|
|
4df77c7c6e
|
Expose bounded container contract failures
|
2026-07-23 13:01:55 -07:00 |
|
|
|
d6d4844421
|
Restore verifier test process umask
|
2026-07-23 12:24:49 -07:00 |
|
|
|
a1a1aea16f
|
Report no-send verifier startup failures
|
2026-07-23 12:06:35 -07:00 |
|
|
|
f0719613b6
|
Harden leoclean first-start readiness
|
2026-07-23 10:41:40 -07:00 |
|
|
|
73d0e30175
|
Handle systemd 252 absent command properties
|
2026-07-23 00:52:00 -07:00 |
|
|
|
77ab46b956
|
Handle systemd 252 EnvironmentFiles readback
|
2026-07-22 23:19:13 -07:00 |
|
|
|
605aa6c36d
|
Preserve IAP request member modes
|
2026-07-22 22:26:45 -07:00 |
|
|
|
963ab34584
|
Harden leoclean runtime authority checks
|
2026-07-22 20:15:53 -07:00 |
|
|
|
b9081a537c
|
Add fail-closed GCP no-send IAP runner
|
2026-07-22 18:24:17 -07:00 |
|
|
|
6d7ea14bfb
|
Bind no-send database proof to container identity
|
2026-07-22 15:24:54 -07:00 |
|
|
|
be002d67b0
|
Normalize empty release context directories
|
2026-07-22 14:06:38 -07:00 |
|
|
|
e03488ba0b
|
Preserve scoped runtime ACLs across prerequisite reruns
|
2026-07-22 12:52:52 -07:00 |
|
twentyOne2x
|
7aabfa4ab8
|
fix: make no-send release publication repeatable
|
2026-07-22 06:07:24 +02:00 |
|
twentyOne2x
|
d36a6d8cc1
|
ci: publish exact no-send candidate through WIF
|
2026-07-22 04:51:57 +02:00 |
|
Fawaz
|
fda8ab1e6d
|
Merge pull request #227 from living-ip/fix/cloudsql-provider-database-residual
CI / lint-and-test (push) Waiting to run
Handle Cloud SQL provider database residuals
|
2026-07-21 19:41:12 -07:00 |
|
twentyOne2x
|
023782893e
|
fix(kb): preserve bounded Observatory read grants
|
2026-07-22 04:16:23 +02:00 |
|
|
|
508e1bdb28
|
Handle Cloud SQL provider database residuals
|
2026-07-21 19:01:34 -07:00 |
|
twentyOne2x
|
40d76592f5
|
Pin GCP preflight to live Hermes interpreter
|
2026-07-22 03:44:33 +02:00 |
|
twentyOne2x
|
083bd747be
|
Merge final Cloud SQL boundary into source-first V3 integration
|
2026-07-22 03:21:50 +02:00 |
|
twentyOne2x
|
6e4287987a
|
Pin reviewed Leoclean runtime SQL source
|
2026-07-22 03:16:58 +02:00 |
|
twentyOne2x
|
0f0f1dd076
|
Merge pull request #223 from living-ip/codex/fix-postgres-volume-leak-20260722
Stop disposable Postgres fixtures leaking Docker volumes
|
2026-07-22 03:10:33 +02:00 |
|
twentyOne2x
|
b32764cf13
|
Stop disposable Postgres volume leaks
|
2026-07-22 03:02:50 +02:00 |
|
|
|
87580c219f
|
Fail closed on leoclean runtime SQL
|
2026-07-21 17:56:06 -07:00 |
|
twentyOne2x
|
0c275b4bbb
|
Merge current main into source-first V3 integration
|
2026-07-22 02:47:56 +02:00 |
|
|
|
a8a1e7958b
|
Merge current main into PR 221
|
2026-07-21 17:04:38 -07:00 |
|
|
|
699edb935f
|
Merge current main into PR 219
|
2026-07-21 16:50:43 -07:00 |
|
twentyOne2x
|
a03c6bc2f5
|
Harden V3 transition replay across timezones
|
2026-07-22 01:10:14 +02:00 |
|
|
|
e850f0e6bd
|
Harden Cloud SQL staging runtime boundary
|
2026-07-21 13:44:43 -07:00 |
|
twentyOne2x
|
74cff4b048
|
Gate legacy artifact publication to manual main dispatch
|
2026-07-21 22:14:56 +02:00 |
|
|
|
832f0c3f47
|
Support Cloud SQL scoped role provisioning
CI / lint-and-test (push) Waiting to run
|
2026-07-21 12:58:07 -07:00 |
|
twentyOne2x
|
5b103285ee
|
Harden staging image push authority on current main
|
2026-07-21 21:44:54 +02:00 |
|
twentyOne2x
|
0b72b3cbce
|
Integrate hardened source-first V3 rebuild foundation
|
2026-07-21 21:41:30 +02:00 |
|
|
|
658083e330
|
Restore leoclean image TLS trust
CI / lint-and-test (push) Waiting to run
|
2026-07-21 11:53:16 -07:00 |
|
|
|
a0fabc3072
|
Add fail-closed leoclean staging installer
CI / lint-and-test (push) Waiting to run
|
2026-07-21 10:58:36 -07:00 |
|
|
|
2f6cfeaaa4
|
Close staging preflight review gaps
|
2026-07-20 23:43:10 -07:00 |
|
|
|
16b32193f7
|
Harden staging preflight receipt publication
|
2026-07-20 23:30:14 -07:00 |
|
|
|
7bafcb4314
|
Reconcile staging preflight inventory
|
2026-07-20 23:11:08 -07:00 |
|
|
|
544b2f615d
|
Add GCP no-send staging preflight
|
2026-07-20 23:10:25 -07:00 |
|
|
|
ac4bf5f01f
|
Bind staging image push to a verified receipt
|
2026-07-20 22:52:13 -07:00 |
|
twentyOne2x
|
d2ad4f7c96
|
Remove destructive Docker cache cleanup
|
2026-07-21 07:00:13 +02:00 |
|
twentyOne2x
|
c7b4abc347
|
Retain inspected digest references in shared Docker caches
|
2026-07-21 05:47:01 +02:00 |
|
|
|
e42d635523
|
Bind no-send releases to inspected images
|
2026-07-20 19:47:59 -07:00 |
|
twentyOne2x
|
ffe170007d
|
Accept exact qemu PID 1 wrappers
|
2026-07-21 03:17:36 +02:00 |
|
|
|
d980b25198
|
Assert packaged image runtime configuration
|
2026-07-20 18:03:55 -07:00 |
|
|
|
270bc9563e
|
Bind no-send package to reviewed sources
|
2026-07-20 18:03:55 -07:00 |
|
|
|
63b09bbacb
|
Harden leoclean no-send package verification
|
2026-07-20 18:03:55 -07:00 |
|
|
|
1e5c67738f
|
Package leoclean no-send GCP staging service
|
2026-07-20 18:03:55 -07:00 |
|
Fawaz
|
2d88c9765b
|
Harden leoclean no-send staging runtime (#183)
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime
* Isolate GCP leoclean runtime adapters
* Verify current-main leoclean context contracts
* Constrain no-send operational contracts
|
2026-07-20 19:06:09 -04:00 |
|
twentyOne2x
|
8144d6b554
|
Preserve Leo subject anchors across long followups (#187)
CI / lint-and-test (push) Has been cancelled
|
2026-07-18 01:30:20 +02:00 |
|
twentyOne2x
|
20e2f60b0e
|
Classify review-only claim proposals correctly (#186)
CI / lint-and-test (push) Waiting to run
|
2026-07-18 01:14:58 +02:00 |
|
