Commit Graph

646 Commits

Author SHA1 Message Date
ogt
52b870824f fix(security): verify internal runtime mirror digests 2026-07-14 19:05:20 +08:00
ogt
4ea132d992 fix(agent99): close canonical host readbacks
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m41s
CD Pipeline / build-and-deploy (push) Successful in 9m24s
CD Pipeline / post-deploy-checks (push) Successful in 1m56s
2026-07-14 18:49:12 +08:00
ogt
29f92f5387 ops(agent99): preserve callback recovery closure 2026-07-14 18:49:12 +08:00
ogt
df808f44b3 fix(agent99): verify host112 and dynamic replicas 2026-07-14 18:49:12 +08:00
ogt
9ca6dff2ea fix(host112): verify exact nopasswd sudo entries 2026-07-14 18:49:12 +08:00
ogt
12fc4b8914 fix(host112): persist installer post-gate blockers 2026-07-14 18:49:12 +08:00
ogt
0d75dc9a9e fix(agent99): normalize empty preflight blockers 2026-07-14 18:49:12 +08:00
ogt
a661824f33 fix(agent99): scope deploy runtime verifier 2026-07-14 18:49:12 +08:00
ogt
018b796ec3 fix(agent99): verify relay task generation 2026-07-14 18:49:12 +08:00
ogt
73d0d94c7f fix(agent99): bind local controlled dispatch identity 2026-07-14 18:49:12 +08:00
ogt
3b0d6a2ed3 fix(agent99): recover external host through full closure chain 2026-07-14 18:49:12 +08:00
ogt
abff2c89e0 fix(recovery): persist host112 SSD readiness 2026-07-14 18:49:12 +08:00
ogt
15ed334b84 fix(ops): ignore recovered stale job pods
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m9s
CD Pipeline / build-and-deploy (push) Successful in 12m10s
CD Pipeline / post-deploy-checks (push) Successful in 2m18s
2026-07-14 17:56:39 +08:00
ogt
568058a59b feat(security): expand internal runtime mirrors 2026-07-14 16:39:33 +08:00
ogt
92b4857601 feat(security): mirror runtime images from cache 2026-07-14 16:39:33 +08:00
ogt
3933b0f397 fix(cd): keep database verifier non-disruptive
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 16:22:30 +08:00
ogt
a6307e785d feat(automation): harden D037 runtime closure receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m41s
CD Pipeline / build-and-deploy (push) Successful in 7m17s
CD Pipeline / post-deploy-checks (push) Successful in 1m59s
2026-07-14 14:32:43 +08:00
ogt
d272ef49bf fix(cd): bound workload DB connection preflight
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m57s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
CD Pipeline / build-and-deploy (push) Successful in 8m7s
CD Pipeline / post-deploy-checks (push) Successful in 2m59s
2026-07-14 14:15:18 +08:00
ogt
c9bb4bbfc6 fix(recovery): bind host112 closure artifacts
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m35s
CD Pipeline / build-and-deploy (push) Failing after 7m35s
CD Pipeline / post-deploy-checks (push) Has been skipped
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 16s
2026-07-14 12:37:28 +08:00
ogt
d7a17e58b2 fix(agent99): bind host112 apply to immutable receipt 2026-07-14 12:37:28 +08:00
ogt
316605df87 fix(recovery): transact host112 recovery install 2026-07-14 12:37:28 +08:00
ogt
989862e296 fix(recovery): make host112 receipts replay safe 2026-07-14 12:37:28 +08:00
ogt
bbd479a36c fix(recovery): close host112 wazuh manager loop 2026-07-14 12:37:28 +08:00
ogt
2180993e4a fix(agent99): verify relay generation on atomic deploy 2026-07-14 12:37:28 +08:00
ogt
7282dad5a9 fix(recovery): package Wazuh verifier snapshots 2026-07-14 12:35:25 +08:00
ogt
e71403f50b feat(agent99): add bounded atomic SSH deploy transport 2026-07-14 12:35:25 +08:00
ogt
074b450827 fix(recovery): include host112 ssh readiness
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m48s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 09:06:49 +08:00
ogt
7695cd7dfd fix(agent99): bind completion callback credential
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m34s
CD Pipeline / build-and-deploy (push) Failing after 4m30s
CD Pipeline / post-deploy-checks (push) Has been skipped
Agent Version Lifecycle Watch / version-lifecycle-watch (push) Successful in 15s
2026-07-14 08:49:57 +08:00
ogt
83f7838131 feat(agent99): ship incident lifecycle cards 2026-07-11 20:53:45 +08:00
ogt
0a671bd46a fix(agent99): expose verified recovery lifecycle 2026-07-11 20:53:45 +08:00
ogt
244bad7259 docs(recovery): record host112 agent closure 2026-07-11 20:53:45 +08:00
ogt
23751a7fc3 feat(recovery): close host 112 guest readiness 2026-07-11 20:53:45 +08:00
ogt
69efe9aab3 docs(recovery): record reboot breach and late recovery 2026-07-11 20:53:45 +08:00
ogt
198bf24ff4 feat(recovery): add controlled VMware autostart apply 2026-07-11 20:53:45 +08:00
ogt
152fcbca05 fix(recovery): preserve reboot evidence across delayed startup 2026-07-11 20:53:45 +08:00
ogt
10df0e9c95 feat(recovery): add independent reboot drill observer 2026-07-11 20:53:44 +08:00
ogt
7a0373b325 fix(agent99): harden scorecard readback 2026-07-11 20:53:44 +08:00
ogt
dbbf651f0a fix(agent99): gate reboot recovery on full SOP 2026-07-11 20:53:44 +08:00
ogt
276410fbb6 fix(recovery): close cold-start runtime blockers 2026-07-11 20:53:44 +08:00
ogt
c1131fc76c fix(recovery): detect cross-session vmware guests
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m30s
CD Pipeline / build-and-deploy (push) Successful in 6m30s
CD Pipeline / post-deploy-checks (push) Successful in 1m57s
2026-07-11 19:26:22 +08:00
ogt
db9b33cfa7 fix(agent): route host pressure through bounded diagnosis
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m29s
CD Pipeline / build-and-deploy (push) Successful in 6m29s
CD Pipeline / post-deploy-checks (push) Successful in 1m53s
2026-07-11 10:58:32 +08:00
ogt
0660813781 fix(security): verify workload DB concurrency budget
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m19s
CD Pipeline / build-and-deploy (push) Successful in 6m54s
CD Pipeline / post-deploy-checks (push) Successful in 2m6s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 48s
2026-07-11 04:44:23 +08:00
ogt
262c9c8a7e fix(security): isolate workload database identities
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m25s
CD Pipeline / build-and-deploy (push) Successful in 6m42s
CD Pipeline / post-deploy-checks (push) Successful in 1m50s
2026-07-11 04:20:08 +08:00
ogt
6da5564d62 fix(ops): close Gitea backup restore verification 2026-07-10 21:21:37 +08:00
ogt
ec9478235d feat(gitea): add package release promotion receipts 2026-07-10 12:29:56 +08:00
ogt
0ff83bf5fd feat(ci): add artifact receipt source contract 2026-07-10 12:06:30 +08:00
ogt
23e191692b fix(reboot): reconcile collected windows99 collector readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m4s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-10 10:53:23 +08:00
ogt
210d7db338 feat(agents): schedule mainstream agent version governance
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-10 10:51:22 +08:00
ogt
ba0e0ba797 Merge remote-tracking branch 'origin/main' into codex/p0-006-ai-log-triage-20260709 2026-07-10 09:50:44 +08:00
ogt
771176c797 fix(reboot): surface privileged edge apply blocker
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m15s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-10 09:47:25 +08:00