signing lane apply codex 2026-09-05 16:43:47 +02:00
  • 80793afe4f Pin signing-lane writes to the verified primary cluster codex 2026-09-05 16:41:46 +02:00
  • 5d288938f7 feat: prepare scoped State Hub preflight signing custody and rotation codex 2026-09-05 16:38:26 +02:00
  • a46a6d8213 Prepare bounded State Hub preflight signing lane codex 2026-09-05 11:50:27 +02:00
  • 234b1b559f Implement S3 service assurance and admission checks codex 2026-09-05 11:43:55 +02:00
  • 8f828c7609 repo.work.assign_missing_identifiers repo-manager 2026-09-05 11:14:44 +02:00
  • 9f83e426c7 Consolidate platform workplans and assess intent gaps codex 2026-09-05 11:14:42 +02:00
  • 9d958f8e09 repo.work.assign_missing_identifiers repo-manager 2026-09-05 10:42:02 +02:00
  • 193b1276f3 Document credential lane designs and adopt fast projection sync codex 2026-09-05 10:41:56 +02:00
  • 4c70fa83c5 Close identity repair after successful primary reconciliation codex 2026-09-05 10:24:35 +02:00
  • 6b41a43fa3 Separate Core Hub onboarding from archived apps-pg identities codex 2026-09-05 10:22:29 +02:00
  • 6b74b5e3a9 Ignore derived local Repo Manager cache codex 2026-09-05 10:19:08 +02:00
  • 07a959bac2 repo.work.assign_missing_identifiers repo-manager 2026-09-05 10:18:42 +02:00
  • 3dc005df1c Close live inventory migration and prepare workplan identity repair codex 2026-09-05 10:17:42 +02:00
  • da42f764c0 Add failure-safe cluster image capture hook codex 2026-09-05 10:04:38 +02:00
  • 05f315be84 repo.work.assign_missing_identifiers repo-manager 2026-09-05 09:41:10 +02:00
  • c7b0b3f572 Record prune verification and State Hub sync latency evidence codex 2026-09-05 02:04:22 +02:00
  • f637989a69 Refuse prune apply when requested image inventories are unavailable codex 2026-09-05 02:00:50 +02:00
  • 0349a08e1b Harden backup credentials and add durable image inventory publication codex 2026-09-05 01:53:24 +02:00
  • 62423fd092 Activate Policy Nexus source credential lane codex 2026-09-01 01:35:48 +02:00
  • a6d47c51cc Record Policy Nexus metadata apply and diagnose bootstrap codex 2026-09-01 00:18:15 +02:00
  • 1d5f35539d Record Policy Nexus OIDC bootstrap hold codex 2026-08-31 23:26:09 +02:00
  • 1b85a3ef3d Add attended Policy Nexus source bootstrap codex 2026-08-31 23:24:05 +02:00
  • f342f9605e Add contained Policy Nexus CCR apply wrapper codex 2026-08-31 23:12:16 +02:00
  • 2a44d2eced Approve Policy Nexus source credential lane codex 2026-08-31 23:03:48 +02:00
  • 361005cf0c docs: request policy nexus source-read token codex 2026-08-31 22:23:32 +02:00
  • e5f3497337 fix(workplans): qualify ad-hoc identifiers with the repository prefix codex 2026-08-28 00:28:23 +02:00
  • e9948ac54f chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-26 19:45:45 +02:00
  • 86209c756c fix(workplans): resolve RPF-WP collisions created by the prefix migration codex 2026-08-26 19:44:46 +02:00
  • 47d8ec8806 fix(workplans): migrate archived workplans off the retired RAILIANCE-WP prefix codex 2026-08-26 08:05:38 +02:00
  • a51b8eb418 chore(consistency): refresh work-record index codex 2026-08-25 23:00:07 +02:00
  • 7566257e6a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 22:59:28 +02:00
  • e4af2a1d10 fix(workplans): migrate active workplans off the retired RAILIANCE-WP prefix codex 2026-08-25 22:58:35 +02:00
  • ea2e9ec97d fix(workplans): adopt ADR-007 derived identifiers for unregistered records codex 2026-08-25 20:20:45 +02:00
  • 83416e9900 chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 19:59:23 +02:00
  • 221668a487 chore(registrar): assign State Hub identifiers repo-manager 2026-08-25 17:47:00 +02:00
  • 89ad78601a chore(consistency): sync task status from DB [auto] custodian-sync 2026-08-25 17:46:58 +02:00
  • d34b547fb8 docs(agents): repoint remote State Hub URL to the in-cluster address codex 2026-08-25 00:21:50 +02:00
  • 51361fbf8e Track OpenBao custody handoff gate codex 2026-08-23 22:01:21 +02:00
  • f607d747da Draft NetKingdom credential custody contract codex 2026-08-23 21:48:29 +02:00
  • 60fcd0cdce Record partial resolver update and operator stop codex 2026-08-23 15:13:35 +02:00
  • b879e85d6d Pin privacyIDEA resolver reconciliation gate codex 2026-08-23 15:06:50 +02:00