Commit Graph

2972 Commits

Author SHA1 Message Date
ogt
10a19b03dc fix(km): bind published enum compatibly
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 2s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m14s
CD Pipeline / build-and-deploy (push) Failing after 8m1s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 15:35:40 +08:00
ogt
e53bbc94e8 fix(agent): persist no-write learning receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m19s
CD Pipeline / build-and-deploy (push) Successful in 9m4s
CD Pipeline / post-deploy-checks (push) Successful in 2m0s
2026-07-14 15:19:23 +08:00
ogt
76bc953080 feat(automation): reconcile all-asset capability matrix
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m1s
CD Pipeline / build-and-deploy (push) Failing after 9m13s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
2026-07-14 15:06:29 +08:00
ogt
de725d6605 feat(agent): close retry incident governance loop 2026-07-14 15:06:29 +08:00
ogt
b7b127406c fix(agent): use indexed replay terminal joins
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m41s
CD Pipeline / build-and-deploy (push) Failing after 12m30s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 14:50:42 +08:00
ogt
a6307e785d feat(automation): harden D037 runtime closure receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m41s
CD Pipeline / build-and-deploy (push) Successful in 7m17s
CD Pipeline / post-deploy-checks (push) Successful in 1m59s
2026-07-14 14:32:43 +08:00
ogt
d272ef49bf fix(cd): bound workload DB connection preflight
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m57s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
CD Pipeline / build-and-deploy (push) Successful in 8m7s
CD Pipeline / post-deploy-checks (push) Successful in 2m59s
2026-07-14 14:15:18 +08:00
ogt
5aa651563c fix(agent): close no-write alert replay receipts
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m39s
CD Pipeline / build-and-deploy (push) Failing after 6m12s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 13:56:55 +08:00
ogt
d734362768 feat(security): expand canonical asset coverage
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 4m3s
CD Pipeline / build-and-deploy (push) Failing after 10m5s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 13:17:40 +08:00
ogt
c9bb4bbfc6 fix(recovery): bind host112 closure artifacts
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Failing after 7m35s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
2026-07-14 12:37:28 +08:00
ogt
6c8fdea99f fix(operator): fail closed on missing backup evidence 2026-07-14 12:37:28 +08:00
ogt
8bee637466 fix(automation): bind backup approvals to full owner 2026-07-14 12:37:28 +08:00
ogt
bbd479a36c fix(recovery): close host112 wazuh manager loop 2026-07-14 12:37:28 +08:00
ogt
745b86af01 fix(automation): domain-separate backup fingerprints 2026-07-14 12:37:28 +08:00
ogt
a5030e9fe0 fix(cd): accept bounded partial SSH route proof 2026-07-14 12:37:28 +08:00
ogt
a677199bb6 fix(operator): bound AI alert card readback scans 2026-07-14 12:35:25 +08:00
ogt
0ec066b5c6 fix(automation): bound backup approval fingerprints 2026-07-14 12:35:25 +08:00
ogt
afe15662f3 fix(agent): keep alert replay closure monotonic
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 8s
CD Pipeline / post-deploy-checks (push) Successful in 2m19s
2026-07-14 12:05:57 +08:00
ogt
4508d19d4b fix(security): repair canonical asset integrity
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 7m58s
CD Pipeline / post-deploy-checks (push) Successful in 2m25s
2026-07-14 11:54:02 +08:00
ogt
172b461fb0 fix(cd): isolate asset migration verifier network
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m31s
CD Pipeline / build-and-deploy (push) Successful in 7m46s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
CD Pipeline / post-deploy-checks (push) Successful in 2m20s
2026-07-14 11:08:12 +08:00
ogt
b6ddee7984 fix(security): reconcile asset control plane truth
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m27s
CD Pipeline / build-and-deploy (push) Failing after 3m57s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:57:30 +08:00
ogt
fc3b08afe3 fix(agent): replay stdin boundary failures without apply
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
CD Pipeline / post-deploy-checks (push) Successful in 2m18s
2026-07-14 10:43:00 +08:00
ogt
708f976275 fix(cd): decouple executor boundary from endpoint outage 2026-07-14 10:42:53 +08:00
ogt
efde0701e9 test(automation): require local PostgreSQL opt-in
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m26s
CD Pipeline / build-and-deploy (push) Failing after 8m50s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:20:39 +08:00
ogt
e800d62682 fix(automation): repair backup database readback 2026-07-14 10:20:39 +08:00
ogt
5cae7c93cf fix(agent99): move dispatch reconciler to signal worker 2026-07-14 10:20:39 +08:00
ogt
fe95d61a34 fix(security): restore control plane maintenance ownership
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m5s
CD Pipeline / build-and-deploy (push) Successful in 7m4s
CD Pipeline / post-deploy-checks (push) Successful in 4m13s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
2026-07-14 10:06:32 +08:00
ogt
968bd794d1 fix(agent): give ansible a blocking stdin boundary
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m1s
CD Pipeline / post-deploy-checks (push) Successful in 2m21s
2026-07-14 09:53:07 +08:00
ogt
6cf8429d17 fix(automation): enforce durable alert closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 8m2s
CD Pipeline / post-deploy-checks (push) Successful in 2m22s
Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.
2026-07-14 09:40:53 +08:00
ogt
fa2df9a0f4 fix(cd): align ssh keyscan boundary contract
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Failing after 6m7s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 09:21:08 +08:00
ogt
8a9f367ae6 fix(cd): format known hosts recovery gate test
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m42s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 14s
2026-07-14 09:13:46 +08:00
ogt
1a5adef360 fix(cd): preserve verified host trust on ssh outage 2026-07-14 09:06:49 +08:00
ogt
964beb2564 fix(security): restore compliance scanner readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m36s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-14 08:51:55 +08:00
ogt
ccd94d45af fix(cd): queue main deployments without cancellation 2026-07-14 08:51:55 +08:00
ogt
0eb003d150 feat(security): inventory database catalog assets 2026-07-14 08:51:55 +08:00
ogt
ad3219c6cf fix(security): restore scoped asset scanner writes 2026-07-14 08:51:55 +08:00
ogt
7695cd7dfd fix(agent99): bind completion callback credential
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Failing after 4m30s
CD Pipeline / post-deploy-checks (push) Has been skipped
Agent Version Lifecycle Watch / version-lifecycle-watch (push) Successful in 15s
2026-07-14 08:49:57 +08:00
ogt
a1f87282ef fix(agent99): polish recovery incident card 2026-07-14 08:49:57 +08:00
ogt
aceedcc202 fix(agent99): harden runtime deploy rollback 2026-07-14 08:49:57 +08:00
ogt
b18a6c039e fix(alerts): stop slow-query backup misrouting
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m43s
CD Pipeline / build-and-deploy (push) Successful in 8m55s
CD Pipeline / post-deploy-checks (push) Successful in 1m50s
Agent Market Watch / market-watch (push) Failing after 36s
E2E Health Check / e2e-health (push) Successful in 54s
AI 技術雷達監控 / ai-technology-watch (push) Successful in 52s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
2026-07-11 21:08:08 +08:00
ogt
e8b0244ee7 feat(agent99): add durable completion callback 2026-07-11 20:53:45 +08:00
ogt
df26f43b77 fix(agent99): validate v5 incident formatter 2026-07-11 20:53:45 +08:00
ogt
83f7838131 feat(agent99): ship incident lifecycle cards 2026-07-11 20:53:45 +08:00
ogt
0a671bd46a fix(agent99): expose verified recovery lifecycle 2026-07-11 20:53:45 +08:00
ogt
43a3a06a3a feat(recovery): close host112 guest readiness loop 2026-07-11 20:53:45 +08:00
ogt
dbbf651f0a fix(agent99): gate reboot recovery on full SOP 2026-07-11 20:53:44 +08:00
ogt
276410fbb6 fix(recovery): close cold-start runtime blockers 2026-07-11 20:53:44 +08:00
ogt
1ecf10507a fix(automation): expose durable history degradation
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m40s
CD Pipeline / build-and-deploy (push) Successful in 6m59s
CD Pipeline / post-deploy-checks (push) Successful in 1m51s
2026-07-11 20:43:03 +08:00
ogt
e793718707 fix(agent): fail closed on incident read drift
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m31s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-11 20:34:52 +08:00
ogt
ca5ed596dc fix(incidents): bind durable readback tenant context 2026-07-11 20:34:52 +08:00