Commit graph

359 commits

Author SHA1 Message Date
twentyOne2x
023782893e fix(kb): preserve bounded Observatory read grants 2026-07-22 04:16:23 +02:00
twentyOne2x
40d76592f5 Pin GCP preflight to live Hermes interpreter 2026-07-22 03:44:33 +02:00
twentyOne2x
083bd747be Merge final Cloud SQL boundary into source-first V3 integration 2026-07-22 03:21:50 +02:00
twentyOne2x
6e4287987a Pin reviewed Leoclean runtime SQL source 2026-07-22 03:16:58 +02:00
twentyOne2x
0f0f1dd076
Merge pull request #223 from living-ip/codex/fix-postgres-volume-leak-20260722
Stop disposable Postgres fixtures leaking Docker volumes
2026-07-22 03:10:33 +02:00
twentyOne2x
b32764cf13 Stop disposable Postgres volume leaks 2026-07-22 03:02:50 +02:00
87580c219f Fail closed on leoclean runtime SQL 2026-07-21 17:56:06 -07:00
twentyOne2x
0c275b4bbb Merge current main into source-first V3 integration 2026-07-22 02:47:56 +02:00
a8a1e7958b Merge current main into PR 221 2026-07-21 17:04:38 -07:00
699edb935f Merge current main into PR 219 2026-07-21 16:50:43 -07:00
twentyOne2x
a03c6bc2f5 Harden V3 transition replay across timezones 2026-07-22 01:10:14 +02:00
e850f0e6bd Harden Cloud SQL staging runtime boundary 2026-07-21 13:44:43 -07:00
twentyOne2x
74cff4b048 Gate legacy artifact publication to manual main dispatch 2026-07-21 22:14:56 +02:00
832f0c3f47 Support Cloud SQL scoped role provisioning
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 12:58:07 -07:00
twentyOne2x
5b103285ee Harden staging image push authority on current main 2026-07-21 21:44:54 +02:00
twentyOne2x
0b72b3cbce Integrate hardened source-first V3 rebuild foundation 2026-07-21 21:41:30 +02:00
658083e330 Restore leoclean image TLS trust
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 11:53:16 -07:00
a0fabc3072 Add fail-closed leoclean staging installer
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 10:58:36 -07:00
2f6cfeaaa4 Close staging preflight review gaps 2026-07-20 23:43:10 -07:00
16b32193f7 Harden staging preflight receipt publication 2026-07-20 23:30:14 -07:00
7bafcb4314 Reconcile staging preflight inventory 2026-07-20 23:11:08 -07:00
544b2f615d Add GCP no-send staging preflight 2026-07-20 23:10:25 -07:00
ac4bf5f01f Bind staging image push to a verified receipt 2026-07-20 22:52:13 -07:00
twentyOne2x
d2ad4f7c96 Remove destructive Docker cache cleanup 2026-07-21 07:00:13 +02:00
twentyOne2x
c7b4abc347 Retain inspected digest references in shared Docker caches 2026-07-21 05:47:01 +02:00
e42d635523 Bind no-send releases to inspected images 2026-07-20 19:47:59 -07:00
twentyOne2x
ffe170007d Accept exact qemu PID 1 wrappers 2026-07-21 03:17:36 +02:00
d980b25198 Assert packaged image runtime configuration 2026-07-20 18:03:55 -07:00
270bc9563e Bind no-send package to reviewed sources 2026-07-20 18:03:55 -07:00
63b09bbacb Harden leoclean no-send package verification 2026-07-20 18:03:55 -07:00
1e5c67738f Package leoclean no-send GCP staging service 2026-07-20 18:03:55 -07:00
Fawaz
2d88c9765b
Harden leoclean no-send staging runtime (#183)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime

* Isolate GCP leoclean runtime adapters

* Verify current-main leoclean context contracts

* Constrain no-send operational contracts
2026-07-20 19:06:09 -04:00
twentyOne2x
8144d6b554
Preserve Leo subject anchors across long followups (#187)
Some checks failed
CI / lint-and-test (push) Has been cancelled
2026-07-18 01:30:20 +02:00
twentyOne2x
20e2f60b0e
Classify review-only claim proposals correctly (#186)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:14:58 +02:00
twentyOne2x
a6569214a3
Resolve Leo database tools from the active profile (#185)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:02:12 +02:00
twentyOne2x
f475bc0d5d
Keep Leo follow-up retrieval on the active subject (#184)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 00:46:14 +02:00
twentyOne2x
6a4209475b
Skip privileged systemd work when units already match (#181)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-17 23:16:41 +02:00
twentyOne2x
415669c2e4
Keep Leo candidate reasoning grounded and stop automatic chat reinforcement (#180)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Preserve candidate reasoning and disable automatic chat reinforcement

* Retain exact-row guards for combined claim audits
2026-07-17 23:07:57 +02:00
Fawaz
77e1336c0f
Restrict leoclean runtime reads to queried columns (#179)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Restrict leoclean runtime reads to queried columns

* Repair leoclean runtime authority review findings

* Harden leoclean query and CI permission contracts
2026-07-17 06:31:37 -04:00
twentyOne2x
9cd658f3b1 Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 13:00:22 +02:00
twentyOne2x
de9696a6e1 fix: partition drift probe failures 2026-07-16 12:56:30 +02:00
twentyOne2x
0adf943bff Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:51:39 +02:00
twentyOne2x
d3b151feb7 Harden private source reconstruction failures 2026-07-16 12:47:52 +02:00
twentyOne2x
4ecc38cd7f Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 12:46:24 +02:00
twentyOne2x
6b3114e95f fix: harden source drift detector receipts 2026-07-16 12:35:45 +02:00
twentyOne2x
3ad06bd695 Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:33:02 +02:00
twentyOne2x
78e9ff07a5 Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715 2026-07-16 12:32:10 +02:00
twentyOne2x
4c4b3eb82f Replay PostgreSQL role and ACL parity 2026-07-16 12:32:02 +02:00
twentyOne2x
9a9594e41b Harden private source reconstruction output 2026-07-16 12:24:20 +02:00
twentyOne2x
21b2fdfcd1 Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716 2026-07-16 12:13:48 +02:00