Commit graph

722 commits

Author SHA1 Message Date
twentyOne2x
b32764cf13 Stop disposable Postgres volume leaks 2026-07-22 03:02:50 +02:00
twentyOne2x
a03c6bc2f5 Harden V3 transition replay across timezones 2026-07-22 01:10:14 +02:00
twentyOne2x
0b72b3cbce Integrate hardened source-first V3 rebuild foundation 2026-07-21 21:41:30 +02:00
658083e330 Restore leoclean image TLS trust
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 11:53:16 -07:00
a0fabc3072 Add fail-closed leoclean staging installer
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-21 10:58:36 -07:00
Fawaz
70e8f1fe35
Merge pull request #213 from living-ip/reconcile/leoclean-staging-preflight
Some checks are pending
CI / lint-and-test (push) Waiting to run
Add bounded GCP leoclean staging preflight
2026-07-21 01:41:48 -07:00
Fawaz
eb5c60873f
Merge pull request #210 from living-ip/feat/leoclean-build-push-receipt
Some checks are pending
CI / lint-and-test (push) Waiting to run
Bind staging image push to a verified receipt
2026-07-21 01:36:27 -07:00
Fawaz
66ba3b9cd7
Merge pull request #206 from living-ip/feat/leoclean-image-inspection
Some checks are pending
CI / lint-and-test (push) Waiting to run
Bind GCP staging release to an immutable image digest
2026-07-21 00:21:59 -07:00
Fawaz
2abe48b7e9
Merge pull request #209 from living-ip/codex/review-gcp-pr206-cache-isolation-20260721
Retain inspected digest references in shared Docker caches
2026-07-21 00:14:43 -07:00
2f6cfeaaa4 Close staging preflight review gaps 2026-07-20 23:43:10 -07:00
16b32193f7 Harden staging preflight receipt publication 2026-07-20 23:30:14 -07:00
7bafcb4314 Reconcile staging preflight inventory 2026-07-20 23:11:08 -07:00
544b2f615d Add GCP no-send staging preflight 2026-07-20 23:10:25 -07:00
ac4bf5f01f Bind staging image push to a verified receipt 2026-07-20 22:52:13 -07:00
twentyOne2x
d2ad4f7c96 Remove destructive Docker cache cleanup 2026-07-21 07:00:13 +02:00
twentyOne2x
c7b4abc347 Retain inspected digest references in shared Docker caches 2026-07-21 05:47:01 +02:00
e42d635523 Bind no-send releases to inspected images 2026-07-20 19:47:59 -07:00
Fawaz
383996a43b
Merge pull request #202 from living-ip/codex/leoclean-qemu-pid1-current-base-20260721
Some checks are pending
CI / lint-and-test (push) Waiting to run
Accept exact qemu PID 1 wrappers
2026-07-20 19:16:44 -07:00
Fawaz
94a8160cee
Merge pull request #182 from living-ip/feat/leoclean-nosend-gcp-service
Some checks are pending
CI / lint-and-test (push) Waiting to run
Package leoclean no-send GCP staging service
2026-07-20 19:14:28 -07:00
twentyOne2x
ffe170007d Accept exact qemu PID 1 wrappers 2026-07-21 03:17:36 +02:00
3e59845454 Record PR 182 rebuild state 2026-07-20 18:05:26 -07:00
d980b25198 Assert packaged image runtime configuration 2026-07-20 18:03:55 -07:00
270bc9563e Bind no-send package to reviewed sources 2026-07-20 18:03:55 -07:00
63b09bbacb Harden leoclean no-send package verification 2026-07-20 18:03:55 -07:00
1e5c67738f Package leoclean no-send GCP staging service 2026-07-20 18:03:55 -07:00
Fawaz
2d88c9765b
Harden leoclean no-send staging runtime (#183)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime

* Isolate GCP leoclean runtime adapters

* Verify current-main leoclean context contracts

* Constrain no-send operational contracts
2026-07-20 19:06:09 -04:00
twentyOne2x
8144d6b554
Preserve Leo subject anchors across long followups (#187)
Some checks failed
CI / lint-and-test (push) Has been cancelled
2026-07-18 01:30:20 +02:00
twentyOne2x
20e2f60b0e
Classify review-only claim proposals correctly (#186)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:14:58 +02:00
twentyOne2x
a6569214a3
Resolve Leo database tools from the active profile (#185)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 01:02:12 +02:00
twentyOne2x
f475bc0d5d
Keep Leo follow-up retrieval on the active subject (#184)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-18 00:46:14 +02:00
twentyOne2x
6a4209475b
Skip privileged systemd work when units already match (#181)
Some checks are pending
CI / lint-and-test (push) Waiting to run
2026-07-17 23:16:41 +02:00
twentyOne2x
415669c2e4
Keep Leo candidate reasoning grounded and stop automatic chat reinforcement (#180)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Preserve candidate reasoning and disable automatic chat reinforcement

* Retain exact-row guards for combined claim audits
2026-07-17 23:07:57 +02:00
Fawaz
77e1336c0f
Restrict leoclean runtime reads to queried columns (#179)
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Restrict leoclean runtime reads to queried columns

* Repair leoclean runtime authority review findings

* Harden leoclean query and CI permission contracts
2026-07-17 06:31:37 -04:00
twentyOne2x
f1f58ef0b2
Merge pull request #176 from living-ip/codex/leo-vps-gcp-drift-w2-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Add fail-closed VPS/GCP source drift detector
2026-07-16 13:04:14 +02:00
twentyOne2x
9cd658f3b1 Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 13:00:22 +02:00
twentyOne2x
de9696a6e1 fix: partition drift probe failures 2026-07-16 12:56:30 +02:00
twentyOne2x
0bce56bbda
Merge pull request #177 from living-ip/codex/leo-source-reconstruction-followup-w2-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Support private local source reconstruction
2026-07-16 12:55:23 +02:00
twentyOne2x
0adf943bff Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:51:39 +02:00
twentyOne2x
d3b151feb7 Harden private source reconstruction failures 2026-07-16 12:47:52 +02:00
twentyOne2x
4ecc38cd7f Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715 2026-07-16 12:46:24 +02:00
twentyOne2x
15ceffccd3
Merge pull request #173 from living-ip/codex/leo-gcp-data-parity-acl-preflight-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Preserve role ACLs in canonical parity preflight
2026-07-16 12:45:52 +02:00
twentyOne2x
6b3114e95f fix: harden source drift detector receipts 2026-07-16 12:35:45 +02:00
twentyOne2x
3ad06bd695 Merge remote-tracking branch 'origin/main' into codex/leo-source-reconstruction-followup-w2-20260715 2026-07-16 12:33:02 +02:00
twentyOne2x
78e9ff07a5 Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715 2026-07-16 12:32:10 +02:00
twentyOne2x
4c4b3eb82f Replay PostgreSQL role and ACL parity 2026-07-16 12:32:02 +02:00
twentyOne2x
9a9594e41b Harden private source reconstruction output 2026-07-16 12:24:20 +02:00
twentyOne2x
2ed72ba172
Merge pull request #162 from living-ip/codex/leo-gcp-runtime-security-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Harden GCP Leo runtime least-privilege proof
2026-07-16 12:17:52 +02:00
twentyOne2x
21b2fdfcd1 Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716 2026-07-16 12:13:48 +02:00
twentyOne2x
13c4471d72
Merge pull request #171 from living-ip/codex/leo-negative-permissions-t3-w2-20260715
Some checks are pending
CI / lint-and-test (push) Waiting to run
Prove Leo read role fails closed on mutations
2026-07-16 12:12:26 +02:00
twentyOne2x
497a2bc798 Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716
# Conflicts:
#	tests/test_hermes_leoclean_kb_bridge_source.py
2026-07-16 12:11:52 +02:00