Commit Graph
219 Commits
Author SHA1 Message Date
marcopan 4a0ec61da3 fix: close addressed publication recovery blockers 2026-08-11 17:41:09 +02:00
marcopan 56acb397be fix: replace addressed registry lifecycle with capability owner 2026-08-11 16:03:27 +02:00
marcopan ca37156a56 fix: close workspace ownership and API escapes 2026-08-11 15:39:27 +02:00
marcopan 1b24337a98 fix: harden addressed registry recovery and routes 2026-08-11 15:02:43 +02:00
marcopan ee5ac381b3 fix: harden preprocessing state and child capabilities 2026-08-11 14:30:16 +02:00
marcopan a5916f6177 fix: harden native workspace root and docker gates 2026-08-11 14:11:42 +02:00
marcopan ee87a59e1f feat: add durable addressed registry publication 2026-08-11 13:39:38 +02:00
marcopan 475e94b662 fix: reject forged native descriptor pointers 2026-08-11 13:25:24 +02:00
marcopan beb22aec78 fix: accept valid workspace directory link counts 2026-08-11 13:24:17 +02:00
marcopan 6e61fdd18f fix: complete native error declaration 2026-08-11 13:23:45 +02:00
marcopan ee259cff8b fix: expose complete native binding exports 2026-08-11 13:23:20 +02:00
marcopan 42b5feb84c fix: fsync provisioned workspace roots 2026-08-11 13:22:45 +02:00
marcopan 99e5624358 fix: expose stable native errno codes 2026-08-11 13:22:34 +02:00
marcopan 2936583042 feat: add ordered workspace writer capability 2026-08-11 13:21:57 +02:00
marcopan c5a01e5e53 feat: add workspace fs-at seam and retained root lease 2026-08-11 13:20:32 +02:00
marcopan 11cc8628cf fix: harden runtime config helper protocol and lifecycle 2026-08-11 13:03:37 +02:00
marcopan ec92f7f994 fix: harden runtime config lease boundary 2026-08-11 12:43:14 +02:00
marcopan cf88e2df86 test: add deterministic runtime config chain race regression 2026-08-11 12:16:25 +02:00
marcopan 1bca663ace test: complete runtime config lease matrix 2026-08-11 11:54:26 +02:00
marcopan 4c9c849fcd fix: harden runtime config lease identity publication 2026-08-11 11:31:15 +02:00
marcopan e9613767c5 fix: harden runtime config snapshot publication 2026-08-11 10:50:21 +02:00
marcopan 971315aa80 fix: complete durable workspace runtime config handoff 2026-08-11 09:59:25 +02:00
marcopan 390122480a fix: harden durable workspace runtime config leases 2026-08-11 09:44:08 +02:00
marcopan e0950f5ed4 refactor: share registry runtime configuration leases 2026-08-11 09:04:33 +02:00
marcopan 88d1790728 fix: close task3 qdrant and config validation gaps 2026-08-11 07:47:43 +02:00
marcopan 99e0024973 fix: harden task3 qdrant compatibility boundaries 2026-08-11 07:34:44 +02:00
marcopan 0724a73300 fix: serialize registry qdrant lifecycle 2026-08-11 07:13:21 +02:00
marcopan edef085fea test: replace legacy workspace deployment fixtures 2026-08-10 23:21:27 +02:00
marcopan fc19b0d67c build: remove stale backend distribution files 2026-08-10 22:34:03 +02:00
marcopan ab315c2130 refactor: remove workspace revision state consumers 2026-08-10 21:44:57 +02:00
marcopan fa24f43fd4 refactor: remove workspace migration utilities 2026-08-10 21:32:01 +02:00
marcopan c2f9b03973 refactor: remove legacy workspace runtime branches 2026-08-10 21:28:08 +02:00
marcopan f102629cee refactor: remove workspace revision state 2026-08-10 20:54:40 +02:00
marcopan 512b0261b1 refactor: make workspace descriptors schema v3 only 2026-08-10 20:21:20 +02:00
marcopan c7338969d7 fix: bind complete P1 manual dist graph and snapshot identity
prepare records an immutable manifest of every regular backend/dist file
(path/size/sha256/dev/ino) in the owned root and binds its record identity
in ownership; serve revalidates record and every file before spawn, passes
the manifest to the child on fd 4, and the immutable preload hash-verifies
all files at startup and serves only cached verified bytes for any import
below backend/dist, so imported dependency replacement is refused before
RUNNING or never executes. The render command validates the commit
snapshot.json manifest, binds snapshot bytes to the manifest digest and the
installed Git blob, and passes the expected digest to the renderer, which
revalidates head/files digest with bounded no-follow reads and renders only
verified bytes with lease release on refusal.
2026-08-10 17:36:24 +02:00
marcopan e97f335b88 fix: bind manual production graph and snapshots 2026-08-10 00:38:46 +02:00
marcopan c10857405a fix: reject Git diff driver helpers 2026-08-10 00:30:06 +02:00
marcopan d14a99abe7 fix: seal P1 acceptance startup and raw Git state 2026-08-10 00:02:29 +02:00
marcopan 0cfe5c7c9a fix: bind P1 acceptance evidence to reviewed runtime 2026-08-09 23:36:36 +02:00
marcopan 96362929d7 fix: harden P1 manual acceptance audit gates 2026-08-09 23:32:42 +02:00
marcopan 7d8fb065b5 fix: seal P1 acceptance process boundaries 2026-08-09 22:51:56 +02:00
marcopan a3129b8b81 fix: anchor P1 manual extraction and scans 2026-08-09 22:43:44 +02:00
marcopan bd1f4083e9 fix: use production entrypoint for P1 manual serve 2026-08-09 22:33:18 +02:00
marcopan e9755c6feb fix: serialize P1 manual lifecycle root 2026-08-09 22:21:49 +02:00
marcopan c1ca814440 fix: close P1 acceptance audit gaps 2026-08-09 22:16:37 +02:00
marcopan 6b2fd71018 fix: serialize P1 manual server ownership 2026-08-09 21:51:45 +02:00
marcopan 3fe5a7b5e9 fix: complete P1 integration audit trail 2026-08-09 21:45:52 +02:00
marcopan 1986716aac fix: harden P1 manual acceptance guards 2026-08-09 21:27:04 +02:00
marcopan 3583659600 fix: harden P1 integration evidence 2026-08-09 21:14:45 +02:00
marcopan 74ddb86d13 test: add P1 manual configuration walkthrough 2026-08-09 21:12:08 +02:00