65 commits

Author	SHA1	Message	Date
twentyOne2x	de9696a6e1	fix: partition drift probe failures	2026-07-16 12:56:30 +02:00
twentyOne2x	4ecc38cd7f	Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715	2026-07-16 12:46:24 +02:00
twentyOne2x	6b3114e95f	fix: harden source drift detector receipts	2026-07-16 12:35:45 +02:00
twentyOne2x	78e9ff07a5	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715	2026-07-16 12:32:10 +02:00
twentyOne2x	4c4b3eb82f	Replay PostgreSQL role and ACL parity	2026-07-16 12:32:02 +02:00
twentyOne2x	21b2fdfcd1	Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716	2026-07-16 12:13:48 +02:00
twentyOne2x	497a2bc798	Merge remote-tracking branch 'origin/main' into codex/pr162-integration-20260716 ... # Conflicts: # tests/test_hermes_leoclean_kb_bridge_source.py	2026-07-16 12:11:52 +02:00
twentyOne2x	7a9d8a178b	Merge remote-tracking branch 'origin/main' into codex/leo-vps-gcp-drift-w2-20260715	2026-07-16 12:10:05 +02:00
twentyOne2x	34e91db86d	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-acl-preflight-20260715	2026-07-16 12:10:04 +02:00
twentyOne2x	9957c61f79	Merge remote-tracking branch 'origin/main' into codex/leo-negative-permissions-t3-w2-20260715	2026-07-16 12:08:06 +02:00
twentyOne2x	e53948781d	Harden private Observatory runtime identity	2026-07-15 23:05:24 +02:00
twentyOne2x	5646bd5972	feat: add fail-closed VPS GCP source drift detector	2026-07-15 22:54:50 +02:00
twentyOne2x	de7c139132	Preserve role ACLs in canonical parity preflight	2026-07-15 22:45:39 +02:00
twentyOne2x	0296176355	Fail closed on cross-provider WIF mappings	2026-07-15 22:45:24 +02:00
twentyOne2x	9512dcba77	Prove Leo read role fails closed on mutations	2026-07-15 22:40:36 +02:00
twentyOne2x	1a3c7fa9f4	Harden private Observatory staging preflight	2026-07-15 22:39:31 +02:00
Codex Integration	822438bd2f	Merge main and repair GCP runtime integration	2026-07-15 12:51:17 +02:00
twentyOne2x	1c6b7b182e	Pin lifecycle receipts to the reviewed parity manifest	2026-07-15 10:59:43 +02:00
twentyOne2x	52fc0a88fe	Normalize database authorization parity and validate hashes	2026-07-15 10:49:55 +02:00
twentyOne2x	1a3305ac5d	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-data-parity-20260715 ... # Conflicts: # .agents/skills/teleo-gcp-parity-ops/SKILL.md	2026-07-15 10:26:26 +02:00
twentyOne2x	1a043d36a1	Harden GCP parity proof against forged lifecycle claims	2026-07-15 10:20:27 +02:00
twentyOne2x	36fe0d3cc2	Harden Observatory private staging deploy gate (#163) ... Merge the T2 readiness and least-privilege staging gate. This does not deploy Cloud Run, mutate Cloud SQL, or change production routing.	2026-07-15 09:55:49 +02:00
twentyOne2x	7b16c6d3cc	fix: prove least-privilege GCP Leo runtime context	2026-07-15 07:16:40 +02:00
twentyOne2x	d299f1cdf5	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-runtime-security-20260715	2026-07-15 04:40:36 +02:00
twentyOne2x	b7bdcea46a	fix: enforce scoped GCP Leo runtime credentials	2026-07-15 04:40:26 +02:00
twentyOne2x	626bac493e	Merge pull request #151 from living-ip/codex/leo-deterministic-db-rebuild-20260715 ... Rebuild exact revise-strategy database transitions	2026-07-15 04:17:35 +02:00
twentyOne2x	37c0ed091d	feat(ops): bind snapshots to private GCP parity lifecycle	2026-07-15 04:11:29 +02:00
twentyOne2x	40344c91d7	enforce revise strategy approval timestamp provenance	2026-07-15 04:00:53 +02:00
twentyOne2x	92da54d804	Add authenticated GCP Observatory read adapter (#154)	2026-07-15 03:43:05 +02:00
twentyOne2x	a6947a3f8b	replay exact revise strategy database transitions	2026-07-15 03:20:02 +02:00
twentyOne2x	68625b8afa	Merge remote-tracking branch 'origin/main' into codex/leo-gcp-runtime-security-20260715	2026-07-15 02:18:01 +02:00
twentyOne2x	1a6b7d51a4	Add deterministic genesis plus ledger rebuild	2026-07-15 00:33:29 +02:00
fwazb	ce90a79aac	fix: scope GCP Leo database runtime	2026-07-14 12:57:31 -07:00
twentyOne2x	9207e1b100	feat: prove database-first Leo on private GCP copy	2026-07-14 12:32:26 +02:00
twentyOne2x	ed6b4b8b69	Audit source-derived KB rebuild coverage	2026-07-13 10:58:53 +02:00
twentyOne2x	466bf34347	Add one-command canonical KB rebuild with parity	2026-07-13 10:50:11 +02:00
twentyOne2x	200749ca5b	Prevent GCP proof harness heredoc deadlocks	2026-07-13 07:13:18 +02:00
twentyOne2x	cb49ce0e6a	Make GCP replay bootstrap recoverable	2026-07-13 05:24:25 +02:00
twentyOne2x	ff5fb56a36	Harden GCP replay and durable IAP bootstrap	2026-07-13 04:58:16 +02:00
twentyOne2x	b1ff5a4629	Add passwordless GCP operator and full Leo benchmark	2026-07-12 05:18:14 +02:00
twentyOne2x	6f0dc0ffb0	Harden GCP clone-bound Cory replay	2026-07-12 02:04:58 +02:00
twentyOne2x	f748ad60bf	Prove exact canonical Postgres restore parity	2026-07-11 20:05:56 +02:00
twentyOne2x	464d1b3fd9	Add GCP infra execute canary runner (#56)	2026-07-07 14:34:11 +02:00
twentyOne2x	8a935b4625	Add portable restore canary capsule (#55)	2026-07-07 14:22:03 +02:00
twentyOne2x	fc451ec94f	Harden GCP readiness checker commands (#54)	2026-07-07 14:10:50 +02:00
twentyOne2x	dba08ad63f	Add GCP service communication contract (#52)	2026-07-07 13:51:24 +02:00
twentyOne2x	c8bb649f95	Add GCP runtime baseline apply runner ... Adds a dry-run-by-default GCP runtime baseline runner, readiness contract coverage, docs, and tests for the resources required by GCP readiness.	2026-07-07 13:38:42 +02:00
twentyOne2x	c9a2573e86	Harden GCP artifact and readiness receipts ... Retains immutable Artifact Registry image digests and makes GCP readiness workflows fail after uploading evidence when readiness checks fail.	2026-07-07 13:24:14 +02:00
twentyOne2x	38ca357f81	Add Cloud SQL restore readback verifier (#49)	2026-07-07 13:16:24 +02:00
twentyOne2x	607baefc52	Add idempotent GCP IAM apply runner	2026-07-07 13:05:08 +02:00