← Branches
design-console-release-defences
Commits
-
f66b2f11b
Merge remote-tracking branch 'origin/main' into design-console-release-defences
claude agent, operated by paul@keymail.dev
-
c6dfb4a74
release: merge fixes — D1 refusals survive authority loss; one authority selection per sibling
claude agent, operated by paul@keymail.dev
-
0d8bad7da
Merge origin/main into design-console-release-defences
claude agent, operated by paul@keymail.dev
-
e7eba1382
main: restore the economics usage line's alignment
claude agent, operated by paul@keymail.dev
-
ba4bf1cf0
release: test that bind asks the healthy history about the staged bytes, not the manifest
claude agent, operated by paul@keymail.dev
-
96e05e4ec
docs: carlos proof in the CLI page (H6, needs Paul's copy review)
claude agent, operated by paul@keymail.dev
-
303cc1391
host: the mint asker re-hashes a staged file that changed, and caches proofs per proof object (H5)
claude agent, operated by paul@keymail.dev
-
58dd5ba19
host: the root pass records healthy live builds before release.Pass, mints after (H4)
claude agent, operated by paul@keymail.dev
-
e97a50688
release: a not-proven refusal stands only while the box still requires a proof (H3)
claude agent, operated by paul@keymail.dev
-
7e032fede
release: a dangling proof policy symlink is an error, not D3 off (H2)
claude agent, operated by paul@keymail.dev
-
1358ba34d
release: a proof policy with any data after the object is an error (H1)
claude agent, operated by paul@keymail.dev
-
7b2cad1b6
carlos proof: keygen on the proving box, get and put to carry a proof
claude agent, operated by paul@keymail.dev
-
1b6339e39
status: show a host waiting for a dev proof in status --live
claude agent, operated by paul@keymail.dev
-
51f641a73
host: an unstaged route waiting for its proof keeps the 30 s miss cadence
claude agent, operated by paul@keymail.dev
-
13400c917
host: the agent shares one proof gate, keeps a waiting route in the fast loop, and asks root to mint
claude agent, operated by paul@keymail.dev
-
d70e93c96
host: the root pass mints dev proofs and records healthy builds (console defences D3)
claude agent, operated by paul@keymail.dev
-
a45afef89
host: establish a unit's running build from its bytes, and record settled builds as healthy
claude agent, operated by paul@keymail.dev
-
8c0d72013
release: adoptHost requires a dev proof for listed apps, checked before staging and on the staged bytes
claude agent, operated by paul@keymail.dev
-
15779f7e0
release: the healthy history a requiring box adopts from without a proof
claude agent, operated by paul@keymail.dev
-
dcafa9da6
release: the proof policy file, closed on any parse error
claude agent, operated by paul@keymail.dev
-
f2427ca66
release: signed dev proofs, their bucket keys and the pending note (console defences D3)
claude agent, operated by paul@keymail.dev
-
a98c66f91
release: D2 box tests from the final-review triage
claude agent, operated by paul@keymail.dev
-
0e3d55846
release: wrong-program guidance asks for a new version shipped with carlos ship --program-change
claude agent, operated by paul@keymail.dev
-
58e1eef53
release: an unreadable manifest defers a wrong-program build, never refuses it
claude agent, operated by paul@keymail.dev
-
f6961961e
ship: a direct re-ship is stamped like its first ship
claude agent, operated by paul@keymail.dev
-
6fb5cfe1a
ship: --program-change is recorded whenever it is given
claude agent, operated by paul@keymail.dev
-
db54838ef
release: a wrong-program refusal is its own kind, and the live binary always joins the history
claude agent, operated by paul@keymail.dev
-
a8f8578da
release: a box refuses a staged binary its route has never run the program of
claude agent, operated by paul@keymail.dev
-
d9722d0cb
ship: the program rule judges only a new version
claude agent, operated by paul@keymail.dev
-
ca93acf77
ship: both doors refuse a change of program without --program-change
claude agent, operated by paul@keymail.dev
-
b44cab11b
host: systemctl show call fixtures read SubState too
claude agent, operated by paul@keymail.dev
-
e877467a1
console: an approvals-gated promote --retry keeps its retry semantics
claude agent, operated by paul@keymail.dev
-
959f75249
release: a retry's fresh stamp is judged against the guarded pointer
claude agent, operated by paul@keymail.dev
-
595ac83b4
release: an up-to-date pass clears a refusal that no longer blocks
claude agent, operated by paul@keymail.dev
-
279223172
release: refusal records carry the rollback's real outcome
claude agent, operated by paul@keymail.dev
-
ce103d11d
release: a process group shares the bound route's channel
claude agent, operated by paul@keymail.dev
-
44e9fbbeb
host: settle waits out the exec window, retries a failed show, leaves a stopped unit alone
claude agent, operated by paul@keymail.dev
-
ffe4ec72c
release: separate store errors from manifest decode/validate errors in program check
Paul Campbell
-
f1c33a098
release: fail closed on store errors in program check
Paul Campbell
-
fee7f2ccb
release: detect a release's Go program and refuse a change of it at ship (console defences D2)
Paul Campbell
-
8f5ae1d64
status: leak guards for ReleaseRefusals
claude agent, operated by paul@keymail.dev
-
6abd12d52
host: alert on a refused build and show it in status --live
claude agent, operated by paul@keymail.dev
-
b6a26ab54
promote --retry: guard the version at the write, bound the wait
claude agent, operated by paul@keymail.dev
-
a13bd63fe
promote --retry: re-sign a promotion so a box retries a refused build
claude agent, operated by paul@keymail.dev
-
fb6d12fbd
host: named-unit restarts settle and roll back by restart (console defences D1)
claude agent, operated by paul@keymail.dev
-
b4296708a
host: routeReady does not follow redirects
claude agent, operated by paul@keymail.dev
-
2731de70e
host: readiness on a route's effective upstream, socket before addr
claude agent, operated by paul@keymail.dev
-
d2ff49402
host: settle check fixes (review round 1)
claude agent, operated by paul@keymail.dev
-
85472d832
host: settle check for a named unit after try-restart
claude agent, operated by paul@keymail.dev
-
5893dffc5
release: roll back a unit's whole process group and refuse the build when it does not come up
claude agent, operated by paul@keymail.dev
-
828fe89fa
release: refusal test pins the gate before ensureStaged
claude agent, operated by paul@keymail.dev
-
aeed9c492
release: adoptHost skips a refused promotion before staging or relaying
claude agent, operated by paul@keymail.dev
-
cc42b5223
release: refusal records for builds a box rolled back (console defences D1)
claude agent, operated by paul@keymail.dev
-
5594bde0c
plan: console release defences, plan 3 of 4 (D3); fixes to plans 1 and 4
claude agent, operated by paul@keymail.dev
-
97f67b4e0
plans 1-2: README notes go through copy review
claude agent, operated by paul@keymail.dev
-
136ce4405
plan: console release defences, plan 4 of 4 (D4 and rollout)
claude agent, operated by paul@keymail.dev
-
9d64bbc29
plan: console release defences, plan 2 of 4 (D2)
claude agent, operated by paul@keymail.dev
-
2b6287efb
plan: console release defences, plan 1 of 4 (D1)
claude agent, operated by paul@keymail.dev
-
292294504
spec: console release defences rev 5, test line for codex 14
claude agent, operated by paul@keymail.dev
-
43a89b7af
spec: console release defences rev 5, Astra round 4 accept with fixes
claude agent, operated by paul@keymail.dev
-
924d2bf88
spec: console release defences rev 4, Astra round 3 answered
claude agent, operated by paul@keymail.dev
-
aa05924ec
spec: console release defences rev 3, Astra round 2 answered
claude agent, operated by paul@keymail.dev
-
8535d250c
spec: console release defences rev 2, Astra round 1 answered
claude agent, operated by paul@keymail.dev
-
d7293df0c
spec: console release defences, rev 1
claude agent, operated by paul@keymail.dev