← Branches
main
Commits
-
606afcb9c
data-lifecycle-336
claude agent, operated by paul@keymail.dev
-
6e2d98170
design-edge-request-protection
claude agent, operated by paul@keymail.dev
-
15a85ddfb
rootfs apps Plan 1: carlos ship --rootfs and --check, the rootfs release kind, the console ship door (#366)
claude agent, operated by paul@keymail.dev
-
c83ab2107
census-astra-approvals
claude agent, operated by paul@keymail.dev
-
8c899da3a
Plans 3b: never-sleep and schedule refusals on shared boxes (daemon releases at ship and every promote/rollback door, hibernate:false sidecars, schedules under the plan minimum); always-on allowed on the account's own fleet; dormant without CARLOS_PLAN_CATALOG
claude agent, operated by paul@keymail.dev
-
236753a70
Wake latency pass 2c: the agent hashes a staged build once per file identity; a cold start skips set-property when the slice has the tier (census-ruling-wake-latency-4)
claude agent, operated by paul@keymail.dev
-
f1f863340
gate: repeat each failed job's verdict lines at the end of the log
claude agent, operated by paul@keymail.dev
-
ab4e9072d
ci-split-host
claude agent, operated by paul@keymail.dev
-
bcae2a72b
activator test: wait for the worker's spawn before it reports ready (deflake)
claude agent, operated by paul@keymail.dev
-
9c535162f
Wake latency pass 2b: one-round-trip lease, build-state write on its cached copy, config layers read together (census-ruling-wake-latency-3)
claude agent, operated by paul@keymail.dev
-
a5f050912
Merge branch 'pro-6214-service-runs' into main
claude agent, operated by paul@keymail.dev
-
5c7b0fa6d
Runs started by a scoped service credential (PRO-6214): a run role that names its commands, sees only its own runs, and starts each keyed run exactly once
Paul Campbell
-
3d7cbe304
Edge asset cache: the spec, plans 1-3, and plan 2's internal/assetcache disk store
claude agent, operated by paul@keymail.dev
-
6c75ad818
sec-mail-user-boundary
claude agent, operated by paul@keymail.dev
-
b612e710e
Wake latency pass 2a: per-step timing for the launch, prepare, pinned health, lease and instance-control (census-ruling-wake-latency-2)
claude agent, operated by paul@keymail.dev
-
e3fd2e025
sec-sidecar-create-gate
claude agent, operated by paul@keymail.dev
-
9ccf6b4ff
sec-deps-dos-bumps
claude agent, operated by paul@keymail.dev
-
ef742d077
Census cards: email-signin and console-brand-name approved by Paul 2026-10-24 (#280).
claude agent, operated by paul@keymail.dev
-
ef156d369
sec-host-imdsv2-module
claude agent, operated by paul@keymail.dev
-
65ca4aca7
Census rulings as approvals (#369): make census-card / census-propose, classified changes, approval card, no PROPOSED flip
claude agent, operated by paul@keymail.dev
-
fef28dc5a
Wake latency pass 1: no per-wake daemon-reload, 5→50 ms health poll, per-step wake timing (census-ruling-wake-latency-1)
claude agent, operated by paul@keymail.dev
-
64a002c8a
db-region-forward-3: carlos db pull forwarded to the data's region; LTX header checks for query and pull
claude agent, operated by paul@keymail.dev
-
0d9e81dc3
Merge branch 'carlos-static-redirects' into main
james@keymail.dev
-
ff350c27d
Static sites honour a _redirects file
claude agent, operated by james@keymail.dev
-
d18e619ee
db-region-forward-copy-ruling: census-ruling-db-region-forward-copy recorded (two envelope re-pins accepted)
claude agent, operated by paul@keymail.dev
-
2a2d7cc94
db-region-forward-copy: Luna-approved copy for forwarded db reads, docs
claude agent, operated by paul@keymail.dev
-
6e8564ad8
plans-3a-creation-caps
claude agent, operated by paul@keymail.dev
-
30c332742
db-region-forward-2: carlos db query forwarded to the data's region (dark behind CARLOS_DB_FORWARD)
claude agent, operated by paul@keymail.dev
-
26fbd042e
s3-polling-336
claude agent, operated by paul@keymail.dev
-
13e2f75f5
db-region-forward-1-nudge-flake: TestRunPassesOnANudge waits for the start probe's unit to stop (test only)
claude agent, operated by paul@keymail.dev
-
cd55508a6
db-region-forward-1: the box side of region-forwarded db reads (dark)
claude agent, operated by paul@keymail.dev
-
5f341f337
Console chrome and welcome name the deployment from CARLOS_CONSOLE_NAME (Carloku on carloku.com); defaults unchanged. Census overlay proposed on #280.
claude agent, operated by paul@keymail.dev
-
023504642
plans-2-box-limits
claude agent, operated by paul@keymail.dev
-
f6ba4432b
Console email sign-in: one email field; Keymail addresses go to Keymail's sign-in, any other address gets a magic link and code; email sessions re-confirm by emailed link or code; invites and notices reach plain email addresses. Spec docs/superpowers/specs/2026-10-21-console-email-signin-design.md (rev 6), copy approved by Paul, census proposed on #280.
claude agent, operated by paul@keymail.dev
-
3c34fe026
Fleet-internal engines (#335): spec rev 14 (approved, rulings R1-R5) and Plan 1, the internal/sim/engines simulation with its mutation harness and census overlay
claude agent, operated by paul@keymail.dev
-
4d6f0e6ca
umask-parallel
claude agent, operated by paul@keymail.dev
-
6f2af4cee
claim-empty-cohort-done
claude agent, operated by paul@keymail.dev
-
abcdd5778
claims-on-gate-recover
claude agent, operated by paul@keymail.dev
-
521c6ee91
console-invariant-parallel
claude agent, operated by paul@keymail.dev
-
4a1e4b29a
securelisten-337
claude agent, operated by paul@keymail.dev
-
c02978ad2
changelog-v0.28.7
claude agent, operated by paul@keymail.dev
-
4f55bfb0d
ci-speed-activator
claude agent, operated by paul@keymail.dev
-
8fee316b0
offline-move-runbook: the operator runbook for offline moves with stage
claude agent, operated by paul@keymail.dev
-
6da1cd0f6
ci-speed-host
claude agent, operated by paul@keymail.dev
-
d9149a01c
ci-speed
claude agent, operated by paul@keymail.dev
-
771ca01b6
moves-offline-precopy: carlos move offline stage (pre-copy while serving) and parallel mirror copies
claude agent, operated by paul@keymail.dev
-
f550afa21
design-plans-and-caps
claude agent, operated by paul@keymail.dev
-
aaa6a9498
test-suite-speed
claude agent, operated by paul@keymail.dev
-
512baa591
test-suite-debt
claude agent, operated by paul@keymail.dev
-
f54aa2fc5
run-lifecycle-logs-325
claude agent, operated by paul@keymail.dev
-
3d444a1b6
Merge branch 'scan-demand-revival' into main
paul@keymail.dev
-
c0040c1e7
Revive on-demand object scanning with guarded queue workers
claude agent, operated by paul@keymail.dev
-
ce8c425ae
console-switcher-filter
claude agent, operated by paul@keymail.dev
-
e0986eabc
moves-offline-fixes: harness Run 9 defects. Config sync writes a nested row's config.env as soon as its instance directory appears, keeping it pending until delivered (6); each offline door step sees a current report: source boxes and the sealer refresh reports every 15 s while a move is active without renewing the tombstone, and a stale report answers MV-O178 (7); a source box's scheduler leaves a held or moved host alone, excluding it before the batch limit (8). Astra reviewed (two rounds); census-ruling-moves-offline-fixes (platform-1c); MV-O178 approved by Paul.
claude agent, operated by paul@keymail.dev
-
218503569
install-console-upgrade
claude agent, operated by paul@keymail.dev
-
54ae7fb93
armed-box-updates: guard-armed boxes can take a release by the ruled re-arm. Cherry-picks 8376a468 (rootaws: an inherited disabled sentinel is not an override) and 8a313548 (hostfloor: a guarded run returns stdout only) from claim-empty-cohort-done, Astra-reviewed there; census-ruling-claim-rootaws-sentinel, confirmed for main by platform-1c. For v0.28.5.
claude agent, operated by paul@keymail.dev
-
7af881553
moves-offline: operator-run offline region move (claims-off, planned downtime): holds and fences every source box, seals the source with a create-only tombstone after a final checkpoint, lands every dependency on the target proven against an immutable seal.json, opens, then retires the source by rename. Reviewed task by task and by Fable and Astra; census-ruling-moves-offline; copy approved by Paul 2026-10-20. Dormant until an operator runs carlos move offline.
claude agent, operated by paul@keymail.dev
-
57569bfff
changelog-v0.28.4
claude agent, operated by paul@keymail.dev
-
cd2dd6e1a
bootstrap-carlos-follows-316
claude agent, operated by paul@keymail.dev
-
d7a5b8eb6
adopt-unit-root-pass-315
claude agent, operated by paul@keymail.dev
-
96db0efe4
claim-guard-umask: guard-arm makes its guard, system and lock directories 0755 whatever the caller's umask (#317)
claude agent, operated by paul@keymail.dev
-
f3bf1214a
claim-untagged-pointer: install-channel --policy takes --identity (the published release identity) so an untagged channel pointer works; the activation witness has no hand-made input on the trial's path
claude agent, operated by paul@keymail.dev
-
91a651b3c
design-console-invite-delivery
Paul Campbell
-
50f5b2684
claim-prev-rehearsal: install-channel --policy arms an updater-installed box; the activation witness starts from a box the platform made and rehearses steps 6 and 7
claude agent, operated by paul@keymail.dev
-
7c1beb2da
claim-step6-artifacts: claims run sign-policy and publish-identity, --out byte-exact files, claims install-console (dev cohort-1 trial step 6)
claude agent, operated by paul@keymail.dev
-
3b69c2bd6
box-publish-record
claude agent, operated by paul@keymail.dev
-
b11189254
region-ha-2b-build
Paul Campbell
-
04819f9b4
changelog-v0.28.0: release step 10 for v0.28.0, plus the darwin/windows vet fix for claimunit_inputs_test.go
claude agent, operated by paul@keymail.dev
-
260653783
feat/claim-root-trusted-state-p3
Paul Campbell
-
6834659c9
region-ha-2a-build
Paul Campbell
-
e8e961dd4
fix-empty-app-key
claude agent, operated by paul@keymail.dev
-
e963691d5
runbook-home2-sha
claude agent, operated by paul@keymail.dev
-
a89e35caa
moves-home-part2-plan
claude agent, operated by paul@keymail.dev
-
ee35dee27
feat/claim-files-backfill
Paul Campbell
-
70e57449f
moves-overcap-cut
claude agent, operated by paul@keymail.dev
-
a5003aba7
docs-rehearsal-dev-uk-secrets-key
claude agent, operated by paul@keymail.dev
-
9f17062ae
docs-rehearsal-dev-uk-bootstrap
claude agent, operated by paul@keymail.dev
-
5f4ace8b8
hostfiles-cap-live-entries
Paul Campbell
-
f97898f12
seeded-instances
claude agent, operated by paul@keymail.dev
-
37ab10c5f
carlos-run
claude agent, operated by paul@keymail.dev
-
1c5718f69
zdd-owed-items
claude agent, operated by paul@keymail.dev
-
132cf996e
fix-binary-size-275
claude agent, operated by paul@keymail.dev
-
2683f16ac
changelog-v0.27.3
Paul Campbell
-
e15ad6be6
fix-shutdown-lease-292
claude agent, operated by paul@keymail.dev
-
fc70bc754
reserved-sqids-285
claude agent, operated by paul@keymail.dev
-
8b5c75610
changelog-v0.27
Paul Campbell
-
a3bfa6622
rehearsal-p0-two-box
claude agent, operated by paul@keymail.dev
-
4e577fdef
readme-roll-order
claude agent, operated by paul@keymail.dev
-
ebddcfc6f
zdd-gen-socket-names
claude agent, operated by paul@keymail.dev
-
d2f58fd33
startup-largebox-test-281
claude agent, operated by paul@keymail.dev
-
21d91fd60
fix-cross-test-compile
Paul Campbell
-
6dfbff103
hotfix #281: the edge no longer waits on the startup sweep and recovery
Paul Campbell
-
f4cf27dd0
changelog-v0.26.1
claude agent, operated by paul@keymail.dev
-
2e00b17e1
zdd-flag-readiness-3
claude agent, operated by paul@keymail.dev
-
645a7d054
claim Plan 14 Part 1 (#280): root-trusted state foundations, families B, C and D
codex agent, operated by paul@keymail.dev
-
34a4328f7
hotfix-instance-key-gate
claude agent, operated by paul@keymail.dev
-
ba52d5efe
zdd-flag-readiness-2
claude agent, operated by paul@keymail.dev
-
67698c9c0
changelog-nested-bullets
claude agent, operated by paul@keymail.dev
-
729e85080
changelog-v0.26.0
claude agent, operated by paul@keymail.dev
-
09c5a4a5f
moves-copy-approve-p5f
claude agent, operated by paul@keymail.dev