Commit graph

347 commits

Author SHA1 Message Date
699edb935f Merge current main into PR 219 2026-07-21 16:50:43 -07:00
twentyOne2x
74cff4b048 Gate legacy artifact publication to manual main dispatch 2026-07-21 22:14:56 +02:00
832f0c3f47 Support Cloud SQL scoped role provisioning
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 12:58:07 -07:00
twentyOne2x
5b103285ee Harden staging image push authority on current main 2026-07-21 21:44:54 +02:00
658083e330 Restore leoclean image TLS trust
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 11:53:16 -07:00
a0fabc3072 Add fail-closed leoclean staging installer
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 10:58:36 -07:00
2f6cfeaaa4 Close staging preflight review gaps 2026-07-20 23:43:10 -07:00
16b32193f7 Harden staging preflight receipt publication 2026-07-20 23:30:14 -07:00
7bafcb4314 Reconcile staging preflight inventory 2026-07-20 23:11:08 -07:00
544b2f615d Add GCP no-send staging preflight 2026-07-20 23:10:25 -07:00
ac4bf5f01f Bind staging image push to a verified receipt 2026-07-20 22:52:13 -07:00
twentyOne2x
d2ad4f7c96 Remove destructive Docker cache cleanup 2026-07-21 07:00:13 +02:00
twentyOne2x
c7b4abc347 Retain inspected digest references in shared Docker caches 2026-07-21 05:47:01 +02:00
e42d635523 Bind no-send releases to inspected images 2026-07-20 19:47:59 -07:00
twentyOne2x
ffe170007d Accept exact qemu PID 1 wrappers 2026-07-21 03:17:36 +02:00
d980b25198 Assert packaged image runtime configuration 2026-07-20 18:03:55 -07:00
270bc9563e Bind no-send package to reviewed sources 2026-07-20 18:03:55 -07:00
63b09bbacb Harden leoclean no-send package verification 2026-07-20 18:03:55 -07:00
1e5c67738f Package leoclean no-send GCP staging service 2026-07-20 18:03:55 -07:00
Fawaz
2d88c9765b
Harden leoclean no-send staging runtime (#183)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime

* Isolate GCP leoclean runtime adapters

* Verify current-main leoclean context contracts

* Constrain no-send operational contracts
2026-07-20 19:06:09 -04:00
twentyOne2x
8144d6b554
Preserve Leo subject anchors across long followups (#187)
Some checks failed
CI / lint-and-test (push) Has been cancelled
2026-07-18 01:30:20 +02:00
twentyOne2x
20e2f60b0e
Classify review-only claim proposals correctly (#186)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:14:58 +02:00
twentyOne2x
a6569214a3
Resolve Leo database tools from the active profile (#185)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:02:12 +02:00
twentyOne2x
f475bc0d5d
Keep Leo follow-up retrieval on the active subject (#184)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 00:46:14 +02:00
twentyOne2x
6a4209475b
Skip privileged systemd work when units already match (#181)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-17 23:16:41 +02:00
twentyOne2x
415669c2e4
Keep Leo candidate reasoning grounded and stop automatic chat reinforcement (#180)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Preserve candidate reasoning and disable automatic chat reinforcement

* Retain exact-row guards for combined claim audits
2026-07-17 23:07:57 +02:00
Fawaz
77e1336c0f
Restrict leoclean runtime reads to queried columns (#179)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Restrict leoclean runtime reads to queried columns

* Repair leoclean runtime authority review findings

* Harden leoclean query and CI permission contracts
2026-07-17 06:31:37 -04:00
twentyOne2x
9cd658f3b1 Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 13:00:22 +02:00
twentyOne2x
de9696a6e1 fix: partition drift probe failures 2026-07-16 12:56:30 +02:00
twentyOne2x
0adf943bff Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:51:39 +02:00
twentyOne2x
d3b151feb7 Harden private source reconstruction failures 2026-07-16 12:47:52 +02:00
twentyOne2x
4ecc38cd7f Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 12:46:24 +02:00
twentyOne2x
6b3114e95f fix: harden source drift detector receipts 2026-07-16 12:35:45 +02:00
twentyOne2x
3ad06bd695 Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:33:02 +02:00
twentyOne2x
78e9ff07a5 Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715 2026-07-16 12:32:10 +02:00
twentyOne2x
4c4b3eb82f Replay PostgreSQL role and ACL parity 2026-07-16 12:32:02 +02:00
twentyOne2x
9a9594e41b Harden private source reconstruction output 2026-07-16 12:24:20 +02:00
twentyOne2x
21b2fdfcd1 Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716 2026-07-16 12:13:48 +02:00
twentyOne2x
497a2bc798 Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716
# Conflicts:
#	tests/test_hermes_leoclean_kb_bridge_source.py
2026-07-16 12:11:52 +02:00
twentyOne2x
76ad92c273 Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:10:14 +02:00
twentyOne2x
7a9d8a178b Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 12:10:05 +02:00
twentyOne2x
34e91db86d Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715 2026-07-16 12:10:04 +02:00
twentyOne2x
9957c61f79 Merge remote-tracking branch 'origin/main' into codex/leo-negative-permissions-t3-w2-20260715 2026-07-16 12:08:06 +02:00
twentyOne2x
7679416ef3
Merge pull request #175 from living-ip/codex/leo-m3taversal-name-policy-w2-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Enforce Telegram visible-handle name provenance
2026-07-16 12:06:47 +02:00
twentyOne2x
c8f6481fc7
Merge pull request #174 from living-ip/codex/leo-integrated-learning-loop-w2-20260715
Add isolated Leo integrated-learning lifecycle
2026-07-16 12:06:44 +02:00
twentyOne2x
42c32d5242
Merge pull request #170 from living-ip/codex/leo-observatory-private-staging-followup-w2-20260715
Harden private Observatory staging preflight
2026-07-16 12:06:41 +02:00
twentyOne2x
2712e7fbb5 Harden Leo benchmark semantic invariants 2026-07-16 11:38:51 +02:00
twentyOne2x
3b0e1bc296 Harden Leo DB contract correction path 2026-07-16 10:38:58 +02:00
twentyOne2x
31782d9b38 Accept semantic Leo benchmark paraphrases 2026-07-16 09:20:52 +02:00
twentyOne2x
bc88fcccbd Require fresh calls in Leo receipt probes 2026-07-16 08:59:57 +02:00