Commit Graph
197 Commits
Author SHA1 Message Date
marcopan 390122480a fix: harden durable workspace runtime config leases 2026-08-11 09:44:08 +02:00
marcopan e0950f5ed4 refactor: share registry runtime configuration leases 2026-08-11 09:04:33 +02:00
marcopan 88d1790728 fix: close task3 qdrant and config validation gaps 2026-08-11 07:47:43 +02:00
marcopan 99e0024973 fix: harden task3 qdrant compatibility boundaries 2026-08-11 07:34:44 +02:00
marcopan 0724a73300 fix: serialize registry qdrant lifecycle 2026-08-11 07:13:21 +02:00
marcopan edef085fea test: replace legacy workspace deployment fixtures 2026-08-10 23:21:27 +02:00
marcopan fc19b0d67c build: remove stale backend distribution files 2026-08-10 22:34:03 +02:00
marcopan ab315c2130 refactor: remove workspace revision state consumers 2026-08-10 21:44:57 +02:00
marcopan fa24f43fd4 refactor: remove workspace migration utilities 2026-08-10 21:32:01 +02:00
marcopan c2f9b03973 refactor: remove legacy workspace runtime branches 2026-08-10 21:28:08 +02:00
marcopan f102629cee refactor: remove workspace revision state 2026-08-10 20:54:40 +02:00
marcopan 512b0261b1 refactor: make workspace descriptors schema v3 only 2026-08-10 20:21:20 +02:00
marcopan c7338969d7 fix: bind complete P1 manual dist graph and snapshot identity
prepare records an immutable manifest of every regular backend/dist file
(path/size/sha256/dev/ino) in the owned root and binds its record identity
in ownership; serve revalidates record and every file before spawn, passes
the manifest to the child on fd 4, and the immutable preload hash-verifies
all files at startup and serves only cached verified bytes for any import
below backend/dist, so imported dependency replacement is refused before
RUNNING or never executes. The render command validates the commit
snapshot.json manifest, binds snapshot bytes to the manifest digest and the
installed Git blob, and passes the expected digest to the renderer, which
revalidates head/files digest with bounded no-follow reads and renders only
verified bytes with lease release on refusal.
2026-08-10 17:36:24 +02:00
marcopan e97f335b88 fix: bind manual production graph and snapshots 2026-08-10 00:38:46 +02:00
marcopan c10857405a fix: reject Git diff driver helpers 2026-08-10 00:30:06 +02:00
marcopan d14a99abe7 fix: seal P1 acceptance startup and raw Git state 2026-08-10 00:02:29 +02:00
marcopan 0cfe5c7c9a fix: bind P1 acceptance evidence to reviewed runtime 2026-08-09 23:36:36 +02:00
marcopan 96362929d7 fix: harden P1 manual acceptance audit gates 2026-08-09 23:32:42 +02:00
marcopan 7d8fb065b5 fix: seal P1 acceptance process boundaries 2026-08-09 22:51:56 +02:00
marcopan a3129b8b81 fix: anchor P1 manual extraction and scans 2026-08-09 22:43:44 +02:00
marcopan bd1f4083e9 fix: use production entrypoint for P1 manual serve 2026-08-09 22:33:18 +02:00
marcopan e9755c6feb fix: serialize P1 manual lifecycle root 2026-08-09 22:21:49 +02:00
marcopan c1ca814440 fix: close P1 acceptance audit gaps 2026-08-09 22:16:37 +02:00
marcopan 6b2fd71018 fix: serialize P1 manual server ownership 2026-08-09 21:51:45 +02:00
marcopan 3fe5a7b5e9 fix: complete P1 integration audit trail 2026-08-09 21:45:52 +02:00
marcopan 1986716aac fix: harden P1 manual acceptance guards 2026-08-09 21:27:04 +02:00
marcopan 3583659600 fix: harden P1 integration evidence 2026-08-09 21:14:45 +02:00
marcopan 74ddb86d13 test: add P1 manual configuration walkthrough 2026-08-09 21:12:08 +02:00
marcopan 4d6e91526d test: prove P1 configuration process end to end 2026-08-09 20:51:20 +02:00
marcopan 4b329b4b2c test: expect canonical secret binding paths 2026-08-09 20:50:53 +02:00
marcopan ba7596c2dd fix: tighten evidence artifact guarantees 2026-08-09 20:12:42 +02:00
marcopan 212c973e3b feat: preserve evidence in workspace artifacts 2026-08-09 20:03:28 +02:00
marcopan 64b778ade9 test: strengthen evidence runtime handoff coverage 2026-08-09 19:46:47 +02:00
marcopan 36fbd58277 feat: render revision-bound evidence configuration 2026-08-09 19:39:03 +02:00
marcopan 3b9681a63a fix: harden evidence secret file handoff 2026-08-09 19:27:52 +02:00
marcopan df8dc1e219 fix: close evidence credential disclosure gaps 2026-08-09 19:15:00 +02:00
marcopan 7126b567b0 feat: bind evidence credentials through local files 2026-08-09 19:03:36 +02:00
marcopan c7a369f436 fix: preserve evidence revision staleness semantics 2026-08-09 18:45:56 +02:00
marcopan 266a604892 fix: distinguish evidence tree lookup failures 2026-08-09 18:40:37 +02:00
marcopan 521288eb04 feat: bind evidence trees to registry revisions 2026-08-09 18:39:11 +02:00
marcopan 033809b1b6 fix: harden evidence URI validation 2026-08-09 18:24:14 +02:00
marcopan 2966750b13 feat: define workspace evidence descriptor contract 2026-08-09 18:18:10 +02:00
marcopan 2c4534d968 fix: close internal semantic review gaps 2026-08-08 23:27:58 +02:00
marcopan 43d8063922 fix: scope workspace registry smoke cleanup 2026-08-08 22:32:57 +02:00
marcopan 4e810af516 test: align qdrant ollama verification fixtures 2026-08-08 22:15:02 +02:00
marcopan 1b1213317b fix: fail safe on missing workspace revisions 2026-08-08 20:03:41 +02:00
marcopan a6dbe1d023 fix: retire active pgvector artifacts 2026-08-08 19:27:05 +02:00
marcopan 9f104171b6 fix: nest internal semantic runtime resources 2026-08-08 17:20:55 +02:00
marcopan bc8afe0205 feat: render private semantic service endpoints 2026-08-08 17:17:02 +02:00
marcopan f7b9f3276b test: restore task 2 review coverage 2026-08-08 17:10:15 +02:00