490 Commits

Author SHA1 Message Date
yuqei ce7f84a4ae docs(release): mark signer initialization unverified 2026-10-06 12:55:05 +08:00
yuqei 33f9228498 merge: integrate scene release gate fixes 2026-10-06 12:44:03 +08:00
yuqei 2078eeb56b fix(scene): verify runtime routes and release flags 2026-10-06 12:13:02 +08:00
yuqei 12a9e5dbd5 fix(release): reject aliased pin namespace writes 2026-10-06 11:59:51 +08:00
yuqei d4a9ead76e fix(release): bind RC06 apply authorization context 2026-10-06 11:59:42 +08:00
yuqei c90cf87fb3 fix(release): close RC06 trust replay and transaction gaps 2026-10-06 11:59:31 +08:00
yuqei 19a500cbf8 fix(release): harden RC06 trust transactions 2026-10-06 11:59:21 +08:00
yuqei 0ef04b17f1 Merge branch 'codex/build05-refreeze' into codex/build05-rc06-receipt-integration 2026-10-06 11:59:04 +08:00
yuqei d405c1ba65 feat(templates): enable all assets for local trial 2026-10-06 11:42:45 +08:00
yuqei afe39f92de fix(web): contain aborted workspace loads 2026-10-06 11:42:09 +08:00
yuqei 9d00c44ce2 refactor: remove obsolete V1 implementation paths
Build and Test Quality Gate / Contract Web typecheck and build (push) Successful in 3m50s
Build and Test Quality Gate / Python tests and Contract API migration (push) Failing after 9m33s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (push) Failing after 5m40s
2026-10-03 22:54:54 +08:00
yuqei 3775c9e98b refactor: remove obsolete V1 implementation paths 2026-10-03 22:37:27 +08:00
yuqei bc739f63b9 fix(release): close cleanup and source loader gaps 2026-09-27 17:33:14 +08:00
yuqei f23a8f0360 fix(recovery): bind external evidence reads 2026-09-27 17:25:37 +08:00
yuqei 5dc359aa98 fix(recovery): bind backups to release images 2026-09-27 16:47:50 +08:00
yuqei 2b8ac38a81 fix(release): close owned infrastructure trust gaps 2026-09-27 16:31:46 +08:00
yuqei 41d7f56ea2 fix(backup): bind offline runtime and restore safely 2026-09-27 16:02:18 +08:00
yuqei 0b2364b502 fix(release): bind owned postgres provenance 2026-09-27 15:14:39 +08:00
yuqei dcb53c55c1 fix(release): bind RustFS into formal compose gate 2026-09-27 15:07:36 +08:00
yuqei 3d17266f79 fix(release): fail closed on invalid RustFS markers 2026-09-27 14:48:48 +08:00
yuqei b6b8354f4c fix(release): align UAT image identity validation 2026-09-27 14:44:35 +08:00
yuqei 27a612059e fix(release): bind backup runtime image identity 2026-09-27 14:43:37 +08:00
yuqei 0d22de0167 fix(release): fail closed on backup client setup 2026-09-27 14:42:47 +08:00
yuqei 2f08c24b03 fix(release): harden RustFS backup publication 2026-09-27 14:41:04 +08:00
yuqei 438b17b1ae fix(release): isolate RustFS storage and backups 2026-09-27 13:36:39 +08:00
yuqei 13be2706dd feat(release): validate owned postgres image builds 2026-09-27 13:29:42 +08:00
yuqei 20f9f76ce6 fix(release): protect signer-owned directories 2026-09-27 12:58:56 +08:00
yuqei 1a8f381109 fix(release): resolve third-party license identities safely 2026-09-27 11:51:05 +08:00
yuqei 807df3a20f docs: record BUILD-05 integration state 2026-09-27 11:37:21 +08:00
yuqei 1de6c93a24 test: isolate BUILD-05 package fixture 2026-09-27 11:21:12 +08:00
yuqei c600023c83 security: add release trust authority bootstrap 2026-09-27 11:11:10 +08:00
yuqei 440099e069 fix(release): bind third-party distribution profiles 2026-09-27 11:06:04 +08:00
yuqei 7c77174f2a release: assemble deterministic BUILD-05 package v2 2026-09-27 11:04:18 +08:00
yuqei 072237abed fix: make Windows signer entrypoints executable 2026-09-27 10:09:22 +08:00
yuqei 1a8657fcce release: add one-click sole reviewer signing 2026-09-27 09:54:02 +08:00
yuqei 74da61a9f1 release: enforce single named reviewer workflow 2026-09-27 07:45:15 +08:00
yuqei 3182d73b0b security: close BUILD-05 release integrity gaps 2026-09-27 04:53:47 +08:00
yuqei a69dd9093b security: bind application SBOM roots to image manifests 2026-09-27 04:44:14 +08:00
yuqei bb692ed4bf security: bind application license scans to release artifacts 2026-09-27 04:26:11 +08:00
yuqei 97334846af security: reject reused recovery approval keys 2026-09-27 04:04:19 +08:00
yuqei 87fd517376 release: bind refreeze trust and source closure 2026-09-27 03:31:43 +08:00
yuqei 007193e35b fix: bind rollback rehearsal v2 source closure 2026-09-27 03:27:14 +08:00
yuqei 56021cfeed fix: lock docker archive member profiles 2026-09-27 03:19:59 +08:00
yuqei 514cad7a99 fix: remove candidate self-reference from trust baseline 2026-09-27 03:18:26 +08:00
yuqei 10199e8745 feat(release): close v2 offline package execution gate 2026-09-27 03:09:40 +08:00
yuqei 486e3f7706 fix: require package v2 for install readiness 2026-09-27 03:07:30 +08:00
yuqei 359b93c6bc fix: validate modern docker image archives 2026-09-27 03:07:30 +08:00
yuqei c130c59bae fix: pin third-party material trust baseline 2026-09-27 03:07:30 +08:00
yuqei c3a0779af0 release: model first-release snapshot recovery 2026-09-27 02:46:43 +08:00
yuqei cae8427014 fix: harden release recovery evidence 2026-09-27 02:46:43 +08:00