Commit Graph

2455 Commits

Author SHA1 Message Date
ogt
39a8abefe0 Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715
# Conflicts:
#	apps/api/src/services/iwooos_wazuh_controlled_executor_runtime.py
2026-07-15 17:45:18 +08:00
ogt
72da320ab8 fix(security): classify Wazuh privilege blocker
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m19s
CD Pipeline / build-and-deploy (push) Successful in 15m28s
CD Pipeline / post-deploy-checks (push) Successful in 2m14s
2026-07-15 17:38:34 +08:00
ogt
7898defb50 Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715 2026-07-15 16:58:56 +08:00
ogt
e403d87210 refactor(iwooos): prioritize live security closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m26s
CD Pipeline / build-and-deploy (push) Successful in 15m1s
CD Pipeline / post-deploy-checks (push) Successful in 2m8s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 26s
2026-07-15 16:55:20 +08:00
ogt
4fd3fe9f85 fix(security): persist scheduled Wazuh lifecycle defaults 2026-07-15 16:55:20 +08:00
ogt
9c5b85f9bb fix(wazuh): require current same-run recurrence 2026-07-15 16:40:46 +08:00
ogt
639d6d4cd8 fix(assets): separate reconciliation from capability closure 2026-07-15 16:27:20 +08:00
ogt
f4b57624c3 docs(aiops): reconcile source implementation ledger 2026-07-15 16:15:16 +08:00
ogt
aeae6479a0 Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715 2026-07-15 16:11:36 +08:00
ogt
af6e5848a8 fix(security): bind scheduled Wazuh runs to incidents
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m30s
CD Pipeline / build-and-deploy (push) Successful in 16m6s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
CD Pipeline / post-deploy-checks (push) Successful in 3m19s
2026-07-15 16:10:20 +08:00
ogt
a98191f2df fix(security): use broker Python for Wazuh self-test 2026-07-15 16:10:20 +08:00
ogt
5ad9d5c7bc Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715
# Conflicts:
#	apps/api/tests/test_executor_trust_boundary_readback.py
2026-07-15 16:09:12 +08:00
ogt
5c5eb48091 feat(ai): add guarded Claude fallback route 2026-07-15 15:57:24 +08:00
ogt
f57845ba5e fix(db): enforce global nullpool session budget 2026-07-15 15:49:18 +08:00
ogt
7f504ca52e fix(iwooos): project strict runtime closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m36s
CD Pipeline / build-and-deploy (push) Successful in 15m32s
CD Pipeline / post-deploy-checks (push) Successful in 1m58s
2026-07-15 15:48:39 +08:00
ogt
19d7db93e5 fix(aiops): require current recurrence before controlled apply 2026-07-15 15:31:47 +08:00
ogt
1c21c7acc8 fix(security): mount canonical registry in worker
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m31s
CD Pipeline / build-and-deploy (push) Successful in 16m46s
CD Pipeline / post-deploy-checks (push) Successful in 2m10s
2026-07-15 15:21:44 +08:00
ogt
68ecdf4c44 fix(cd): apply probe headroom to shell gate
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Successful in 19m15s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 15s
CD Pipeline / post-deploy-checks (push) Successful in 2m20s
2026-07-15 14:58:29 +08:00
ogt
bf9c556a11 fix(cd): verify used database connection budget correctly
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 7m46s
CD Pipeline / build-and-deploy (push) Failing after 21m36s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-15 14:26:29 +08:00
ogt
748eb1fe3a feat(security): converge sanitized Wazuh alert ingress 2026-07-15 14:21:59 +08:00
ogt
94f8624b02 fix(assets): fail closed on ambiguous runtime identity 2026-07-15 14:17:24 +08:00
ogt
ddea039cd6 test(aiops): preserve verified generation contract 2026-07-15 13:40:23 +08:00
ogt
9041722118 Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715
# Conflicts:
#	apps/api/tests/test_sre_typed_domain_router.py
2026-07-15 13:33:07 +08:00
ogt
862be941f6 fix(aiops): reconcile typed repair generations 2026-07-15 13:31:28 +08:00
ogt
89aee21570 fix(security): route Wazuh to canonical executor
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Failing after 15m21s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-15 13:19:01 +08:00
ogt
4dc5b51d0f fix(alerting): cluster legacy backup incident replay
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 24s
2026-07-15 12:59:26 +08:00
ogt
0ba0b30f68 fix(cd): tolerate bounded workload rollout races
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 16m26s
CD Pipeline / post-deploy-checks (push) Successful in 2m4s
2026-07-15 12:37:24 +08:00
ogt
b6653c6acf fix(automation): align provider contract with runtime IDs 2026-07-15 12:25:08 +08:00
ogt
15f3a1f9a3 feat(automation): expose no-write typed route preview 2026-07-15 12:23:30 +08:00
ogt
3df1772a7e Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715 2026-07-15 12:18:03 +08:00
ogt
eed3f493d5 fix(automation): fail closed unresolved VMware targets 2026-07-15 12:17:42 +08:00
ogt
daedcc4c2a Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715 2026-07-15 12:07:12 +08:00
ogt
babbb21fb5 feat(automation): enforce typed SRE execution domains 2026-07-15 12:07:05 +08:00
ogt
f67d4889ad Merge remote-tracking branch 'origin/main' into codex/playwright-mcp-supply-20260715 2026-07-15 11:56:22 +08:00
ogt
8a314a8373 feat(mcp): expose verified replay receipts 2026-07-15 11:56:08 +08:00
ogt
76fcc4cbc4 Merge remote-tracking branch 'origin/main' into codex/aia-p0-006-security-control-plane-20260711
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m30s
CD Pipeline / build-and-deploy (push) Successful in 14m46s
CD Pipeline / post-deploy-checks (push) Successful in 2m4s
2026-07-15 11:54:54 +08:00
ogt
849b0c6d23 fix(iwooos): correlate canonical ansible candidates 2026-07-15 11:36:38 +08:00
ogt
8258f3f6dd Merge remote-tracking branch 'origin/main' into codex/sre-typed-automation-20260715 2026-07-15 11:20:03 +08:00
ogt
61ff8eff4e fix(automation): preserve immutable learning receipts 2026-07-15 11:19:56 +08:00
ogt
6505e2cede fix(automation): stabilize asset reconciliation source
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m59s
CD Pipeline / build-and-deploy (push) Successful in 15m26s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 2s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 25s
CD Pipeline / post-deploy-checks (push) Successful in 1m56s
2026-07-15 11:10:42 +08:00
ogt
562d004f48 Merge remote-tracking branch 'origin/main' into codex/p0-obs-002-20260715 2026-07-15 11:05:26 +08:00
ogt
5a12ff535c Merge remote-tracking branch 'origin/main' into codex/aia-p0-006-security-control-plane-20260711
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-15 11:03:53 +08:00
ogt
5ffd8b0069 Merge remote-tracking branch 'origin/main' into codex/p0-obs-002-20260715 2026-07-15 11:03:28 +08:00
ogt
387f84132d Merge remote-tracking branch 'origin/main' into codex/playwright-mcp-supply-20260715
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
MCP External Protocol Replay / replay-and-verify (push) Successful in 44s
2026-07-15 11:01:56 +08:00
ogt
7e098d8f66 feat(mcp): add isolated protocol replay verifier 2026-07-15 11:01:40 +08:00
ogt
d0aa293758 Merge remote-tracking branch 'origin/main' into codex/p0-obs-002-20260715 2026-07-15 10:50:22 +08:00
ogt
bfc3ba6e08 test(ci): keep secret inventory counts source-driven 2026-07-15 10:48:53 +08:00
ogt
64d24feeb3 Merge remote-tracking branch 'origin/main' into codex/aia-p0-006-security-control-plane-20260711 2026-07-15 10:45:03 +08:00
ogt
c0b597573f fix(iwooos): project canonical siem receipts 2026-07-15 10:44:58 +08:00
ogt
d684f3501f Merge remote-tracking branch 'origin/main' into codex/p0-obs-002-20260715 2026-07-15 10:31:14 +08:00