marcopan
e35e62a5c6
fix: harden native workspace root capabilities
2026-08-11 19:33:59 +02:00
marcopan
29a2e507a9
fix: route workspace CRUD through addressed publication
2026-08-11 18:30:06 +02:00
marcopan
4a0ec61da3
fix: close addressed publication recovery blockers
2026-08-11 17:41:09 +02:00
marcopan
56acb397be
fix: replace addressed registry lifecycle with capability owner
2026-08-11 16:03:27 +02:00
marcopan
ca37156a56
fix: close workspace ownership and API escapes
2026-08-11 15:39:27 +02:00
marcopan
1b24337a98
fix: harden addressed registry recovery and routes
2026-08-11 15:02:43 +02:00
marcopan
ee5ac381b3
fix: harden preprocessing state and child capabilities
2026-08-11 14:30:16 +02:00
marcopan
a5916f6177
fix: harden native workspace root and docker gates
2026-08-11 14:11:42 +02:00
marcopan
ee87a59e1f
feat: add durable addressed registry publication
2026-08-11 13:39:38 +02:00
marcopan
475e94b662
fix: reject forged native descriptor pointers
2026-08-11 13:25:24 +02:00
marcopan
beb22aec78
fix: accept valid workspace directory link counts
2026-08-11 13:24:17 +02:00
marcopan
6e61fdd18f
fix: complete native error declaration
2026-08-11 13:23:45 +02:00
marcopan
ee259cff8b
fix: expose complete native binding exports
2026-08-11 13:23:20 +02:00
marcopan
42b5feb84c
fix: fsync provisioned workspace roots
2026-08-11 13:22:45 +02:00
marcopan
99e5624358
fix: expose stable native errno codes
2026-08-11 13:22:34 +02:00
marcopan
2936583042
feat: add ordered workspace writer capability
2026-08-11 13:21:57 +02:00
marcopan
c5a01e5e53
feat: add workspace fs-at seam and retained root lease
2026-08-11 13:20:32 +02:00
marcopan
11cc8628cf
fix: harden runtime config helper protocol and lifecycle
2026-08-11 13:03:37 +02:00
marcopan
ec92f7f994
fix: harden runtime config lease boundary
2026-08-11 12:43:14 +02:00
marcopan
cf88e2df86
test: add deterministic runtime config chain race regression
2026-08-11 12:16:25 +02:00
marcopan
1bca663ace
test: complete runtime config lease matrix
2026-08-11 11:54:26 +02:00
marcopan
4c9c849fcd
fix: harden runtime config lease identity publication
2026-08-11 11:31:15 +02:00
marcopan
e9613767c5
fix: harden runtime config snapshot publication
2026-08-11 10:50:21 +02:00
marcopan
971315aa80
fix: complete durable workspace runtime config handoff
2026-08-11 09:59:25 +02:00
marcopan
390122480a
fix: harden durable workspace runtime config leases
2026-08-11 09:44:08 +02:00
marcopan
e0950f5ed4
refactor: share registry runtime configuration leases
2026-08-11 09:04:33 +02:00
marcopan
88d1790728
fix: close task3 qdrant and config validation gaps
2026-08-11 07:47:43 +02:00
marcopan
99e0024973
fix: harden task3 qdrant compatibility boundaries
2026-08-11 07:34:44 +02:00
marcopan
0724a73300
fix: serialize registry qdrant lifecycle
2026-08-11 07:13:21 +02:00
marcopan
edef085fea
test: replace legacy workspace deployment fixtures
2026-08-10 23:21:27 +02:00
marcopan
fc19b0d67c
build: remove stale backend distribution files
2026-08-10 22:34:03 +02:00
marcopan
ab315c2130
refactor: remove workspace revision state consumers
2026-08-10 21:44:57 +02:00
marcopan
fa24f43fd4
refactor: remove workspace migration utilities
2026-08-10 21:32:01 +02:00
marcopan
c2f9b03973
refactor: remove legacy workspace runtime branches
2026-08-10 21:28:08 +02:00
marcopan
f102629cee
refactor: remove workspace revision state
2026-08-10 20:54:40 +02:00
marcopan
512b0261b1
refactor: make workspace descriptors schema v3 only
2026-08-10 20:21:20 +02:00
marcopan
c7338969d7
fix: bind complete P1 manual dist graph and snapshot identity
...
prepare records an immutable manifest of every regular backend/dist file
(path/size/sha256/dev/ino) in the owned root and binds its record identity
in ownership; serve revalidates record and every file before spawn, passes
the manifest to the child on fd 4, and the immutable preload hash-verifies
all files at startup and serves only cached verified bytes for any import
below backend/dist, so imported dependency replacement is refused before
RUNNING or never executes. The render command validates the commit
snapshot.json manifest, binds snapshot bytes to the manifest digest and the
installed Git blob, and passes the expected digest to the renderer, which
revalidates head/files digest with bounded no-follow reads and renders only
verified bytes with lease release on refusal.
2026-08-10 17:36:24 +02:00
marcopan
e97f335b88
fix: bind manual production graph and snapshots
2026-08-10 00:38:46 +02:00
marcopan
c10857405a
fix: reject Git diff driver helpers
2026-08-10 00:30:06 +02:00
marcopan
d14a99abe7
fix: seal P1 acceptance startup and raw Git state
2026-08-10 00:02:29 +02:00
marcopan
0cfe5c7c9a
fix: bind P1 acceptance evidence to reviewed runtime
2026-08-09 23:36:36 +02:00
marcopan
96362929d7
fix: harden P1 manual acceptance audit gates
2026-08-09 23:32:42 +02:00
marcopan
7d8fb065b5
fix: seal P1 acceptance process boundaries
2026-08-09 22:51:56 +02:00
marcopan
a3129b8b81
fix: anchor P1 manual extraction and scans
2026-08-09 22:43:44 +02:00
marcopan
bd1f4083e9
fix: use production entrypoint for P1 manual serve
2026-08-09 22:33:18 +02:00
marcopan
e9755c6feb
fix: serialize P1 manual lifecycle root
2026-08-09 22:21:49 +02:00
marcopan
c1ca814440
fix: close P1 acceptance audit gaps
2026-08-09 22:16:37 +02:00
marcopan
6b2fd71018
fix: serialize P1 manual server ownership
2026-08-09 21:51:45 +02:00
marcopan
3fe5a7b5e9
fix: complete P1 integration audit trail
2026-08-09 21:45:52 +02:00
marcopan
1986716aac
fix: harden P1 manual acceptance guards
2026-08-09 21:27:04 +02:00
marcopan