Commit Graph

6498 Commits

Author SHA1 Message Date
ogt
d734362768 feat(security): expand canonical asset coverage
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 4m3s
CD Pipeline / build-and-deploy (push) Failing after 10m5s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 13:17:40 +08:00
AWOOOI CD
36778b35df chore(cd): deploy c9bb4bb [skip ci] 2026-07-14 12:48:03 +08:00
ogt
c9bb4bbfc6 fix(recovery): bind host112 closure artifacts
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Failing after 7m35s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
2026-07-14 12:37:28 +08:00
ogt
d7a17e58b2 fix(agent99): bind host112 apply to immutable receipt 2026-07-14 12:37:28 +08:00
ogt
316605df87 fix(recovery): transact host112 recovery install 2026-07-14 12:37:28 +08:00
ogt
6c8fdea99f fix(operator): fail closed on missing backup evidence 2026-07-14 12:37:28 +08:00
ogt
989862e296 fix(recovery): make host112 receipts replay safe 2026-07-14 12:37:28 +08:00
ogt
8bee637466 fix(automation): bind backup approvals to full owner 2026-07-14 12:37:28 +08:00
ogt
bbd479a36c fix(recovery): close host112 wazuh manager loop 2026-07-14 12:37:28 +08:00
ogt
2180993e4a fix(agent99): verify relay generation on atomic deploy 2026-07-14 12:37:28 +08:00
ogt
745b86af01 fix(automation): domain-separate backup fingerprints 2026-07-14 12:37:28 +08:00
ogt
a5030e9fe0 fix(cd): accept bounded partial SSH route proof 2026-07-14 12:37:28 +08:00
ogt
a677199bb6 fix(operator): bound AI alert card readback scans 2026-07-14 12:35:25 +08:00
ogt
0ec066b5c6 fix(automation): bound backup approval fingerprints 2026-07-14 12:35:25 +08:00
ogt
7282dad5a9 fix(recovery): package Wazuh verifier snapshots 2026-07-14 12:35:25 +08:00
ogt
e71403f50b feat(agent99): add bounded atomic SSH deploy transport 2026-07-14 12:35:25 +08:00
AWOOOI CD
2b2e1cee2c chore(cd): deploy afe1566 [skip ci] 2026-07-14 12:16:37 +08:00
ogt
afe15662f3 fix(agent): keep alert replay closure monotonic
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 8s
CD Pipeline / post-deploy-checks (push) Successful in 2m19s
2026-07-14 12:05:57 +08:00
AWOOOI CD
82bb69b38f chore(cd): deploy 4508d19 [skip ci] 2026-07-14 12:02:44 +08:00
ogt
4508d19d4b fix(security): repair canonical asset integrity
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 7m58s
CD Pipeline / post-deploy-checks (push) Successful in 2m25s
2026-07-14 11:54:02 +08:00
AWOOOI CD
06177b89d6 chore(cd): deploy 172b461 [skip ci] 2026-07-14 11:16:39 +08:00
ogt
172b461fb0 fix(cd): isolate asset migration verifier network
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m31s
CD Pipeline / build-and-deploy (push) Successful in 7m46s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
CD Pipeline / post-deploy-checks (push) Successful in 2m20s
2026-07-14 11:08:12 +08:00
ogt
b6ddee7984 fix(security): reconcile asset control plane truth
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m27s
CD Pipeline / build-and-deploy (push) Failing after 3m57s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:57:30 +08:00
AWOOOI CD
467542a018 chore(cd): deploy fc3b08a [skip ci] 2026-07-14 10:51:21 +08:00
ogt
fc3b08afe3 fix(agent): replay stdin boundary failures without apply
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Successful in 7m28s
CD Pipeline / post-deploy-checks (push) Successful in 2m18s
2026-07-14 10:43:00 +08:00
ogt
708f976275 fix(cd): decouple executor boundary from endpoint outage 2026-07-14 10:42:53 +08:00
AWOOOI CD
0daadd31c7 chore(cd): deploy efde070 [skip ci] 2026-07-14 10:29:11 +08:00
ogt
efde0701e9 test(automation): require local PostgreSQL opt-in
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m26s
CD Pipeline / build-and-deploy (push) Failing after 8m50s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:20:39 +08:00
ogt
e800d62682 fix(automation): repair backup database readback 2026-07-14 10:20:39 +08:00
ogt
5cae7c93cf fix(agent99): move dispatch reconciler to signal worker 2026-07-14 10:20:39 +08:00
AWOOOI CD
26ef7de7e2 chore(cd): deploy fe95d61 [skip ci] 2026-07-14 10:14:00 +08:00
ogt
fe95d61a34 fix(security): restore control plane maintenance ownership
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m5s
CD Pipeline / build-and-deploy (push) Successful in 7m4s
CD Pipeline / post-deploy-checks (push) Successful in 4m13s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 18s
2026-07-14 10:06:32 +08:00
AWOOOI CD
584e056868 chore(cd): deploy 968bd79 [skip ci] 2026-07-14 10:02:12 +08:00
ogt
968bd794d1 fix(agent): give ansible a blocking stdin boundary
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m11s
CD Pipeline / build-and-deploy (push) Successful in 7m1s
CD Pipeline / post-deploy-checks (push) Successful in 2m21s
2026-07-14 09:53:07 +08:00
AWOOOI CD
f550eb33ee chore(cd): deploy 6cf8429 [skip ci] 2026-07-14 09:49:35 +08:00
ogt
6cf8429d17 fix(automation): enforce durable alert closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 8m2s
CD Pipeline / post-deploy-checks (push) Successful in 2m22s
Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.
2026-07-14 09:40:53 +08:00
AWOOOI CD
72a167a322 chore(cd): deploy fa2df9a [skip ci] 2026-07-14 09:29:06 +08:00
ogt
fa2df9a0f4 fix(cd): align ssh keyscan boundary contract
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Failing after 6m7s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 09:21:08 +08:00
ogt
8a9f367ae6 fix(cd): format known hosts recovery gate test
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m42s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 14s
2026-07-14 09:13:46 +08:00
ogt
074b450827 fix(recovery): include host112 ssh readiness
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m48s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 09:06:49 +08:00
ogt
1a5adef360 fix(cd): preserve verified host trust on ssh outage 2026-07-14 09:06:49 +08:00
ogt
964beb2564 fix(security): restore compliance scanner readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m36s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-14 08:51:55 +08:00
ogt
ccd94d45af fix(cd): queue main deployments without cancellation 2026-07-14 08:51:55 +08:00
ogt
0eb003d150 feat(security): inventory database catalog assets 2026-07-14 08:51:55 +08:00
ogt
ad3219c6cf fix(security): restore scoped asset scanner writes 2026-07-14 08:51:55 +08:00
ogt
7695cd7dfd fix(agent99): bind completion callback credential
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Failing after 4m30s
CD Pipeline / post-deploy-checks (push) Has been skipped
Agent Version Lifecycle Watch / version-lifecycle-watch (push) Successful in 15s
2026-07-14 08:49:57 +08:00
ogt
a1f87282ef fix(agent99): polish recovery incident card 2026-07-14 08:49:57 +08:00
ogt
aceedcc202 fix(agent99): harden runtime deploy rollback 2026-07-14 08:49:57 +08:00
AWOOOI CD
98ccf02231 chore(cd): deploy b18a6c0 [skip ci] 2026-07-11 21:18:56 +08:00
ogt
b18a6c039e fix(alerts): stop slow-query backup misrouting
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m43s
CD Pipeline / build-and-deploy (push) Successful in 8m55s
CD Pipeline / post-deploy-checks (push) Successful in 1m50s
Agent Market Watch / market-watch (push) Failing after 36s
E2E Health Check / e2e-health (push) Successful in 54s
AI 技術雷達監控 / ai-technology-watch (push) Successful in 52s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
2026-07-11 21:08:08 +08:00