Commit graph

2580 commits

Author SHA1 Message Date
codex
f728073b4d docs: publish reviewed NetKingdom evidence batch 2 2026-10-14 09:46:26 +02:00
codex
2b6901eb9c docs: publish reviewed NetKingdom evidence batch 1 2026-10-14 09:45:31 +02:00
codex
e8bd394c8b docs(reuse): establish reviewed NetKingdom security capabilities
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-14 06:46:30 +02:00
codex
3f6df63a9a Record observed-usage spend settlement relaxation (rein-aharness, decision a93619a9)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 02:06:18 +02:00
codex
e9acd218ce docs: record completed resolver-helper source repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-14 02:01:09 +02:00
codex
c53ebce2b7 security: retain native LDAP group maintenance verification
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
2026-10-14 01:26:39 +02:00
codex
880c224a4b security: record platform group boundary regression and repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-14 00:48:47 +02:00
codex
1bb46638a0 security: retain legacy LDAP retirement verification and open gaps
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-14 00:24:23 +02:00
codex
f5925c6282 security: record guarded Playwright activation and collision verification
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 23:47:30 +02:00
codex
71b99b3ff9 security: link tested Playwright registration owner implementation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 23:21:33 +02:00
codex
90e2b47152 security: record verified realm repair and Playwright recovery return
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 22:51:40 +02:00
codex
f18c7579f0 security: retain scoped MFA diagnostic evidence and remaining owner boundaries
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 22:26:46 +02:00
codex
3a850beb06 security: record verified key recovery and accept Playwright delivery coordination
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 21:58:13 +02:00
codex
8fb66bcbce coordination: attach accepted daily security schedule owner workplan
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 21:17:19 +02:00
codex
1d9814b887 security: record verified SOPS write and custody handoff repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 21:05:55 +02:00
codex
a0a9087790 security: record conditional service Secret caller repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
2026-10-13 20:22:55 +02:00
codex
e2924b2453 Record verified activation of bounded HTTPS upload budget 2026-10-13 20:22:29 +02:00
codex
d058cc0da4 Record shared HTTPS upload budget for close-down review
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 19:59:10 +02:00
codex
bb3e2db07e security: record KeyCape custody caller reconciliation and native config proof
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 19:49:24 +02:00
codex
873c595bbb security: locate legacy submodule objects without weakening coverage
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-13 18:53:08 +02:00
codex
9c18673da1 security: close unauthenticated runner Docker exposure with native proof 2026-10-13 18:50:05 +02:00
codex
c12c087b89 security: prepare and rehearse contained Forgejo HTTP acceptance
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 18:26:47 +02:00
codex
a3b56d689f security: verify forge scanner expansion across 166 repositories
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 17:59:50 +02:00
codex
9af8689327 security: close sync deadline fix and checkpoint scoped forge expansion
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 10s
2026-10-13 16:55:37 +02:00
codex
8f770e1eea security: recover Forgejo scanner custody and prove restart acceptance 2026-10-13 15:07:30 +02:00
codex
e570433060 security: verify Forgejo write paths and isolate lifecycle coverage gaps
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 13:40:26 +02:00
codex
eb93eeedfd security: preserve verified Forgejo scanner activation and reconcile recovery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-13 11:31:06 +02:00
codex
78081dabf2 security: record introduced-history scanner proof and native admission gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 5s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
2026-10-12 18:53:18 +02:00
codex
e5ebbdba5b Close-down checklist: unattended checkpoint publication for assembly-economics
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-12 18:51:14 +02:00
codex
6502bfe4d8 security: establish native Forgejo receive-hook baseline
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-12 18:15:56 +02:00
codex
355b6b9720 security: verify staged-secret enforcement across 22 workstation checkouts
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Successful in 25s
2026-10-12 17:48:43 +02:00
codex
2544b8703e docs(security): record scanner proof and enforcement gaps
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
2026-10-12 16:51:40 +02:00
codex
e2dbe1267f docs(security): record current-profile admin bootstrap repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-12 15:03:59 +02:00
codex
6cdf1d4ad8 docs(security): record rotation output repair and adoption gap
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-12 12:55:41 +02:00
codex
6af985b115 security: record private SOPS recovery and remaining caller gaps
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-12 12:11:24 +02:00
codex
6500726f65 security: assess custody requirements against repaired helper paths
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
2026-10-12 10:56:27 +02:00
codex
0e25826919 security: record bootstrap custody repair and native acceptance gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
2026-10-12 09:42:49 +02:00
codex
1d57add0c3 security: record PDP transport repair and authentication follow-through
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
2026-10-12 08:29:12 +02:00
codex
149b08b543 Review NetKingdom security architecture and repair MFA recovery boundary
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 8s
2026-10-12 07:31:13 +02:00
codex
9e2187df69 Record final Custodian workplan review with automatically reconciled indexes
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
2026-10-12 00:22:20 +02:00
codex
162fd2e42a Repair repeatable hook installation and block remaining Custodian acceptance work
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Successful in 28s
2026-10-12 00:19:33 +02:00
codex
b21495f318 Retain ordered prerequisites in attended reporting and defer the owner token session 2026-10-12 00:11:50 +02:00
codex
30f5072051 Isolate historical rejection fixture from the installed fleet hook
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 6s
Python Tests / pytest (push) Successful in 23s
2026-10-11 23:31:09 +02:00
codex
016047f81e Close evening session: assessment closing note and checklist results
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Has been cancelled
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 23:30:09 +02:00
codex
828c18f8f9 Install generated-commit guard in existing shared hooks without replacing owner hooks 2026-10-11 23:28:36 +02:00
codex
4292a5078a Honor inherited flow dependencies and batch exact rename scope 2026-10-11 23:26:03 +02:00
codex
1e17f1133c Record round-4 founder decision: retire coulombcore and reuse the machine
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Reject generated-only commits / generated-commit-guard (push) Waiting to run
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 23:25:50 +02:00
codex
7ef6ba323e Sync work-record index
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Successful in 22s
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 23:06:25 +02:00
codex
8bc1f39493 Record guided attended-window results (MFA U05-U07 accepted, U08 blocked)
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Reject generated-only commits / generated-commit-guard (push) Waiting to run
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-11 23:04:25 +02:00
codex
5328a6a8b3 Include critical-path owners in flow reporting and record verified Argo transport
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Reject generated-only commits / generated-commit-guard (push) Successful in 7s
Python Tests / pytest (push) Successful in 22s
2026-10-11 22:54:28 +02:00