Commit Graph

470 Commits

Author SHA1 Message Date
ogt
ff8d917247 fix(telegram): bind product alerts to canonical routes
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
2026-07-15 01:08:05 +08:00
ogt
fd0f2d544a fix(cd): align rollout verifier with startup budget
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m46s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
E2E Health Check / e2e-health (push) Failing after 47s
2026-07-14 23:54:25 +08:00
ogt
e54e0f3a27 feat(security): stage runtime cache canary in Harbor
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 22:03:46 +08:00
ogt
378d867e9c fix(cd): allow bounded rollout convergence
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m1s
CD Pipeline / build-and-deploy (push) Successful in 14m30s
CD Pipeline / post-deploy-checks (push) Successful in 4m34s
AI 技術雷達監控 / ai-technology-watch (push) Successful in 51s
2026-07-14 19:38:41 +08:00
ogt
fda8670288 fix(cd): preserve terminal receipt on probe degradation
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m45s
CD Pipeline / build-and-deploy (push) Failing after 9m56s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 19:23:48 +08:00
ogt
33f1c0b8f4 fix(cd): deploy production images by digest 2026-07-14 16:39:33 +08:00
ogt
92b4857601 feat(security): mirror runtime images from cache 2026-07-14 16:39:33 +08:00
ogt
3933b0f397 fix(cd): keep database verifier non-disruptive
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-14 16:22:30 +08:00
ogt
73be7401fd fix(cd): bound post-rollout database verifier
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m52s
CD Pipeline / build-and-deploy (push) Successful in 7m37s
CD Pipeline / post-deploy-checks (push) Successful in 2m45s
2026-07-14 15:47:13 +08:00
ogt
e53bbc94e8 fix(agent): persist no-write learning receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m19s
CD Pipeline / build-and-deploy (push) Successful in 9m4s
CD Pipeline / post-deploy-checks (push) Successful in 2m0s
2026-07-14 15:19:23 +08:00
ogt
a6307e785d feat(automation): harden D037 runtime closure receipts
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m41s
CD Pipeline / build-and-deploy (push) Successful in 7m17s
CD Pipeline / post-deploy-checks (push) Successful in 1m59s
2026-07-14 14:32:43 +08:00
ogt
a5030e9fe0 fix(cd): accept bounded partial SSH route proof 2026-07-14 12:37:28 +08:00
ogt
4508d19d4b fix(security): repair canonical asset integrity
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 7m58s
CD Pipeline / post-deploy-checks (push) Successful in 2m25s
2026-07-14 11:54:02 +08:00
ogt
172b461fb0 fix(cd): isolate asset migration verifier network
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m31s
CD Pipeline / build-and-deploy (push) Successful in 7m46s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 21s
CD Pipeline / post-deploy-checks (push) Successful in 2m20s
2026-07-14 11:08:12 +08:00
ogt
b6ddee7984 fix(security): reconcile asset control plane truth
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m27s
CD Pipeline / build-and-deploy (push) Failing after 3m57s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-14 10:57:30 +08:00
ogt
708f976275 fix(cd): decouple executor boundary from endpoint outage 2026-07-14 10:42:53 +08:00
ogt
6cf8429d17 fix(automation): enforce durable alert closure
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Successful in 8m2s
CD Pipeline / post-deploy-checks (push) Successful in 2m22s
Restore D037 durable incident readback without weakening database failure semantics.

Fence Agent99 dispatch and terminal learning to canonical identities, durable leases, verifier receipts, and reconciler-owned checkpoints.

Drain backup and restore legacy receipts in bounded cohorts with strict transport, claim, projection, and no-false-green controls.

Keep SSH service refusal visible while separating it from broker network-policy reachability.
2026-07-14 09:40:53 +08:00
ogt
1a5adef360 fix(cd): preserve verified host trust on ssh outage 2026-07-14 09:06:49 +08:00
ogt
ccd94d45af fix(cd): queue main deployments without cancellation 2026-07-14 08:51:55 +08:00
ogt
67e503a571 fix(cd): wait for boundary readback rollout
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m16s
CD Pipeline / build-and-deploy (push) Successful in 7m41s
CD Pipeline / post-deploy-checks (push) Successful in 2m13s
2026-07-11 14:22:02 +08:00
ogt
6cb73aa566 fix(cd): preserve docker push retries
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 59s
CD Pipeline / build-and-deploy (push) Successful in 6m46s
CD Pipeline / post-deploy-checks (push) Successful in 3m4s
2026-07-11 12:44:12 +08:00
ogt
478be85854 Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710
# Conflicts:
#	.gitea/workflows/cd.yaml
2026-07-11 11:27:52 +08:00
ogt
4a4b95e513 fix(iwooos): repair wazuh host trust and retry
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m27s
CD Pipeline / build-and-deploy (push) Successful in 6m53s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 1m4s
CD Pipeline / post-deploy-checks (push) Successful in 1m51s
2026-07-11 10:13:02 +08:00
ogt
93510c0703 feat(iwooos): run wazuh posture receipt chain
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 1m38s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-11 09:29:52 +08:00
ogt
3f6f7a67ce feat(ai): verify canonical learning writeback
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m42s
CD Pipeline / build-and-deploy (push) Successful in 6m29s
CD Pipeline / post-deploy-checks (push) Successful in 1m48s
AI 技術雷達監控 / ai-technology-watch (push) Successful in 45s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 50s
2026-07-11 07:40:48 +08:00
ogt
6e24f4cba4 feat(ai): verify ansible apply from independent state
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m24s
CD Pipeline / build-and-deploy (push) Successful in 7m55s
CD Pipeline / post-deploy-checks (push) Successful in 1m45s
2026-07-11 06:38:11 +08:00
ogt
f453359e34 feat(ai): enforce single-writer automation router
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m21s
CD Pipeline / build-and-deploy (push) Successful in 6m53s
CD Pipeline / post-deploy-checks (push) Successful in 1m55s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 49s
2026-07-11 05:45:48 +08:00
ogt
0660813781 fix(security): verify workload DB concurrency budget
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m19s
CD Pipeline / build-and-deploy (push) Successful in 6m54s
CD Pipeline / post-deploy-checks (push) Successful in 2m6s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 1s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 48s
2026-07-11 04:44:23 +08:00
ogt
262c9c8a7e fix(security): isolate workload database identities
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m25s
CD Pipeline / build-and-deploy (push) Successful in 6m42s
CD Pipeline / post-deploy-checks (push) Successful in 1m50s
2026-07-11 04:20:08 +08:00
ogt
17171e1027 fix(agent): stabilize runtime truth and DB boundary
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m22s
CD Pipeline / build-and-deploy (push) Successful in 7m12s
CD Pipeline / post-deploy-checks (push) Successful in 3m49s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Failing after 1m47s
2026-07-11 03:00:16 +08:00
ogt
7fdda7f055 Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710
# Conflicts:
#	.gitea/workflows/cd.yaml
#	apps/api/tests/test_executor_network_policy_boundary.py
2026-07-11 02:16:44 +08:00
ogt
6322abde9d Merge remote-tracking branch 'origin/main' into codex/ai-automation-codebase-review-20260710
# Conflicts:
#	.gitea/workflows/cd.yaml
#	apps/api/tests/test_executor_network_policy_boundary.py
2026-07-11 02:14:03 +08:00
ogt
96b38fb17a fix(cd): make boundary rollback conflict-free
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m33s
CD Pipeline / build-and-deploy (push) Successful in 6m10s
AWOOOI Harbor 110 Local Repair / workflow-shape (push) Successful in 0s
AWOOOI Harbor 110 Local Repair / harbor-110-local-repair (push) Successful in 51s
CD Pipeline / post-deploy-checks (push) Successful in 2m28s
2026-07-11 02:11:56 +08:00
ogt
565edcdfb3 fix(cd): snapshot live network policy for rollback 2026-07-11 01:56:38 +08:00
ogt
954abc6864 fix(cd): snapshot live network policy for rollback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m25s
CD Pipeline / build-and-deploy (push) Failing after 5m54s
AI 技術雷達監控 / ai-technology-watch (push) Successful in 43s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-11 01:56:16 +08:00
ogt
85159f25a0 fix(security): restrict executor SSH egress
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m32s
CD Pipeline / build-and-deploy (push) Failing after 6m7s
CD Pipeline / post-deploy-checks (push) Has been skipped
2026-07-11 01:42:31 +08:00
ogt
de5e29360f fix(agent): preserve executor boundary runtime proof
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m5s
CD Pipeline / build-and-deploy (push) Successful in 4m38s
CD Pipeline / post-deploy-checks (push) Has been cancelled
2026-07-11 01:36:41 +08:00
ogt
c185d7544b fix(security): isolate allowlisted execution broker
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m9s
CD Pipeline / build-and-deploy (push) Successful in 4m35s
CD Pipeline / post-deploy-checks (push) Successful in 1m49s
2026-07-11 01:24:01 +08:00
ogt
ab5e963b83 fix(cd): keep deploy checkout on main ref
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m56s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-11 00:47:47 +08:00
ogt
d41a1d37fe fix(ci): keep workflows on Gitea supply chain
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-11 00:35:10 +08:00
ogt
3b8bdcea80 fix(cd): verify API executor boundary in production
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 2m37s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-11 00:12:04 +08:00
ogt
7291b2956a feat(gitea): add feature utilization source contracts 2026-07-10 12:45:33 +08:00
ogt
ec9478235d feat(gitea): add package release promotion receipts 2026-07-10 12:29:56 +08:00
ogt
913be16348 Merge remote-tracking branch 'origin/main' into codex/p0-006-ai-log-triage-20260709
# Conflicts:
#	.gitea/workflows/cd.yaml
2026-07-10 12:08:27 +08:00
ogt
0ff83bf5fd feat(ci): add artifact receipt source contract 2026-07-10 12:06:30 +08:00
ogt
964859292f fix(cd): isolate learning-chain async tests
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 3m47s
CD Pipeline / build-and-deploy (push) Successful in 5m7s
CD Pipeline / post-deploy-checks (push) Has been cancelled
2026-07-10 12:03:59 +08:00
ogt
836d614149 fix(ci): keep gitea readbacks on focused cd profile
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m16s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
2026-07-10 11:59:59 +08:00
ogt
210d7db338 feat(agents): schedule mainstream agent version governance
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled
2026-07-10 10:51:22 +08:00
ogt
abdb1037af fix(cd): keep source link smoke warn-only
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m3s
CD Pipeline / build-and-deploy (push) Successful in 4m30s
CD Pipeline / post-deploy-checks (push) Successful in 3m22s
2026-07-10 01:54:13 +08:00
ogt
61058282ec fix(cd): bound source link post-deploy smoke
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 1m13s
CD Pipeline / build-and-deploy (push) Successful in 7m53s
CD Pipeline / post-deploy-checks (push) Successful in 3m0s
2026-07-10 01:36:56 +08:00