55 Commits

Author SHA1 Message Date
6afb8fea76 fix: exclude generated artifacts from wiki sync
Some checks failed
Dependency Audit / dependency-audit (push) Has been cancelled
Security Audit / security-audit (push) Has been cancelled
2026-07-28 12:52:46 +02:00
ba88c574b9 chore: move repositories to GovOPlaN organization
Some checks failed
Dependency Audit / dependency-audit (push) Has been cancelled
Security Audit / security-audit (push) Has been cancelled
2026-07-27 15:46:51 +02:00
8d292184d4 ci: execute tagged module pytest suites
All checks were successful
Security Audit / security-audit (push) Successful in 4m3s
Security Audit Toolbox Update / toolbox-update (push) Successful in 4s
Dependency Audit / dependency-audit (push) Successful in 1m51s
2026-07-23 01:18:47 +02:00
52bd3527cd ci: install release test harness dependencies
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m37s
Security Audit / security-audit (push) Has been cancelled
2026-07-23 01:15:07 +02:00
ff49dabf8f ci: retain installed artifact checks in matrix
All checks were successful
Dependency Audit / dependency-audit (push) Successful in 1m42s
Security Audit / security-audit (push) Successful in 4m7s
2026-07-23 00:57:24 +02:00
cd15aa514e ci: run artifact-aware module matrix tests
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m36s
Security Audit / security-audit (push) Has been cancelled
2026-07-23 00:53:16 +02:00
a042baa1d3 fix(release): verify tags in mounted workspaces 2026-07-23 00:53:16 +02:00
8b93bbc6b6 ci: mount audit workspace safely
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m43s
Security Audit / security-audit (push) Failing after 4m10s
2026-07-23 00:30:28 +02:00
9788bdde0c ci: harden repository bootstrap transport 2026-07-23 00:09:43 +02:00
e005e54333 Seal catalog publication Git metadata
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:31:58 +02:00
76e4baa76e Define the catalog publication identity
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:23:01 +02:00
b6e9a9bd81 Pin the website publication toolchain
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:20:09 +02:00
dc46bda224 Validate complete Core release bundle sources
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:10:35 +02:00
b00d4e55ee Harden isolated release builds in Flatpak
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 16s
Security Audit / security-audit (push) Failing after 15s
2026-07-22 21:48:48 +02:00
76f19dc602 Lock down the local release console 2026-07-22 21:37:33 +02:00
5381e37a9e Execute receipt-bound durable release runs 2026-07-22 21:37:18 +02:00
7ecf1f17b0 Harden release source execution 2026-07-22 21:37:14 +02:00
349a099e5a Harden catalog publication transaction 2026-07-22 21:20:08 +02:00
fdee766993 Authenticate selective catalog base pairs 2026-07-22 20:59:00 +02:00
9c0650b2ed Bind installed releases to signed artifact receipts 2026-07-22 20:42:05 +02:00
4dc0c8d013 Harden release artifact publication 2026-07-22 20:41:42 +02:00
35c346a1fa Add private release candidate handles 2026-07-22 20:41:36 +02:00
4edbc11fe5 feat(release): bound durable run retention 2026-07-22 20:16:19 +02:00
ddee5c00dc fix(assessment): keep release origin unproven
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 14s
2026-07-22 19:55:35 +02:00
4c16069f88 fix(release): preserve durable recovery capacity 2026-07-22 19:48:55 +02:00
22f5c2ff4e fix(release): make durable runs recovery safe 2026-07-22 19:30:12 +02:00
19c4b63ade fix(assessment): harden capability evidence trust 2026-07-22 19:21:06 +02:00
1dc9148ec3 fix(release): harden durable run recovery 2026-07-22 18:58:54 +02:00
ead697d049 fix(assessment): constrain installed record reads 2026-07-22 18:36:12 +02:00
6c0b003dee feat(assessment): verify installed composition evidence 2026-07-22 18:34:02 +02:00
d0dc916837 feat(release): persist resumable run state 2026-07-22 18:32:19 +02:00
bd715a8473 fix(assessment): reject ambiguous trust keyrings
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:17:34 +02:00
ad8dd4f319 fix(assessment): establish independent release trust
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:09:35 +02:00
753dd2a3ee fix(release): fail closed on dashboard parse errors 2026-07-22 17:07:30 +02:00
b6bef410d6 fix(release): fail closed on malformed WebUI metadata 2026-07-22 16:55:06 +02:00
72f697c341 fix(release): harden review gate diagnostics 2026-07-22 16:52:27 +02:00
36f662c56f test(release): isolate manifest gate remote 2026-07-22 16:34:39 +02:00
25fbbaf5ad feat(assessment): gate signed release drift 2026-07-22 16:31:28 +02:00
bcab7095c3 feat(release): guide selective gate remediation 2026-07-22 16:28:13 +02:00
5447299289 Block mismatched selective WebUI releases
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 10:37:19 +02:00
8ecf8770ab feat(release): synthesize initial catalog entries
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 04:56:36 +02:00
8906704dc0 feat(release): gate tags on scoped workflows
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:56:18 +02:00
30f9ed152a feat(release): publish verified source tags
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:17:07 +02:00
eca75cbc93 fix(dev): resolve stale editable packages together 2026-07-22 00:58:16 +02:00
99e255cf81 fix(release): separate artifact and source contracts
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 13:24:37 +02:00
d9819c4aad test(release): validate installed module artifacts 2026-07-21 13:24:02 +02:00
78b601a2e5 fix(release): reject unpackageable tagged artifacts 2026-07-21 12:58:15 +02:00
a18c7ea040 fix(release): validate independent module versions 2026-07-21 12:51:25 +02:00
b193d4555f fix(audit): accept empty OSV source reports 2026-07-21 12:51:19 +02:00
676030b993 Harden security audit result contracts 2026-07-21 12:29:53 +02:00