Commit graph

741 commits

Author SHA1 Message Date
twentyOne2x
487c2a6599
Merge pull request #225 from living-ip/codex/fix-gcp-hermes-interpreter-pin-20260722
Some checks are pending
CI / lint-and-test (push) Waiting to run
Pin GCP preflight to the live Hermes interpreter
2026-07-22 03:50:21 +02:00
twentyOne2x
40d76592f5 Pin GCP preflight to live Hermes interpreter 2026-07-22 03:44:33 +02:00
twentyOne2x
fab6c17805
Merge pull request #220 from living-ip/codex/source-first-v3-foundation-integration-20260721
Some checks are pending
CI / lint-and-test (push) Waiting to run
Integrate hardened source-first V3 rebuild foundation
2026-07-22 03:31:39 +02:00
twentyOne2x
083bd747be Merge final Cloud SQL boundary into source-first V3 integration 2026-07-22 03:21:50 +02:00
twentyOne2x
6ff6afadb2
Merge pull request #224 from living-ip/fix/cloudsql-large-object-boundary
Some checks are pending
CI / lint-and-test (push) Waiting to run
Pin the reviewed Leoclean runtime SQL source
2026-07-22 03:21:35 +02:00
twentyOne2x
f90ab9b665 Merge current main after Cloud SQL boundary landing 2026-07-22 03:17:47 +02:00
twentyOne2x
6e4287987a Pin reviewed Leoclean runtime SQL source 2026-07-22 03:16:58 +02:00
twentyOne2x
0f0f1dd076
Merge pull request #223 from living-ip/codex/fix-postgres-volume-leak-20260722
Stop disposable Postgres fixtures leaking Docker volumes
2026-07-22 03:10:33 +02:00
Fawaz
967dcc234e
Merge pull request #221 from living-ip/fix/cloudsql-large-object-boundary
Some checks are pending
CI / lint-and-test (push) Waiting to run
Harden Cloud SQL staging runtime boundary
2026-07-21 18:08:59 -07:00
twentyOne2x
b32764cf13 Stop disposable Postgres volume leaks 2026-07-22 03:02:50 +02:00
87580c219f Fail closed on leoclean runtime SQL 2026-07-21 17:56:06 -07:00
twentyOne2x
0c275b4bbb Merge current main into source-first V3 integration 2026-07-22 02:47:56 +02:00
a8a1e7958b Merge current main into PR 221 2026-07-21 17:04:38 -07:00
Fawaz
9045226e9d
Merge pull request #219 from living-ip/codex/pr216-current-main-restack-20260721
Some checks are pending
CI / lint-and-test (push) Waiting to run
Harden staging image push authority on current main
2026-07-21 17:02:18 -07:00
699edb935f Merge current main into PR 219 2026-07-21 16:50:43 -07:00
Fawaz
61c7511503
Merge pull request #218 from living-ip/codex/gcp-artifact-manual-only-restack-20260721
Some checks are pending
CI / lint-and-test (push) Waiting to run
Gate legacy artifact publication to manual main dispatch
2026-07-21 16:39:47 -07:00
twentyOne2x
a03c6bc2f5 Harden V3 transition replay across timezones 2026-07-22 01:10:14 +02:00
e850f0e6bd Harden Cloud SQL staging runtime boundary 2026-07-21 13:44:43 -07:00
twentyOne2x
74cff4b048 Gate legacy artifact publication to manual main dispatch 2026-07-21 22:14:56 +02:00
832f0c3f47 Support Cloud SQL scoped role provisioning
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 12:58:07 -07:00
twentyOne2x
5b103285ee Harden staging image push authority on current main 2026-07-21 21:44:54 +02:00
twentyOne2x
0b72b3cbce Integrate hardened source-first V3 rebuild foundation 2026-07-21 21:41:30 +02:00
658083e330 Restore leoclean image TLS trust
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 11:53:16 -07:00
a0fabc3072 Add fail-closed leoclean staging installer
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 10:58:36 -07:00
Fawaz
70e8f1fe35
Merge pull request #213 from living-ip/reconcile/leoclean-staging-preflight
Some checks are pending
CI / lint-and-test (push) Waiting to run
Add bounded GCP leoclean staging preflight
2026-07-21 01:41:48 -07:00
Fawaz
eb5c60873f
Merge pull request #210 from living-ip/feat/leoclean-build-push-receipt
Some checks are pending
CI / lint-and-test (push) Waiting to run
Bind staging image push to a verified receipt
2026-07-21 01:36:27 -07:00
Fawaz
66ba3b9cd7
Merge pull request #206 from living-ip/feat/leoclean-image-inspection
Some checks are pending
CI / lint-and-test (push) Waiting to run
Bind GCP staging release to an immutable image digest
2026-07-21 00:21:59 -07:00
Fawaz
2abe48b7e9
Merge pull request #209 from living-ip/codex/review-gcp-pr206-cache-isolation-20260721
Retain inspected digest references in shared Docker caches
2026-07-21 00:14:43 -07:00
2f6cfeaaa4 Close staging preflight review gaps 2026-07-20 23:43:10 -07:00
16b32193f7 Harden staging preflight receipt publication 2026-07-20 23:30:14 -07:00
7bafcb4314 Reconcile staging preflight inventory 2026-07-20 23:11:08 -07:00
544b2f615d Add GCP no-send staging preflight 2026-07-20 23:10:25 -07:00
ac4bf5f01f Bind staging image push to a verified receipt 2026-07-20 22:52:13 -07:00
twentyOne2x
d2ad4f7c96 Remove destructive Docker cache cleanup 2026-07-21 07:00:13 +02:00
twentyOne2x
c7b4abc347 Retain inspected digest references in shared Docker caches 2026-07-21 05:47:01 +02:00
e42d635523 Bind no-send releases to inspected images 2026-07-20 19:47:59 -07:00
Fawaz
383996a43b
Merge pull request #202 from living-ip/codex/leoclean-qemu-pid1-current-base-20260721
Some checks are pending
CI / lint-and-test (push) Waiting to run
Accept exact qemu PID 1 wrappers
2026-07-20 19:16:44 -07:00
Fawaz
94a8160cee
Merge pull request #182 from living-ip/feat/leoclean-nosend-gcp-service
Some checks are pending
CI / lint-and-test (push) Waiting to run
Package leoclean no-send GCP staging service
2026-07-20 19:14:28 -07:00
twentyOne2x
ffe170007d Accept exact qemu PID 1 wrappers 2026-07-21 03:17:36 +02:00
3e59845454 Record PR 182 rebuild state 2026-07-20 18:05:26 -07:00
d980b25198 Assert packaged image runtime configuration 2026-07-20 18:03:55 -07:00
270bc9563e Bind no-send package to reviewed sources 2026-07-20 18:03:55 -07:00
63b09bbacb Harden leoclean no-send package verification 2026-07-20 18:03:55 -07:00
1e5c67738f Package leoclean no-send GCP staging service 2026-07-20 18:03:55 -07:00
Fawaz
2d88c9765b
Harden leoclean no-send staging runtime (#183)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime

* Isolate GCP leoclean runtime adapters

* Verify current-main leoclean context contracts

* Constrain no-send operational contracts
2026-07-20 19:06:09 -04:00
twentyOne2x
8144d6b554
Preserve Leo subject anchors across long followups (#187)
Some checks failed
CI / lint-and-test (push) Has been cancelled
2026-07-18 01:30:20 +02:00
twentyOne2x
20e2f60b0e
Classify review-only claim proposals correctly (#186)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:14:58 +02:00
twentyOne2x
a6569214a3
Resolve Leo database tools from the active profile (#185)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:02:12 +02:00
twentyOne2x
f475bc0d5d
Keep Leo follow-up retrieval on the active subject (#184)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 00:46:14 +02:00
twentyOne2x
6a4209475b
Skip privileged systemd work when units already match (#181)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-17 23:16:41 +02:00