Commit Graph

423 Commits

Author SHA1 Message Date
yuqei f23a8f0360 fix(recovery): bind external evidence reads 2026-09-27 17:25:37 +08:00
yuqei 5dc359aa98 fix(recovery): bind backups to release images 2026-09-27 16:47:50 +08:00
yuqei 41d7f56ea2 fix(backup): bind offline runtime and restore safely 2026-09-27 16:02:18 +08:00
yuqei dcb53c55c1 fix(release): bind RustFS into formal compose gate 2026-09-27 15:07:36 +08:00
yuqei 3d17266f79 fix(release): fail closed on invalid RustFS markers 2026-09-27 14:48:48 +08:00
yuqei b6b8354f4c fix(release): align UAT image identity validation 2026-09-27 14:44:35 +08:00
yuqei 27a612059e fix(release): bind backup runtime image identity 2026-09-27 14:43:37 +08:00
yuqei 0d22de0167 fix(release): fail closed on backup client setup 2026-09-27 14:42:47 +08:00
yuqei 2f08c24b03 fix(release): harden RustFS backup publication 2026-09-27 14:41:04 +08:00
yuqei 438b17b1ae fix(release): isolate RustFS storage and backups 2026-09-27 13:36:39 +08:00
yuqei 20f9f76ce6 fix(release): protect signer-owned directories 2026-09-27 12:58:56 +08:00
yuqei 1a8f381109 fix(release): resolve third-party license identities safely 2026-09-27 11:51:05 +08:00
yuqei 807df3a20f docs: record BUILD-05 integration state 2026-09-27 11:37:21 +08:00
yuqei 1de6c93a24 test: isolate BUILD-05 package fixture 2026-09-27 11:21:12 +08:00
yuqei c600023c83 security: add release trust authority bootstrap 2026-09-27 11:11:10 +08:00
yuqei 440099e069 fix(release): bind third-party distribution profiles 2026-09-27 11:06:04 +08:00
yuqei 7c77174f2a release: assemble deterministic BUILD-05 package v2 2026-09-27 11:04:18 +08:00
yuqei 072237abed fix: make Windows signer entrypoints executable 2026-09-27 10:09:22 +08:00
yuqei 1a8657fcce release: add one-click sole reviewer signing 2026-09-27 09:54:02 +08:00
yuqei 74da61a9f1 release: enforce single named reviewer workflow 2026-09-27 07:45:15 +08:00
yuqei 3182d73b0b security: close BUILD-05 release integrity gaps 2026-09-27 04:53:47 +08:00
yuqei a69dd9093b security: bind application SBOM roots to image manifests 2026-09-27 04:44:14 +08:00
yuqei bb692ed4bf security: bind application license scans to release artifacts 2026-09-27 04:26:11 +08:00
yuqei 97334846af security: reject reused recovery approval keys 2026-09-27 04:04:19 +08:00
yuqei 87fd517376 release: bind refreeze trust and source closure 2026-09-27 03:31:43 +08:00
yuqei 007193e35b fix: bind rollback rehearsal v2 source closure 2026-09-27 03:27:14 +08:00
yuqei 56021cfeed fix: lock docker archive member profiles 2026-09-27 03:19:59 +08:00
yuqei 514cad7a99 fix: remove candidate self-reference from trust baseline 2026-09-27 03:18:26 +08:00
yuqei 10199e8745 feat(release): close v2 offline package execution gate 2026-09-27 03:09:40 +08:00
yuqei 486e3f7706 fix: require package v2 for install readiness 2026-09-27 03:07:30 +08:00
yuqei 359b93c6bc fix: validate modern docker image archives 2026-09-27 03:07:30 +08:00
yuqei c130c59bae fix: pin third-party material trust baseline 2026-09-27 03:07:30 +08:00
yuqei c3a0779af0 release: model first-release snapshot recovery 2026-09-27 02:46:43 +08:00
yuqei cae8427014 fix: harden release recovery evidence 2026-09-27 02:46:43 +08:00
yuqei d56c764267 release: validate infrastructure bundle and first-release recovery 2026-09-27 02:46:43 +08:00
yuqei 2e58f4d8c0 fix: bind license materials to detected components 2026-09-27 02:46:43 +08:00
yuqei e2de02ea5e build: validate third-party release materials 2026-09-27 02:46:43 +08:00
yuqei 5f4f0d7f64 fix: align release gate with AI Redis service 2026-09-21 20:45:41 +08:00
yuqei 5688dd13c5 fix: cover trusted CA in release compose gate 2026-09-21 20:24:35 +08:00
yuqei c4af0c7862 release: freeze RC-05-RC-08 closeout candidate 2026-09-21 17:10:59 +08:00
yuqei cac183b2ea fix: initialize object storage before API readiness v2-multiscene-rc04-20260920.10 2026-09-20 23:22:05 +08:00
yuqei 7b56bce900 fix: harden RC-04 backup and UAT verifier v2-multiscene-rc04-20260920.9 2026-09-20 20:51:55 +08:00
yuqei be828e81e5 fix: harden RC-04 cold install and UAT recovery v2-multiscene-rc04-20260920.8 2026-09-20 17:59:33 +08:00
yuqei 9eed54f816 release: use fresh domestic Trivy database mirror v2-multiscene-rc04-20260920.7 2026-09-20 16:01:00 +08:00
yuqei d9469a7c90 release: correct RC-04 vulnerability waiver versions v2-multiscene-rc04-20260920.6 2026-09-20 15:00:30 +08:00
yuqei 9e9a22fcec release: fix RC-04 single-platform archive export v2-multiscene-rc04-20260920.5 2026-09-20 14:14:49 +08:00
yuqei 56b9565742 release: harden RC-04 Linux artifact chain v2-multiscene-rc04-20260920.4 2026-09-20 13:31:14 +08:00
yuqei 891e352ab4 release: fix RC-04 clean-checkout evidence validation 2026-09-20 07:09:22 +08:00
yuqei 62d7d4476c release: fix RC-04 manifest source-path validation 2026-09-20 06:32:40 +08:00
yuqei 2770d73818 release: freeze multi-scene RC-04 candidate 2026-09-20 06:13:41 +08:00