Commit Graph
119 Commits
Author SHA1 Message Date
zemion 4e42911477 Document artifact origin and installer receipts 2026-07-22 20:42:35 +02:00
zemion 9c0650b2ed Bind installed releases to signed artifact receipts 2026-07-22 20:42:05 +02:00
zemion 4dc0c8d013 Harden release artifact publication 2026-07-22 20:41:42 +02:00
zemion 35c346a1fa Add private release candidate handles 2026-07-22 20:41:36 +02:00
zemion 4edbc11fe5 feat(release): bound durable run retention 2026-07-22 20:16:19 +02:00
zemion ddee5c00dc fix(assessment): keep release origin unproven
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 14s
2026-07-22 19:55:35 +02:00
zemion 4c16069f88 fix(release): preserve durable recovery capacity 2026-07-22 19:48:55 +02:00
zemion 22f5c2ff4e fix(release): make durable runs recovery safe 2026-07-22 19:30:12 +02:00
zemion 19c4b63ade fix(assessment): harden capability evidence trust 2026-07-22 19:21:06 +02:00
zemion 1dc9148ec3 fix(release): harden durable run recovery 2026-07-22 18:58:54 +02:00
zemion ead697d049 fix(assessment): constrain installed record reads 2026-07-22 18:36:12 +02:00
zemion 65aa8e0b7c docs(assessment): define external proof boundaries 2026-07-22 18:34:06 +02:00
zemion 6c0b003dee feat(assessment): verify installed composition evidence 2026-07-22 18:34:02 +02:00
zemion d0dc916837 feat(release): persist resumable run state 2026-07-22 18:32:19 +02:00
zemion bd715a8473 fix(assessment): reject ambiguous trust keyrings
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:17:34 +02:00
zemion ad8dd4f319 fix(assessment): establish independent release trust
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 17:09:35 +02:00
zemion 753dd2a3ee fix(release): fail closed on dashboard parse errors 2026-07-22 17:07:30 +02:00
zemion b6bef410d6 fix(release): fail closed on malformed WebUI metadata 2026-07-22 16:55:06 +02:00
zemion 72f697c341 fix(release): harden review gate diagnostics 2026-07-22 16:52:27 +02:00
zemion 36f662c56f test(release): isolate manifest gate remote 2026-07-22 16:34:39 +02:00
zemion 25fbbaf5ad feat(assessment): gate signed release drift 2026-07-22 16:31:28 +02:00
zemion bcab7095c3 feat(release): guide selective gate remediation 2026-07-22 16:28:13 +02:00
zemion 99534c0251 fix(release): align Campaign package refs
Dependency Audit / dependency-audit (push) Failing after 18s
Security Audit / security-audit (push) Failing after 15s
2026-07-22 15:30:43 +02:00
zemion 71e74601cf test(release): require retirement atomicity proof 2026-07-22 15:30:16 +02:00
zemion c29f1e9977 docs: refresh capability release baseline 2026-07-22 15:21:27 +02:00
zemion 5447299289 Block mismatched selective WebUI releases
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-22 10:37:19 +02:00
zemion 568ea6059a docs(ui): record completed Campaign pilot evidence
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 14s
2026-07-22 09:40:32 +02:00
zemion 8b6bcb7a4d docs(ui): record delivered Campaign pilot slices 2026-07-22 08:49:57 +02:00
zemion 2fb0a71bfb docs(ui): reconcile Campaign pilot rollout 2026-07-22 08:09:06 +02:00
zemion 8ecf8770ab feat(release): synthesize initial catalog entries
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 04:56:36 +02:00
zemion d53db2da06 fix(audit): bridge Docker from Flatpak sandboxes 2026-07-22 04:48:10 +02:00
zemion 8906704dc0 feat(release): gate tags on scoped workflows
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:56:18 +02:00
zemion 30f9ed152a feat(release): publish verified source tags
Dependency Audit / dependency-audit (push) Failing after 14s
Security Audit / security-audit (push) Failing after 12s
2026-07-22 01:17:07 +02:00
zemion eca75cbc93 fix(dev): resolve stale editable packages together 2026-07-22 00:58:16 +02:00
zemion a8abb85676 docs(roadmap): refine postbox and university BI paths
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 12s
2026-07-21 20:48:55 +02:00
zemion 097f9ca2f4 docs(ui): codify universal interaction patterns 2026-07-21 20:48:55 +02:00
zemion 89771d96fb docs: define connector secret retirement
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 16:00:29 +02:00
zemion 492fec46b6 docs: separate installer artifact trust boundary 2026-07-21 15:55:30 +02:00
zemion a863767233 docs: select connected reference journey program
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 15:41:54 +02:00
zemion 99e255cf81 fix(release): separate artifact and source contracts
Dependency Audit / dependency-audit (push) Failing after 15s
Security Audit / security-audit (push) Failing after 13s
2026-07-21 13:24:37 +02:00
zemion d9819c4aad test(release): validate installed module artifacts 2026-07-21 13:24:02 +02:00
zemion 78b601a2e5 fix(release): reject unpackageable tagged artifacts 2026-07-21 12:58:15 +02:00
zemion a18c7ea040 fix(release): validate independent module versions 2026-07-21 12:51:25 +02:00
zemion b193d4555f fix(audit): accept empty OSV source reports 2026-07-21 12:51:19 +02:00
zemion a81dc21e90 chore: clean release tooling imports 2026-07-21 12:39:36 +02:00
zemion 676030b993 Harden security audit result contracts 2026-07-21 12:29:53 +02:00
zemion a15a74c54c feat(release): enforce aligned trusted publications 2026-07-21 12:25:06 +02:00
zemion c34892f6ea feat(release): generate reproducible CycloneDX SBOM 2026-07-21 12:24:49 +02:00
zemion 397c87a012 docs: define system administrator lifecycle story 2026-07-21 12:24:32 +02:00
zemion f1b07354a0 Surface connector deployment allowlists 2026-07-21 12:10:44 +02:00