55 commits

Author	SHA1	Message	Date
twentyOne2x	d36a6d8cc1	ci: publish exact no-send candidate through WIF	2026-07-22 04:51:57 +02:00
twentyOne2x	0c275b4bbb	Merge current main into source-first V3 integration	2026-07-22 02:47:56 +02:00
twentyOne2x	74cff4b048	Gate legacy artifact publication to manual main dispatch	2026-07-21 22:14:56 +02:00
twentyOne2x	0b72b3cbce	Integrate hardened source-first V3 rebuild foundation	2026-07-21 21:41:30 +02:00
fwazb	544b2f615d	Add GCP no-send staging preflight	2026-07-20 23:10:25 -07:00
fwazb	63b09bbacb	Harden leoclean no-send package verification	2026-07-20 18:03:55 -07:00
fwazb	1e5c67738f	Package leoclean no-send GCP staging service	2026-07-20 18:03:55 -07:00
Fawaz	2d88c9765b	Harden leoclean no-send staging runtime (#183) ... * Harden leoclean no-send staging runtime * Isolate GCP leoclean runtime adapters * Verify current-main leoclean context contracts * Constrain no-send operational contracts	2026-07-20 19:06:09 -04:00
Fawaz	77e1336c0f	Restrict leoclean runtime reads to queried columns (#179) ... * Restrict leoclean runtime reads to queried columns * Repair leoclean runtime authority review findings * Harden leoclean query and CI permission contracts	2026-07-17 06:31:37 -04:00
twentyOne2x	497a2bc798	Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716 ... # Conflicts: # tests/test_hermes_leoclean_kb_bridge_source.py	2026-07-16 12:11:52 +02:00
twentyOne2x	1a3c7fa9f4	Harden private Observatory staging preflight	2026-07-15 22:39:31 +02:00
twentyOne2x	56ad1c41dc	Merge pull request #165 from living-ip/codex/leo-observatory-private-staging-t3-w2-20260715 ... Restore Observatory staging federation route	2026-07-15 21:22:51 +02:00
twentyOne2x	b7197d6719	Restore Observatory staging federation route	2026-07-15 21:19:59 +02:00
twentyOne2x	9cd4a830cc	Restore read-only GCP IAP status route	2026-07-15 21:19:59 +02:00
Codex Integration	822438bd2f	Merge main and repair GCP runtime integration	2026-07-15 12:51:17 +02:00
twentyOne2x	1a3305ac5d	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-20260715 ... # Conflicts: # .agents/skills/teleo-gcp-parity-ops/SKILL.md	2026-07-15 10:26:26 +02:00
twentyOne2x	1a043d36a1	Harden GCP parity proof against forged lifecycle claims	2026-07-15 10:20:27 +02:00
twentyOne2x	36fe0d3cc2	Harden Observatory private staging deploy gate (#163) ... Merge the T2 readiness and least-privilege staging gate. This does not deploy Cloud Run, mutate Cloud SQL, or change production routing.	2026-07-15 09:55:49 +02:00
twentyOne2x	f79c779f49	ci: cover GCP runtime security surfaces	2026-07-15 07:21:23 +02:00
twentyOne2x	d299f1cdf5	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-runtime-security-20260715	2026-07-15 04:40:36 +02:00
twentyOne2x	b7bdcea46a	fix: enforce scoped GCP Leo runtime credentials	2026-07-15 04:40:26 +02:00
twentyOne2x	37c0ed091d	feat(ops): bind snapshots to private GCP parity lifecycle	2026-07-15 04:11:29 +02:00
twentyOne2x	53c8de0a19	Make Observatory staging deploy rerunnable (#155)	2026-07-15 03:51:54 +02:00
twentyOne2x	92da54d804	Add authenticated GCP Observatory read adapter (#154)	2026-07-15 03:43:05 +02:00
twentyOne2x	9207e1b100	feat: prove database-first Leo on private GCP copy	2026-07-14 12:32:26 +02:00
twentyOne2x	56a99743fc	Record live Leo database reasoning proof	2026-07-14 10:12:16 +02:00
twentyOne2x	9d4baafc69	Prove Leo database tool attribution	2026-07-14 10:01:47 +02:00
twentyOne2x	281b57ef53	Harden Leo DB retrieval and behavior attribution	2026-07-14 09:31:49 +02:00
twentyOne2x	c6c8a5eb31	Enforce m3taversal identity and schema truth	2026-07-13 08:55:46 +02:00
twentyOne2x	cb49ce0e6a	Make GCP replay bootstrap recoverable	2026-07-13 05:24:25 +02:00
twentyOne2x	ff5fb56a36	Harden GCP replay and durable IAP bootstrap	2026-07-13 04:58:16 +02:00
twentyOne2x	eb7abc045d	Retain sanitized GCP operator failure receipts	2026-07-12 05:25:21 +02:00
twentyOne2x	c97952b88e	Fix GCP operator runner path initialization	2026-07-12 05:21:42 +02:00
twentyOne2x	b1ff5a4629	Add passwordless GCP operator and full Leo benchmark	2026-07-12 05:18:14 +02:00
twentyOne2x	6f0dc0ffb0	Harden GCP clone-bound Cory replay	2026-07-12 02:04:58 +02:00
twentyOne2x	f748ad60bf	Prove exact canonical Postgres restore parity	2026-07-11 20:05:56 +02:00
twentyOne2x	b9acc4855c	Make GCP artifact publish idempotent (#57)	2026-07-07 14:40:23 +02:00
twentyOne2x	464d1b3fd9	Add GCP infra execute canary runner (#56)	2026-07-07 14:34:11 +02:00
twentyOne2x	8a935b4625	Add portable restore canary capsule (#55)	2026-07-07 14:22:03 +02:00
twentyOne2x	fc451ec94f	Harden GCP readiness checker commands (#54)	2026-07-07 14:10:50 +02:00
twentyOne2x	50a744656f	Use dedicated GCP readiness service account (#53)	2026-07-07 13:58:37 +02:00
twentyOne2x	dba08ad63f	Add GCP service communication contract (#52)	2026-07-07 13:51:24 +02:00
twentyOne2x	c8bb649f95	Add GCP runtime baseline apply runner ... Adds a dry-run-by-default GCP runtime baseline runner, readiness contract coverage, docs, and tests for the resources required by GCP readiness.	2026-07-07 13:38:42 +02:00
twentyOne2x	c9a2573e86	Harden GCP artifact and readiness receipts ... Retains immutable Artifact Registry image digests and makes GCP readiness workflows fail after uploading evidence when readiness checks fail.	2026-07-07 13:24:14 +02:00
twentyOne2x	38ca357f81	Add Cloud SQL restore readback verifier (#49)	2026-07-07 13:16:24 +02:00
twentyOne2x	607baefc52	Add idempotent GCP IAM apply runner	2026-07-07 13:05:08 +02:00
twentyOne2x	8f96b44539	Add GCP IAM split plan	2026-07-07 12:54:53 +02:00
twentyOne2x	04e586c23e	Retain GCP readiness workflow artifacts	2026-07-07 12:47:29 +02:00
twentyOne2x	0c9dde3f36	Add GitHub WIF GCP readiness probe (#45)	2026-07-07 12:41:09 +02:00
twentyOne2x	6dd7f9fe8c	Add GCP Cloud SQL restore drill (#44)	2026-07-07 12:34:21 +02:00