Commit Graph
210 Commits
Author SHA1 Message Date
marcopan 5d016ce635 docs: revise schema-v3-only cleanup plan 2026-08-10 19:50:24 +02:00
marcopan ce90b4410d docs: add P2 host preprocessing plan 2026-08-10 19:04:51 +02:00
marcopan 16ee92c8f9 docs: design P2-P6 workspace preprocessing 2026-08-10 18:59:31 +02:00
marcopan c7338969d7 fix: bind complete P1 manual dist graph and snapshot identity
prepare records an immutable manifest of every regular backend/dist file
(path/size/sha256/dev/ino) in the owned root and binds its record identity
in ownership; serve revalidates record and every file before spawn, passes
the manifest to the child on fd 4, and the immutable preload hash-verifies
all files at startup and serves only cached verified bytes for any import
below backend/dist, so imported dependency replacement is refused before
RUNNING or never executes. The render command validates the commit
snapshot.json manifest, binds snapshot bytes to the manifest digest and the
installed Git blob, and passes the expected digest to the renderer, which
revalidates head/files digest with bounded no-follow reads and renders only
verified bytes with lease release on refusal.
2026-08-10 17:36:24 +02:00
marcopan 96362929d7 fix: harden P1 manual acceptance audit gates 2026-08-09 23:32:42 +02:00
marcopan a3129b8b81 fix: anchor P1 manual extraction and scans 2026-08-09 22:43:44 +02:00
marcopan bd1f4083e9 fix: use production entrypoint for P1 manual serve 2026-08-09 22:33:18 +02:00
marcopan 6b2fd71018 fix: serialize P1 manual server ownership 2026-08-09 21:51:45 +02:00
marcopan 74ddb86d13 test: add P1 manual configuration walkthrough 2026-08-09 21:12:08 +02:00
marcopan d27be56d5c fix: reject unsafe evidence documentation claims 2026-08-09 21:08:43 +02:00
marcopan d7264b843d fix: complete evidence documentation contract 2026-08-09 20:47:30 +02:00
marcopan 80aa989523 docs: define workspace evidence registry contract 2026-08-09 20:37:22 +02:00
marcopan be13231d3d docs: plan P1 descriptor evidence implementation 2026-08-09 18:06:16 +02:00
marcopan 208b299c92 docs: adopt integration-first preprocessing standard 2026-08-09 16:37:02 +02:00
marcopan 4bcd4604fc docs: add per-workspace preprocessing PRD
PRD for making ThothII (Qdrant + Git workspace registry) configurable and
usable per workspace, covering the full preprocessing chain (tables/columns,
FK, evidence, memory). Decisions D1-D9 closed with the product owner;
plans P1-P10 (one per PRD point) will start only after owner review.
2026-08-09 14:24:33 +02:00
marcopan bed43c747e docs: verify structured semantic contracts 2026-08-08 21:14:17 +02:00
marcopan 22c3512ac8 docs: document internal semantic infrastructure 2026-08-08 20:52:33 +02:00
marcopan a6dbe1d023 fix: retire active pgvector artifacts 2026-08-08 19:27:05 +02:00
marcopan 4e3fecbe8e refactor: retire external vector deployment 2026-08-08 19:05:57 +02:00
marcopan 4fe4049a24 docs: plan internal qdrant and ollama architecture 2026-08-08 16:23:53 +02:00
marcopan ece9cfda50 fix: validate deployment rollback and server topology 2026-08-05 15:15:06 +02:00
marcopan fc349e634c fix: close server bypass edge cases 2026-08-05 12:09:32 +02:00
marcopan a94affd6ac fix: enforce server trust boundaries 2026-08-05 11:42:35 +02:00
marcopan 96fe5bfa79 fix: make server operations executable 2026-08-05 11:06:34 +02:00
marcopan a707fb442c docs: add autonomous server installation guide 2026-08-05 10:22:02 +02:00
marcopan df21046472 fix: make local recovery fail closed 2026-08-05 09:48:55 +02:00
marcopan 65aa52115f fix: harden local installation guide 2026-08-05 09:23:44 +02:00
marcopan 53d257fb76 docs: add autonomous local installation guide 2026-08-05 08:35:13 +02:00
marcopan 09834d5cd4 fix: close deployment decoupling review 2026-08-05 07:52:32 +02:00
marcopan 5d037e97c4 refactor: remove portal deployment coupling 2026-08-05 06:58:19 +02:00
marcopan 2703864572 fix: reject executable pi configuration 2026-08-05 04:49:19 +02:00
marcopan 55926c75f8 fix: harden pi management verification 2026-08-05 01:00:13 +02:00
marcopan 935bb1db0e fix: harden embedded Pi lifecycle recovery 2026-08-04 23:14:47 +02:00
marcopan a368889838 fix: finalize durable Pi lifecycle 2026-08-04 21:34:08 +02:00
marcopan 5ba2821a1b fix: harden Pi lifecycle recovery 2026-08-04 20:28:09 +02:00
marcopan 20e59b8d32 feat: manage embedded pi with thothctl 2026-08-04 18:20:39 +02:00
marcopan fe5c428354 fix(docs): export compose tool paths 2026-08-04 15:37:42 +02:00
marcopan 4f26a71156 fix(docs): enforce compose preflight workflow 2026-08-04 15:33:04 +02:00
marcopan efda41aaa4 docs: plan unified compose deployment 2026-08-04 14:26:28 +02:00
marcopan d82ebece4d docs: design managed embedded pi operations 2026-08-04 14:17:17 +02:00
marcopan ab69c7941e docs: clarify external services and embedded pi 2026-08-04 13:41:03 +02:00
marcopan 08ae9e6d90 docs: design unified compose deployment 2026-08-04 13:00:20 +02:00
marcopan e4fdbed864 fix: harden workspace activation and snapshot retention 2026-08-04 09:25:06 +02:00
marcopan 37404512ce fix: bind workspace connector configuration safely 2026-08-04 08:22:09 +02:00
marcopan e5219deab1 fix: harden workspace registry installation docs 2026-08-04 08:11:28 +02:00
marcopan 72e16dd5ea docs: add workspace registry installation manuals 2026-08-04 07:57:09 +02:00
marcopan 49fa7030a5 fix: complete diagnostic extension remediation 2026-08-04 00:46:44 +02:00
marcopan 565e93a456 fix: align workspace diagnostic contracts 2026-08-04 00:37:57 +02:00
marcopan f6494fd8ef docs: specify workspace diagnostic protocols 2026-08-04 00:24:30 +02:00
marcopan 450d7ab07f fix: gate workspace diagnostic migration 2026-08-03 23:30:15 +02:00