Commit Graph

2035 Commits

Author SHA1 Message Date
ogt
5f4f1ab865 fix(agent): bound host110 monitoring repair
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 21:31:54 +08:00
ogt
ec9d81ff6d fix(wazuh): preserve degraded production readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 20:40:45 +08:00
ogt
0e28fbc1dc fix(security): resolve TLS inventory in runtime image 2026-07-14 20:40:45 +08:00
ogt
dbf8d0255e fix(agent): canary repaired playbook revisions
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 20:02:27 +08:00
ogt
177040c273 fix(agent): verify host110 harbor backend route 2026-07-14 20:02:27 +08:00
ogt
7f58f844f4 fix(telegram): keep historical retry backfill silent 2026-07-14 20:02:27 +08:00
ogt
addbb23d30 fix(telegram): collapse repeated no-write failures
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m47s
CD Pipeline / build-and-deploy (push) Failing after 13m32s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 13s
2026-07-14 19:06:03 +08:00
ogt
cf644be09d fix(agent): kill timed out ansible process groups 2026-07-14 19:06:03 +08:00
ogt
baac2ed4e8 fix(agent): replay repaired catalog revision once 2026-07-14 19:06:03 +08:00
ogt
ec4210e6bf feat(security): expose scanner failures in focused cockpit
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 19:05:20 +08:00
ogt
2fe6a56c09 fix(agent99): reconcile durable callbacks as verified repairs 2026-07-14 18:49:12 +08:00
ogt
025829434d fix(agent99): compact callback incident ids 2026-07-14 18:49:12 +08:00
ogt
f4cf465676 fix(agent99): reconcile existing run without writes
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m23s
CD Pipeline / build-and-deploy (push) Successful in 14m17s
CD Pipeline / post-deploy-checks (push) Successful in 1m57s
2026-07-14 18:24:29 +08:00
ogt
44081eb4dd fix(agent): rank run-level open lifecycles
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m38s
CD Pipeline / build-and-deploy (push) Successful in 9m34s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
CD Pipeline / post-deploy-checks (push) Successful in 2m12s
2026-07-14 18:13:23 +08:00
ogt
4cbe8e8ee5 fix(agent): prioritize open alert lifecycle closure
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m13s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-14 17:53:07 +08:00
ogt
7625cb9b0c fix(agent): project no-write lifecycle prefixes 2026-07-14 17:21:59 +08:00
ogt
bf44f66fb3 fix(api): bound run evidence batch receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m39s
CD Pipeline / build-and-deploy (push) Successful in 10m32s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 13s
CD Pipeline / post-deploy-checks (push) Successful in 2m12s
2026-07-14 17:05:30 +08:00
ogt
ceae823172 fix(api): batch run remediation evidence reads 2026-07-14 16:53:08 +08:00
ogt
5ec6fd3c30 style(security): normalize coverage evaluator imports
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m52s
CD Pipeline / build-and-deploy (push) Failing after 3m56s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 16:39:33 +08:00
ogt
0e184339af style(security): align asset scanner lint 2026-07-14 16:39:33 +08:00
ogt
27f9e46f3b feat(security): verify public tls asset health 2026-07-14 16:39:33 +08:00
ogt
248cf07ce1 feat(security): inventory public gateway certificates 2026-07-14 16:39:33 +08:00
ogt
ca8771a210 feat(security): inventory runtime supply chain 2026-07-14 16:39:33 +08:00
ogt
d4bc3cb453 feat(security): project runtime service asset types 2026-07-14 16:39:33 +08:00
ogt
f963452b3e feat(security): ingest gitea backup assets 2026-07-14 16:39:33 +08:00
ogt
69d2e4381d fix(security): reconcile asset coverage and ownership 2026-07-14 16:39:32 +08:00
ogt
b10a7d150a fix(api): delegate production bootstrap ddl
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m42s
CD Pipeline / build-and-deploy (push) Failing after 11m22s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 16:23:44 +08:00
ogt
f37bd611af fix(km): read back mixed enum labels safely
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m6s
CD Pipeline / build-and-deploy (push) Failing after 10m25s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 15s
2026-07-14 16:03:42 +08:00
ogt
10a19b03dc fix(km): bind published enum compatibly
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 2s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m14s
CD Pipeline / build-and-deploy (push) Failing after 8m1s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 15:35:40 +08:00
ogt
e53bbc94e8 fix(agent): persist no-write learning receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m19s
CD Pipeline / build-and-deploy (push) Successful in 9m4s
CD Pipeline / post-deploy-checks (push) Successful in 2m0s
2026-07-14 15:19:23 +08:00
ogt
76bc953080 feat(automation): reconcile all-asset capability matrix
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m1s
CD Pipeline / build-and-deploy (push) Failing after 9m13s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
2026-07-14 15:06:29 +08:00
ogt
de725d6605 feat(agent): close retry incident governance loop 2026-07-14 15:06:29 +08:00
ogt
b7b127406c fix(agent): use indexed replay terminal joins
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m41s
CD Pipeline / build-and-deploy (push) Failing after 12m30s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 14:50:42 +08:00
ogt
a6307e785d feat(automation): harden D037 runtime closure receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m41s
CD Pipeline / build-and-deploy (push) Successful in 7m17s
CD Pipeline / post-deploy-checks (push) Successful in 1m59s
2026-07-14 14:32:43 +08:00
ogt
5aa651563c fix(agent): close no-write alert replay receipts
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m39s
CD Pipeline / build-and-deploy (push) Failing after 6m12s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 13:56:55 +08:00
ogt
d734362768 feat(security): expand canonical asset coverage
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 4m3s
CD Pipeline / build-and-deploy (push) Failing after 10m5s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 13:17:40 +08:00
ogt
6c8fdea99f fix(operator): fail closed on missing backup evidence 2026-07-14 12:37:28 +08:00
ogt
8bee637466 fix(automation): bind backup approvals to full owner 2026-07-14 12:37:28 +08:00
ogt
745b86af01 fix(automation): domain-separate backup fingerprints 2026-07-14 12:37:28 +08:00
ogt
a677199bb6 fix(operator): bound AI alert card readback scans 2026-07-14 12:35:25 +08:00
ogt
0ec066b5c6 fix(automation): bound backup approval fingerprints 2026-07-14 12:35:25 +08:00
ogt
afe15662f3 fix(agent): keep alert replay closure monotonic
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 8s
CD Pipeline / post-deploy-checks (push) Successful in 2m19s
2026-07-14 12:05:57 +08:00
ogt
4508d19d4b fix(security): repair canonical asset integrity
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 7m58s
CD Pipeline / post-deploy-checks (push) Successful in 2m25s
2026-07-14 11:54:02 +08:00
ogt
b6ddee7984 fix(security): reconcile asset control plane truth
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m27s
CD Pipeline / build-and-deploy (push) Failing after 3m57s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:57:30 +08:00
ogt
fc3b08afe3 fix(agent): replay stdin boundary failures without apply
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
CD Pipeline / post-deploy-checks (push) Successful in 2m18s
2026-07-14 10:43:00 +08:00
ogt
e800d62682 fix(automation): repair backup database readback 2026-07-14 10:20:39 +08:00
ogt
5cae7c93cf fix(agent99): move dispatch reconciler to signal worker 2026-07-14 10:20:39 +08:00
ogt
fe95d61a34 fix(security): restore control plane maintenance ownership
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m5s
CD Pipeline / build-and-deploy (push) Successful in 7m4s
CD Pipeline / post-deploy-checks (push) Successful in 4m13s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
2026-07-14 10:06:32 +08:00
ogt
968bd794d1 fix(agent): give ansible a blocking stdin boundary
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m1s
CD Pipeline / post-deploy-checks (push) Successful in 2m21s
2026-07-14 09:53:07 +08:00
ogt
6cf8429d17 fix(automation): enforce durable alert closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 8m2s
CD Pipeline / post-deploy-checks (push) Successful in 2m22s
Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.
2026-07-14 09:40:53 +08:00