yuqei
bc739f63b9
fix(release): close cleanup and source loader gaps
2026-09-27 17:33:14 +08:00
yuqei
2b8ac38a81
fix(release): close owned infrastructure trust gaps
2026-09-27 16:31:46 +08:00
yuqei
0b2364b502
fix(release): bind owned postgres provenance
2026-09-27 15:14:39 +08:00
yuqei
13be2706dd
feat(release): validate owned postgres image builds
2026-09-27 13:29:42 +08:00
yuqei
20f9f76ce6
fix(release): protect signer-owned directories
2026-09-27 12:58:56 +08:00
yuqei
1a8f381109
fix(release): resolve third-party license identities safely
2026-09-27 11:51:05 +08:00
yuqei
807df3a20f
docs: record BUILD-05 integration state
2026-09-27 11:37:21 +08:00
yuqei
1de6c93a24
test: isolate BUILD-05 package fixture
2026-09-27 11:21:12 +08:00
yuqei
c600023c83
security: add release trust authority bootstrap
2026-09-27 11:11:10 +08:00
yuqei
440099e069
fix(release): bind third-party distribution profiles
2026-09-27 11:06:04 +08:00
yuqei
7c77174f2a
release: assemble deterministic BUILD-05 package v2
2026-09-27 11:04:18 +08:00
yuqei
072237abed
fix: make Windows signer entrypoints executable
2026-09-27 10:09:22 +08:00
yuqei
1a8657fcce
release: add one-click sole reviewer signing
2026-09-27 09:54:02 +08:00
yuqei
74da61a9f1
release: enforce single named reviewer workflow
2026-09-27 07:45:15 +08:00
yuqei
3182d73b0b
security: close BUILD-05 release integrity gaps
2026-09-27 04:53:47 +08:00
yuqei
a69dd9093b
security: bind application SBOM roots to image manifests
2026-09-27 04:44:14 +08:00
yuqei
bb692ed4bf
security: bind application license scans to release artifacts
2026-09-27 04:26:11 +08:00
yuqei
97334846af
security: reject reused recovery approval keys
2026-09-27 04:04:19 +08:00
yuqei
87fd517376
release: bind refreeze trust and source closure
2026-09-27 03:31:43 +08:00
yuqei
007193e35b
fix: bind rollback rehearsal v2 source closure
2026-09-27 03:27:14 +08:00
yuqei
56021cfeed
fix: lock docker archive member profiles
2026-09-27 03:19:59 +08:00
yuqei
514cad7a99
fix: remove candidate self-reference from trust baseline
2026-09-27 03:18:26 +08:00
yuqei
10199e8745
feat(release): close v2 offline package execution gate
2026-09-27 03:09:40 +08:00
yuqei
486e3f7706
fix: require package v2 for install readiness
2026-09-27 03:07:30 +08:00
yuqei
359b93c6bc
fix: validate modern docker image archives
2026-09-27 03:07:30 +08:00
yuqei
c130c59bae
fix: pin third-party material trust baseline
2026-09-27 03:07:30 +08:00
yuqei
c3a0779af0
release: model first-release snapshot recovery
2026-09-27 02:46:43 +08:00
yuqei
cae8427014
fix: harden release recovery evidence
2026-09-27 02:46:43 +08:00
yuqei
d56c764267
release: validate infrastructure bundle and first-release recovery
2026-09-27 02:46:43 +08:00
yuqei
2e58f4d8c0
fix: bind license materials to detected components
2026-09-27 02:46:43 +08:00
yuqei
e2de02ea5e
build: validate third-party release materials
2026-09-27 02:46:43 +08:00
yuqei
5f4f0d7f64
fix: align release gate with AI Redis service
2026-09-21 20:45:41 +08:00
yuqei
5688dd13c5
fix: cover trusted CA in release compose gate
2026-09-21 20:24:35 +08:00
yuqei
c4af0c7862
release: freeze RC-05-RC-08 closeout candidate
2026-09-21 17:10:59 +08:00
yuqei
cac183b2ea
fix: initialize object storage before API readiness
2026-09-20 23:22:05 +08:00
yuqei
7b56bce900
fix: harden RC-04 backup and UAT verifier
2026-09-20 20:51:55 +08:00
yuqei
be828e81e5
fix: harden RC-04 cold install and UAT recovery
2026-09-20 17:59:33 +08:00
yuqei
9eed54f816
release: use fresh domestic Trivy database mirror
2026-09-20 16:01:00 +08:00
yuqei
d9469a7c90
release: correct RC-04 vulnerability waiver versions
2026-09-20 15:00:30 +08:00
yuqei
9e9a22fcec
release: fix RC-04 single-platform archive export
2026-09-20 14:14:49 +08:00
yuqei
56b9565742
release: harden RC-04 Linux artifact chain
2026-09-20 13:31:14 +08:00
yuqei
891e352ab4
release: fix RC-04 clean-checkout evidence validation
2026-09-20 07:09:22 +08:00
yuqei
62d7d4476c
release: fix RC-04 manifest source-path validation
2026-09-20 06:32:40 +08:00
yuqei
2770d73818
release: freeze multi-scene RC-04 candidate
2026-09-20 06:13:41 +08:00
yuqei
af091cdc4f
feat: add authoritative legal review corpus
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 4m57s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 1m34s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 6m20s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 17m3s
2026-08-27 01:10:24 +08:00
yuqei
ddd60875a3
fix: enforce grounded AI legal review gate
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 5m40s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 1m39s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 17m10s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 6m29s
2026-08-26 18:24:32 +08:00
yuqei
ebb5d410ad
feat: add controlled pilot capacity quality gates
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 10m2s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 2m30s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 20m28s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 8m2s
2026-08-26 17:02:55 +08:00
yuqei
5d383b4b0e
feat: close model task operations and quality gates
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 6m49s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 2m7s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 21m37s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 24m55s
2026-08-26 14:53:11 +08:00
yuqei
1d85329a6a
feat: deliver governed contract platform and async AI tasks
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 9m12s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 4m53s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 24m55s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 8m42s
2026-08-26 12:53:47 +08:00
yuqei
c2ac972d7b
fix: skip pgvector extension creation when not available
...
Build and Test Quality Gate / Contract Web typecheck and build (push) Successful in 4m46s
Build and Test Quality Gate / Python tests and Contract API migration (push) Failing after 9m1s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (push) Successful in 6m38s
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 3m32s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 9m18s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Successful in 5m30s
The pgvector PostgreSQL extension may not be installed in all environments.
Modified migration 20260622_0004 to skip vector column creation gracefully
instead of failing when the extension is unavailable.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-08-22 09:45:12 +08:00
yuqei