Commit Graph

86 Commits

Author SHA1 Message Date
yuqei a965b13645 fix(rc06): close publication authority recovery gaps 2026-10-06 21:52:39 +08:00
yuqei f7d5946c42 fix(rc05): harden canary and resume controls 2026-10-06 21:51:53 +08:00
yuqei 65ee37a527 Harden RC06 durable publication authority protocol 2026-10-06 21:36:29 +08:00
yuqei ebad424350 Harden RC05 candidate-bound evaluation runner 2026-10-06 20:39:16 +08:00
yuqei d0fbbd12c0 fix(kms): modernize audited Alibaba SDK closure 2026-10-06 18:36:53 +08:00
yuqei b90fbd01db feat(release): add fail-closed RC06 apply protocol 2026-10-06 18:12:01 +08:00
yuqei f377391637 feat(release): bind scene source legal review 2026-10-06 17:32:44 +08:00
yuqei 1d8015d552 test(templates): keep sweep evidence outside source 2026-10-06 14:20:33 +08:00
yuqei a051131d3c fix(release): require explicit reviewer identity 2026-10-06 14:17:45 +08:00
yuqei 09d31d3595 test(templates): sweep all draftable template flows 2026-10-06 14:16:45 +08:00
yuqei 12a9e5dbd5 fix(release): reject aliased pin namespace writes 2026-10-06 11:59:51 +08:00
yuqei d4a9ead76e fix(release): bind RC06 apply authorization context 2026-10-06 11:59:42 +08:00
yuqei c90cf87fb3 fix(release): close RC06 trust replay and transaction gaps 2026-10-06 11:59:31 +08:00
yuqei 19a500cbf8 fix(release): harden RC06 trust transactions 2026-10-06 11:59:21 +08:00
yuqei 0ef04b17f1 Merge branch 'codex/build05-refreeze' into codex/build05-rc06-receipt-integration 2026-10-06 11:59:04 +08:00
yuqei 3775c9e98b refactor: remove obsolete V1 implementation paths 2026-10-03 22:37:27 +08:00
yuqei 20f9f76ce6 fix(release): protect signer-owned directories 2026-09-27 12:58:56 +08:00
yuqei 1a8f381109 fix(release): resolve third-party license identities safely 2026-09-27 11:51:05 +08:00
yuqei 1de6c93a24 test: isolate BUILD-05 package fixture 2026-09-27 11:21:12 +08:00
yuqei c600023c83 security: add release trust authority bootstrap 2026-09-27 11:11:10 +08:00
yuqei 440099e069 fix(release): bind third-party distribution profiles 2026-09-27 11:06:04 +08:00
yuqei 7c77174f2a release: assemble deterministic BUILD-05 package v2 2026-09-27 11:04:18 +08:00
yuqei 072237abed fix: make Windows signer entrypoints executable 2026-09-27 10:09:22 +08:00
yuqei 1a8657fcce release: add one-click sole reviewer signing 2026-09-27 09:54:02 +08:00
yuqei 74da61a9f1 release: enforce single named reviewer workflow 2026-09-27 07:45:15 +08:00
yuqei 3182d73b0b security: close BUILD-05 release integrity gaps 2026-09-27 04:53:47 +08:00
yuqei a69dd9093b security: bind application SBOM roots to image manifests 2026-09-27 04:44:14 +08:00
yuqei bb692ed4bf security: bind application license scans to release artifacts 2026-09-27 04:26:11 +08:00
yuqei 97334846af security: reject reused recovery approval keys 2026-09-27 04:04:19 +08:00
yuqei 87fd517376 release: bind refreeze trust and source closure 2026-09-27 03:31:43 +08:00
yuqei 007193e35b fix: bind rollback rehearsal v2 source closure 2026-09-27 03:27:14 +08:00
yuqei 56021cfeed fix: lock docker archive member profiles 2026-09-27 03:19:59 +08:00
yuqei 514cad7a99 fix: remove candidate self-reference from trust baseline 2026-09-27 03:18:26 +08:00
yuqei 10199e8745 feat(release): close v2 offline package execution gate 2026-09-27 03:09:40 +08:00
yuqei 486e3f7706 fix: require package v2 for install readiness 2026-09-27 03:07:30 +08:00
yuqei 359b93c6bc fix: validate modern docker image archives 2026-09-27 03:07:30 +08:00
yuqei c130c59bae fix: pin third-party material trust baseline 2026-09-27 03:07:30 +08:00
yuqei c3a0779af0 release: model first-release snapshot recovery 2026-09-27 02:46:43 +08:00
yuqei cae8427014 fix: harden release recovery evidence 2026-09-27 02:46:43 +08:00
yuqei d56c764267 release: validate infrastructure bundle and first-release recovery 2026-09-27 02:46:43 +08:00
yuqei 2e58f4d8c0 fix: bind license materials to detected components 2026-09-27 02:46:43 +08:00
yuqei e2de02ea5e build: validate third-party release materials 2026-09-27 02:46:43 +08:00
yuqei 5f4f0d7f64 fix: align release gate with AI Redis service 2026-09-21 20:45:41 +08:00
yuqei 5688dd13c5 fix: cover trusted CA in release compose gate 2026-09-21 20:24:35 +08:00
yuqei c4af0c7862 release: freeze RC-05-RC-08 closeout candidate 2026-09-21 17:10:59 +08:00
yuqei 7b56bce900 fix: harden RC-04 backup and UAT verifier 2026-09-20 20:51:55 +08:00
yuqei be828e81e5 fix: harden RC-04 cold install and UAT recovery 2026-09-20 17:59:33 +08:00
yuqei 9eed54f816 release: use fresh domestic Trivy database mirror 2026-09-20 16:01:00 +08:00
yuqei d9469a7c90 release: correct RC-04 vulnerability waiver versions 2026-09-20 15:00:30 +08:00
yuqei 9e9a22fcec release: fix RC-04 single-platform archive export 2026-09-20 14:14:49 +08:00