Commit Graph

91 Commits

Author SHA1 Message Date
8d292184d4 ci: execute tagged module pytest suites
All checks were successful
Security Audit / security-audit (push) Successful in 4m3s
Security Audit Toolbox Update / toolbox-update (push) Successful in 4s
Dependency Audit / dependency-audit (push) Successful in 1m51s
2026-07-23 01:18:47 +02:00
52bd3527cd ci: install release test harness dependencies
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m37s
Security Audit / security-audit (push) Has been cancelled
2026-07-23 01:15:07 +02:00
ff49dabf8f ci: retain installed artifact checks in matrix
All checks were successful
Dependency Audit / dependency-audit (push) Successful in 1m42s
Security Audit / security-audit (push) Successful in 4m7s
2026-07-23 00:57:24 +02:00
cd15aa514e ci: run artifact-aware module matrix tests
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m36s
Security Audit / security-audit (push) Has been cancelled
2026-07-23 00:53:16 +02:00
a042baa1d3 fix(release): verify tags in mounted workspaces 2026-07-23 00:53:16 +02:00
e80de00f29 chore(release): align Mail with Campaign contract
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m37s
Security Audit / security-audit (push) Has been cancelled
2026-07-23 00:47:46 +02:00
c69acf0dee ci: use Gitea-compatible artifact upload
All checks were successful
Dependency Audit / dependency-audit (push) Successful in 1m39s
Security Audit / security-audit (push) Successful in 4m11s
2026-07-23 00:36:59 +02:00
8b93bbc6b6 ci: mount audit workspace safely
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m43s
Security Audit / security-audit (push) Failing after 4m10s
2026-07-23 00:30:28 +02:00
3fc17701df ci: fix action repository access
Some checks failed
Dependency Audit / dependency-audit (push) Successful in 1m45s
Security Audit / security-audit (push) Failing after 3m33s
2026-07-23 00:10:29 +02:00
9788bdde0c ci: harden repository bootstrap transport 2026-07-23 00:09:43 +02:00
a10a01c903 docs: surface system action status
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 23:45:42 +02:00
e005e54333 Seal catalog publication Git metadata
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:31:58 +02:00
76e4baa76e Define the catalog publication identity
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:23:01 +02:00
b6e9a9bd81 Pin the website publication toolchain
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:20:09 +02:00
dc46bda224 Validate complete Core release bundle sources
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 22:10:35 +02:00
b00d4e55ee Harden isolated release builds in Flatpak
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 16s
Security Audit / security-audit (push) Failing after 15s
2026-07-22 21:48:48 +02:00
76f19dc602 Lock down the local release console 2026-07-22 21:37:33 +02:00
5381e37a9e Execute receipt-bound durable release runs 2026-07-22 21:37:18 +02:00
7ecf1f17b0 Harden release source execution 2026-07-22 21:37:14 +02:00
349a099e5a Harden catalog publication transaction 2026-07-22 21:20:08 +02:00
fdee766993 Authenticate selective catalog base pairs 2026-07-22 20:59:00 +02:00
47b9c05bde chore(release): align Campaign release dependency 2026-07-22 20:44:43 +02:00
4e42911477 Document artifact origin and installer receipts 2026-07-22 20:42:35 +02:00
9c0650b2ed Bind installed releases to signed artifact receipts 2026-07-22 20:42:05 +02:00
4dc0c8d013 Harden release artifact publication 2026-07-22 20:41:42 +02:00
35c346a1fa Add private release candidate handles 2026-07-22 20:41:36 +02:00
4edbc11fe5 feat(release): bound durable run retention 2026-07-22 20:16:19 +02:00
ddee5c00dc fix(assessment): keep release origin unproven
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 14s
2026-07-22 19:55:35 +02:00
4c16069f88 fix(release): preserve durable recovery capacity 2026-07-22 19:48:55 +02:00
22f5c2ff4e fix(release): make durable runs recovery safe 2026-07-22 19:30:12 +02:00
19c4b63ade fix(assessment): harden capability evidence trust 2026-07-22 19:21:06 +02:00
1dc9148ec3 fix(release): harden durable run recovery 2026-07-22 18:58:54 +02:00
ead697d049 fix(assessment): constrain installed record reads 2026-07-22 18:36:12 +02:00
65aa8e0b7c docs(assessment): define external proof boundaries 2026-07-22 18:34:06 +02:00
6c0b003dee feat(assessment): verify installed composition evidence 2026-07-22 18:34:02 +02:00
d0dc916837 feat(release): persist resumable run state 2026-07-22 18:32:19 +02:00
bd715a8473 fix(assessment): reject ambiguous trust keyrings
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:17:34 +02:00
ad8dd4f319 fix(assessment): establish independent release trust
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:09:35 +02:00
753dd2a3ee fix(release): fail closed on dashboard parse errors 2026-07-22 17:07:30 +02:00
b6bef410d6 fix(release): fail closed on malformed WebUI metadata 2026-07-22 16:55:06 +02:00
72f697c341 fix(release): harden review gate diagnostics 2026-07-22 16:52:27 +02:00
36f662c56f test(release): isolate manifest gate remote 2026-07-22 16:34:39 +02:00
25fbbaf5ad feat(assessment): gate signed release drift 2026-07-22 16:31:28 +02:00
bcab7095c3 feat(release): guide selective gate remediation 2026-07-22 16:28:13 +02:00
99534c0251 fix(release): align Campaign package refs
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 18s
Security Audit / security-audit (push) Failing after 15s
2026-07-22 15:30:43 +02:00
71e74601cf test(release): require retirement atomicity proof 2026-07-22 15:30:16 +02:00
c29f1e9977 docs: refresh capability release baseline 2026-07-22 15:21:27 +02:00
5447299289 Block mismatched selective WebUI releases
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 10:37:19 +02:00
568ea6059a docs(ui): record completed Campaign pilot evidence
Some checks failed
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 14s
2026-07-22 09:40:32 +02:00
8b6bcb7a4d docs(ui): record delivered Campaign pilot slices 2026-07-22 08:49:57 +02:00