Commit Graph

71 Commits

Author SHA1 Message Date
yuqei f2e75cfbca fix(rc06): bind producer counters and approval keyring 2026-10-06 22:41:06 +08:00
yuqei 211fbe3cea fix(rc05): preserve multi-operation canary progress 2026-10-06 22:34:41 +08:00
yuqei a965b13645 fix(rc06): close publication authority recovery gaps 2026-10-06 21:52:39 +08:00
yuqei f7d5946c42 fix(rc05): harden canary and resume controls 2026-10-06 21:51:53 +08:00
yuqei 65ee37a527 Harden RC06 durable publication authority protocol 2026-10-06 21:36:29 +08:00
yuqei ebad424350 Harden RC05 candidate-bound evaluation runner 2026-10-06 20:39:16 +08:00
yuqei b90fbd01db feat(release): add fail-closed RC06 apply protocol 2026-10-06 18:12:01 +08:00
yuqei f377391637 feat(release): bind scene source legal review 2026-10-06 17:32:44 +08:00
yuqei 1d8015d552 test(templates): keep sweep evidence outside source 2026-10-06 14:20:33 +08:00
yuqei a051131d3c fix(release): require explicit reviewer identity 2026-10-06 14:17:45 +08:00
yuqei 09d31d3595 test(templates): sweep all draftable template flows 2026-10-06 14:16:45 +08:00
yuqei 12a9e5dbd5 fix(release): reject aliased pin namespace writes 2026-10-06 11:59:51 +08:00
yuqei d4a9ead76e fix(release): bind RC06 apply authorization context 2026-10-06 11:59:42 +08:00
yuqei c90cf87fb3 fix(release): close RC06 trust replay and transaction gaps 2026-10-06 11:59:31 +08:00
yuqei 19a500cbf8 fix(release): harden RC06 trust transactions 2026-10-06 11:59:21 +08:00
yuqei 0ef04b17f1 Merge branch 'codex/build05-refreeze' into codex/build05-rc06-receipt-integration 2026-10-06 11:59:04 +08:00
yuqei 3775c9e98b refactor: remove obsolete V1 implementation paths 2026-10-03 22:37:27 +08:00
yuqei 20f9f76ce6 fix(release): protect signer-owned directories 2026-09-27 12:58:56 +08:00
yuqei 1a8f381109 fix(release): resolve third-party license identities safely 2026-09-27 11:51:05 +08:00
yuqei c600023c83 security: add release trust authority bootstrap 2026-09-27 11:11:10 +08:00
yuqei 440099e069 fix(release): bind third-party distribution profiles 2026-09-27 11:06:04 +08:00
yuqei 7c77174f2a release: assemble deterministic BUILD-05 package v2 2026-09-27 11:04:18 +08:00
yuqei 072237abed fix: make Windows signer entrypoints executable 2026-09-27 10:09:22 +08:00
yuqei 1a8657fcce release: add one-click sole reviewer signing 2026-09-27 09:54:02 +08:00
yuqei 74da61a9f1 release: enforce single named reviewer workflow 2026-09-27 07:45:15 +08:00
yuqei 3182d73b0b security: close BUILD-05 release integrity gaps 2026-09-27 04:53:47 +08:00
yuqei a69dd9093b security: bind application SBOM roots to image manifests 2026-09-27 04:44:14 +08:00
yuqei bb692ed4bf security: bind application license scans to release artifacts 2026-09-27 04:26:11 +08:00
yuqei 87fd517376 release: bind refreeze trust and source closure 2026-09-27 03:31:43 +08:00
yuqei 56021cfeed fix: lock docker archive member profiles 2026-09-27 03:19:59 +08:00
yuqei 514cad7a99 fix: remove candidate self-reference from trust baseline 2026-09-27 03:18:26 +08:00
yuqei 359b93c6bc fix: validate modern docker image archives 2026-09-27 03:07:30 +08:00
yuqei c130c59bae fix: pin third-party material trust baseline 2026-09-27 03:07:30 +08:00
yuqei cae8427014 fix: harden release recovery evidence 2026-09-27 02:46:43 +08:00
yuqei d56c764267 release: validate infrastructure bundle and first-release recovery 2026-09-27 02:46:43 +08:00
yuqei 2e58f4d8c0 fix: bind license materials to detected components 2026-09-27 02:46:43 +08:00
yuqei e2de02ea5e build: validate third-party release materials 2026-09-27 02:46:43 +08:00
yuqei 5f4f0d7f64 fix: align release gate with AI Redis service 2026-09-21 20:45:41 +08:00
yuqei 5688dd13c5 fix: cover trusted CA in release compose gate 2026-09-21 20:24:35 +08:00
yuqei c4af0c7862 release: freeze RC-05-RC-08 closeout candidate 2026-09-21 17:10:59 +08:00
yuqei 7b56bce900 fix: harden RC-04 backup and UAT verifier 2026-09-20 20:51:55 +08:00
yuqei be828e81e5 fix: harden RC-04 cold install and UAT recovery 2026-09-20 17:59:33 +08:00
yuqei 9eed54f816 release: use fresh domestic Trivy database mirror 2026-09-20 16:01:00 +08:00
yuqei d9469a7c90 release: correct RC-04 vulnerability waiver versions 2026-09-20 15:00:30 +08:00
yuqei 9e9a22fcec release: fix RC-04 single-platform archive export 2026-09-20 14:14:49 +08:00
yuqei 56b9565742 release: harden RC-04 Linux artifact chain 2026-09-20 13:31:14 +08:00
yuqei 891e352ab4 release: fix RC-04 clean-checkout evidence validation 2026-09-20 07:09:22 +08:00
yuqei 62d7d4476c release: fix RC-04 manifest source-path validation 2026-09-20 06:32:40 +08:00
yuqei 2770d73818 release: freeze multi-scene RC-04 candidate 2026-09-20 06:13:41 +08:00
yuqei af091cdc4f feat: add authoritative legal review corpus
Build and Test Quality Gate / Contract Web typecheck and build (pull_request) Successful in 4m57s
Build and Test Quality Gate / Isolated Alibaba and Tencent KMS gateway (pull_request) Failing after 1m34s
Security Quality Gate / npm audit, Bandit, pip-audit, detect-secrets (pull_request) Failing after 6m20s
Build and Test Quality Gate / Python tests and Contract API migration (pull_request) Failing after 17m3s
2026-08-27 01:10:24 +08:00