648 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	ac21accd7a	feat(deploy): ship the canon classification vocabulary with the release ... The API validates repo classification against the-custodian canon allowed values. A container has no such checkout, so every classification write failed with a 500 and classification could only ever be written from a workstation. Mounts the vocabulary as a ConfigMap and points REPO_CLASSIFICATION_ALLOWED_PATH at it. The copy is the risk, so it is owned rather than trusted: scripts/sync_classification_allowed.py regenerates it from canon and --check fails on drift. make check-classification-allowed and make railiance-state-hub-render both refuse to proceed when the copy diverges, so a release cannot silently validate against a stale vocabulary. The container volumeMounts and env blocks are merged rather than appended — a second pair would have produced duplicate YAML keys as soon as sweep was re-enabled. Refs CUST-WP-0067-T09 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 23:46:05 +02:00
tegwick	05dda8d276	fix(classification): allow the allowed-values path to be configured ... _allowed_path() tried three developer workstation checkouts and nothing else, so in a container none exist and every classification write fails with a 500. That is why repo classification could only ever be written from a workstation. Adds REPO_CLASSIFICATION_ALLOWED_PATH, checked first, and names it in the error when no candidate is found. Refs CUST-WP-0067-T04 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 23:34:34 +02:00
tegwick	0fc955989a	chore(deploy): enable central MCP on main-8221216	2026-08-24 23:17:08 +02:00
tegwick	82212165f9	fix(ci): trigger image builds on every path the Dockerfile copies ... The build filtered on api/** while the Dockerfile COPYs nine more paths, so changes to mcp_server/, flows/, policies/, prompts/, scripts/, task_flow_engine/, templates/, alembic.ini and — most seriously — migrations/ merged to main without ever producing a new image. A schema migration would not have shipped. Refs CUST-WP-0067-T08 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 23:00:57 +02:00
tegwick	6d04544368	feat(mcp): deploy the MCP layer on central instead of tunnelling to a workstation ... No MCP server ran on central, so remote agents reached dev-hub only through a reverse tunnel back to the workstation — routing a request for a service on their own machine out to another host and back. Adds a gated mcp Deployment and ClusterIP Service running the same image with `-m mcp_server.server`, API_BASE defaulted to the in-cluster API Service, and tcpSocket probes. No Ingress: the MCP layer proxies an unauthenticated API and must not be reachable from outside the cluster. Two fixes were needed before the manifests could work: - server.py hardcoded host="127.0.0.1". A Service routes to the pod IP, so a loopback bind is unreachable. Now MCP_HOST, still defaulting to loopback so local runs do not silently expose an unauthenticated proxy. - The container runs `-m mcp_server.server`, not the file path, so /app lands on sys.path rather than /app/mcp_server. mcp.enabled stays false in the deploy values: the running image predates MCP_HOST, so enabling it before the tag is bumped would ship a pod that never becomes reachable. Refs CUST-WP-0067-T08 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 22:54:24 +02:00
tegwick	4e68176492	fix(cli): correct task status keys in statehub status ... cmd_status read tasks['in_progress'] and tasks['blocked']; the task vocabulary is wait|todo|progress|done|cancel and the totals block never carried those two keys, so the command always raised KeyError. Also accept either the workplans or legacy workstreams totals key, and print the resolved API base so the operator can see which hub instance answered. Refs CUST-WP-0067-T01 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 22:10:15 +02:00
repo-manager	9bbe9e38ae	chore(registrar): assign State Hub identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:49:49 +02:00
tegwick	a05a64bf0e	fix(workplans): qualify State Hub daily identifier ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:48:16 +02:00
tegwick	284e28112d	fix(project-rules): qualify ad-hoc record identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:45:26 +02:00
tegwick	fae2816199	fix(consistency): preserve repository domain in briefs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 13:57:22 +02:00
custodian-sync	b91b8705d1	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 13:56:53 +02:00
tegwick	57c3e08103	fix(classification): harden registration updates ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 11:30:36 +02:00
custodian-sync	fb79d0d68d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 11:29:52 +02:00
tegwick	b0e1af24f9	fix(retirement): close projection and launch contract gaps ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b7c-1c49-76a0-955a-49e7b3ddfc0d	2026-08-23 00:52:18 +02:00
custodian-sync	c43266f626	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b7c-1c49-76a0-955a-49e7b3ddfc0d	2026-08-23 00:47:18 +02:00
tegwick	2d114be84d	docs(review): record final full-suite pass ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 21:08:20 +02:00
tegwick	c62e511de8	chore(index): refresh work record status ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:59:51 +02:00
custodian-sync	0007ca232b	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:59:33 +02:00
tegwick	598f6418e7	feat(review): add multi-owner contracts and receipts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:57:51 +02:00
tegwick	52aefe39e4	ops: record promoted State Hub image ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 20:14:32 +02:00
tegwick	76e6eda086	feat: project Nexus SBOM state into summaries ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 20:12:16 +02:00
tegwick	e1e259cf87	ops: switch State Hub SBOM writes to Nexus ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:57:08 +02:00
tegwick	b75234a533	feat: route SBOM writes to Nexus behind flag ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:55:08 +02:00
tegwick	d01ae3971d	ops: switch State Hub SBOM reads to Nexus ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:21:39 +02:00
tegwick	98518091ae	fix: preserve legacy SBOM source values ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:08:10 +02:00
tegwick	1e5222d458	ops: preserve State Hub rolling headroom ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:04:38 +02:00
tegwick	5fc4c56215	feat: add reversible SBOM Nexus read facade ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 18:39:21 +02:00
repo-manager	9e7e91300f	chore(registrar): assign State Hub identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:16:06 +02:00
custodian-sync	ccff2385b8	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:16:05 +02:00
tegwick	ceab9ce279	docs(review): add multi-owner contract workplan ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:02:36 +02:00
tegwick	70a708ff11	fix(consistency): preserve checker call compatibility ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:41:46 +02:00
tegwick	e2544b218d	docs(retirement): record empty projection rebuild proof ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:31:41 +02:00
tegwick	059de9358e	feat(consistency): rebuild authoritative intake IDs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:23:43 +02:00
tegwick	03c7924b7f	feat(consistency): bootstrap empty repo projections ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:07:08 +02:00
tegwick	52a7d6bb73	docs(pilot): record registrar projection cutover ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:57:59 +02:00
custodian-sync	6b439ddd06	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:44:54 +02:00
tegwick	697dd49390	feat(consistency): rebuild deterministic projection IDs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:43:55 +02:00
tegwick	cb1b028fd1	feat(identifiers): add reversible projection migration ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 00:27:48 +02:00
tegwick	ce52e9d1e2	docs(retirement): own identifier projection migration ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:59:43 +02:00
custodian-sync	7e82dd4594	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-21: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:59:29 +02:00
tegwick	81861d816b	feat(retirement): route SBOM scans through repo-manager ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:15:34 +02:00
tegwick	b9d9ffed5f	feat(consistency): consume repo-manager conformance ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 22:34:24 +02:00
repo-manager	ec780c05a2	chore(registrar): assign State Hub identifiers	2026-08-21 21:53:39 +02:00
tegwick	31fe49fa84	chore(consistency): refresh work record index	2026-08-21 21:52:31 +02:00
custodian-sync	853a2259bb	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-21: - update .custodian-brief.md for state-hub	2026-08-21 21:52:09 +02:00
tegwick	3f1f03076f	chore(deps): refresh hub-core lock metadata	2026-08-21 21:50:44 +02:00
tegwick	a311ac3d06	docs(evidence): refresh weekly legacy meter review	2026-08-21 21:50:44 +02:00
tegwick	433e104909	fix: route registrar skips through repo-manager	2026-08-21 21:41:15 +02:00
tegwick	30b17adde1	docs: route registrar skips through repo-manager	2026-08-21 21:38:29 +02:00
tegwick	de58a0cf90	feat(STATE-WP-0079): add repo-manager receiving adapters	2026-08-21 17:15:28 +02:00