teleo/teleo-infrastructure

Author	SHA1	Message	Date
Fawaz	5ba6c56aba	Merge pull request #233 from living-ip/fix/leoclean-runtime-authority-guard Some checks are pending CI / lint-and-test (push) Waiting to run Details Harden leoclean runtime authority checks	2026-07-22 21:01:43 -07:00
fwazb	963ab34584	Harden leoclean runtime authority checks	2026-07-22 20:15:53 -07:00
Fawaz	ce559253bd	Merge pull request #232 from living-ip/feat/leoclean-iap-installer-runner Some checks are pending CI / lint-and-test (push) Waiting to run Details Add fail-closed GCP no-send IAP runner	2026-07-22 19:17:56 -07:00
fwazb	b9081a537c	Add fail-closed GCP no-send IAP runner	2026-07-22 18:24:17 -07:00
Fawaz	3d35a7fafb	Merge pull request #231 from living-ip/feat/leoclean-container-db-proof Some checks are pending CI / lint-and-test (push) Waiting to run Details Owner security review completed for exact head `6d7ea14bfb`. I reviewed and accept the scoped credential, Secret Manager, container identity, fail-closed database verification, and non-production boundaries. Authorized to merge with a merge commit.	2026-07-22 16:23:21 -07:00
fwazb	6d7ea14bfb	Bind no-send database proof to container identity	2026-07-22 15:24:54 -07:00
Fawaz	3f09bb2b6c	Merge pull request #230 from living-ip/fix/nosend-empty-directory-normalization Some checks are pending CI / lint-and-test (push) Waiting to run Details Normalize empty no-send release directories	2026-07-22 14:36:14 -07:00
fwazb	be002d67b0	Normalize empty release context directories	2026-07-22 14:06:38 -07:00
Fawaz	f04956ce7c	Merge pull request #229 from living-ip/fix/cloudsql-prereq-composability Some checks are pending CI / lint-and-test (push) Waiting to run Details Preserve scoped runtime ACLs across prerequisite reruns	2026-07-22 13:17:17 -07:00
fwazb	e03488ba0b	Preserve scoped runtime ACLs across prerequisite reruns	2026-07-22 12:52:52 -07:00
twentyOne2x	3569f4f2fb	Merge pull request #228 from living-ip/codex/gcp-nosend-wif-publish-20260722 Some checks are pending CI / lint-and-test (push) Waiting to run Details Publish exact Leoclean no-send release through WIF	2026-07-22 06:17:43 +02:00
twentyOne2x	7aabfa4ab8	fix: make no-send release publication repeatable	2026-07-22 06:07:24 +02:00
twentyOne2x	d36a6d8cc1	ci: publish exact no-send candidate through WIF	2026-07-22 04:51:57 +02:00
Fawaz	fda8ab1e6d	Merge pull request #227 from living-ip/fix/cloudsql-provider-database-residual Some checks are pending CI / lint-and-test (push) Waiting to run Details Handle Cloud SQL provider database residuals	2026-07-21 19:41:12 -07:00
twentyOne2x	86c42b5702	Merge pull request #226 from living-ip/codex/observatory-apply-prereq-repair-20260722 Some checks are pending CI / lint-and-test (push) Waiting to run Details fix(kb): preserve bounded Observatory read grants	2026-07-22 04:21:50 +02:00
twentyOne2x	023782893e	fix(kb): preserve bounded Observatory read grants	2026-07-22 04:16:23 +02:00
fwazb	508e1bdb28	Handle Cloud SQL provider database residuals	2026-07-21 19:01:34 -07:00
twentyOne2x	487c2a6599	Merge pull request #225 from living-ip/codex/fix-gcp-hermes-interpreter-pin-20260722 Some checks are pending CI / lint-and-test (push) Waiting to run Details Pin GCP preflight to the live Hermes interpreter	2026-07-22 03:50:21 +02:00
twentyOne2x	40d76592f5	Pin GCP preflight to live Hermes interpreter	2026-07-22 03:44:33 +02:00
twentyOne2x	fab6c17805	Merge pull request #220 from living-ip/codex/source-first-v3-foundation-integration-20260721 Some checks are pending CI / lint-and-test (push) Waiting to run Details Integrate hardened source-first V3 rebuild foundation	2026-07-22 03:31:39 +02:00
twentyOne2x	083bd747be	Merge final Cloud SQL boundary into source-first V3 integration	2026-07-22 03:21:50 +02:00
twentyOne2x	6ff6afadb2	Merge pull request #224 from living-ip/fix/cloudsql-large-object-boundary Some checks are pending CI / lint-and-test (push) Waiting to run Details Pin the reviewed Leoclean runtime SQL source	2026-07-22 03:21:35 +02:00
twentyOne2x	f90ab9b665	Merge current main after Cloud SQL boundary landing	2026-07-22 03:17:47 +02:00
twentyOne2x	6e4287987a	Pin reviewed Leoclean runtime SQL source	2026-07-22 03:16:58 +02:00
twentyOne2x	0f0f1dd076	Merge pull request #223 from living-ip/codex/fix-postgres-volume-leak-20260722 Stop disposable Postgres fixtures leaking Docker volumes	2026-07-22 03:10:33 +02:00
Fawaz	967dcc234e	Merge pull request #221 from living-ip/fix/cloudsql-large-object-boundary Some checks are pending CI / lint-and-test (push) Waiting to run Details Harden Cloud SQL staging runtime boundary	2026-07-21 18:08:59 -07:00
twentyOne2x	b32764cf13	Stop disposable Postgres volume leaks	2026-07-22 03:02:50 +02:00
fwazb	87580c219f	Fail closed on leoclean runtime SQL	2026-07-21 17:56:06 -07:00
twentyOne2x	0c275b4bbb	Merge current main into source-first V3 integration	2026-07-22 02:47:56 +02:00
fwazb	a8a1e7958b	Merge current main into PR 221	2026-07-21 17:04:38 -07:00
Fawaz	9045226e9d	Merge pull request #219 from living-ip/codex/pr216-current-main-restack-20260721 Some checks are pending CI / lint-and-test (push) Waiting to run Details Harden staging image push authority on current main	2026-07-21 17:02:18 -07:00
fwazb	699edb935f	Merge current main into PR 219	2026-07-21 16:50:43 -07:00
Fawaz	61c7511503	Merge pull request #218 from living-ip/codex/gcp-artifact-manual-only-restack-20260721 Some checks are pending CI / lint-and-test (push) Waiting to run Details Gate legacy artifact publication to manual main dispatch	2026-07-21 16:39:47 -07:00
twentyOne2x	a03c6bc2f5	Harden V3 transition replay across timezones	2026-07-22 01:10:14 +02:00
fwazb	e850f0e6bd	Harden Cloud SQL staging runtime boundary	2026-07-21 13:44:43 -07:00
twentyOne2x	74cff4b048	Gate legacy artifact publication to manual main dispatch	2026-07-21 22:14:56 +02:00
fwazb	832f0c3f47	Support Cloud SQL scoped role provisioning Some checks are pending CI / lint-and-test (push) Waiting to run Details	2026-07-21 12:58:07 -07:00
twentyOne2x	5b103285ee	Harden staging image push authority on current main	2026-07-21 21:44:54 +02:00
twentyOne2x	0b72b3cbce	Integrate hardened source-first V3 rebuild foundation	2026-07-21 21:41:30 +02:00
fwazb	658083e330	Restore leoclean image TLS trust Some checks are pending CI / lint-and-test (push) Waiting to run Details	2026-07-21 11:53:16 -07:00
fwazb	a0fabc3072	Add fail-closed leoclean staging installer Some checks are pending CI / lint-and-test (push) Waiting to run Details	2026-07-21 10:58:36 -07:00
Fawaz	70e8f1fe35	Merge pull request #213 from living-ip/reconcile/leoclean-staging-preflight Some checks are pending CI / lint-and-test (push) Waiting to run Details Add bounded GCP leoclean staging preflight	2026-07-21 01:41:48 -07:00
Fawaz	eb5c60873f	Merge pull request #210 from living-ip/feat/leoclean-build-push-receipt Some checks are pending CI / lint-and-test (push) Waiting to run Details Bind staging image push to a verified receipt	2026-07-21 01:36:27 -07:00
Fawaz	66ba3b9cd7	Merge pull request #206 from living-ip/feat/leoclean-image-inspection Some checks are pending CI / lint-and-test (push) Waiting to run Details Bind GCP staging release to an immutable image digest	2026-07-21 00:21:59 -07:00
Fawaz	2abe48b7e9	Merge pull request #209 from living-ip/codex/review-gcp-pr206-cache-isolation-20260721 Retain inspected digest references in shared Docker caches	2026-07-21 00:14:43 -07:00
fwazb	2f6cfeaaa4	Close staging preflight review gaps	2026-07-20 23:43:10 -07:00
fwazb	16b32193f7	Harden staging preflight receipt publication	2026-07-20 23:30:14 -07:00
fwazb	7bafcb4314	Reconcile staging preflight inventory	2026-07-20 23:11:08 -07:00
fwazb	544b2f615d	Add GCP no-send staging preflight	2026-07-20 23:10:25 -07:00
fwazb	ac4bf5f01f	Bind staging image push to a verified receipt	2026-07-20 22:52:13 -07:00

1 2 3 4 5 ...

758 commits