Commit graph

12 commits

Author SHA1 Message Date
Rain Ocampo
8187a4bc1d Phase 13.5: Authorized Remediation Divergence Verify Fix - verify-runner-remediation-image nutzt gemeinsame authorized_gold_delta-Policy (exakt 1 autorisierte Runner-Divergenz, alles andere FAIL CLOSED); Candidate-vs-Host-SoT direkter Vergleich; verify_critical_files runner-Flag 2026-08-29 23:56:14 +00:00
Rain Ocampo
6194868100 Phase 13.5: Remediation Build/Deploy Control Plane - build-runner-remediation, verify-runner-remediation-image, recreate-runner-remediation-safe, verify-remediation-build-input; Full/Partial SoT-Backup-Klassifikation (Blocker A) 2026-08-29 23:01:57 +00:00
root
223fa33f50 Phase 13.5: Persistent Host-SoT Patch Promotion Channel - promote-runner-patch, rollback-runner-patch (SHA-bound, atomic, FAIL CLOSED) 2026-08-29 20:59:30 +00:00
root
6bcad03e18 Phase 13.5: Final Reproduction Control Plane - pin-current-candidate, verify-candidate-image, recreate-candidate-safe, rollback-to-recovery-gold (Safe Recreate + Rollback Prep) 2026-08-29 19:17:23 +00:00
root
9d2bfe3ae4 CP2A2: verify-recovery-gold-image PATH-NORMALIZATION-FIX (Image-Manifest app/-Präfix, Container-Pfad /app/app) + Critical-File-Pfadfix 2026-08-29 19:08:42 +00:00
root
c6046feaf2 CP2A2: rq-historical build-recovery-gold Kanal (fix Context/Dockerfile/Tag, 7 Guards, DIRECT-Tag no-latest, verify-recovery-gold-image, Host-Legacy-Guard) 2026-08-29 18:46:00 +00:00
root
efe13ec92d Phase 13.5: Recovery-Gold-Snapshot-Kanal (snapshot-recovery/verify/dry-run, 14 Guards, fail-closed) | Rain Ocampo 2026-08-29 2026-08-29 18:12:04 +00:00
root
c9b3dafd9f rq-historical: CONTROLLED NO-OP BUILD/RECREATE Kanal (build-historical, recreate-historical, verify-gold-reproduction) — dry-run Mutation Guard, .dockerignore Build-Pollution-Exclusion, fail-closed, kein echter Build/Recreate 2026-08-29 16:50:17 +00:00
Rain Ocampo
64240ea3b1 rq-historical: HOST-SOT-RECOVERY Kanal (backup-sot, recover-sot, verify-sot-recovery, restore-sot) — Gold-SHA-gebunden, fail-closed, kein Build 2026-08-29 15:56:57 +00:00
Rain Ocampo
9129e76a6d rq-historical: SOT-Discovery read-only Kanal (build-def, build-files, host/container-manifest, host/container-code, tree-diff) — redacted Secrets 2026-08-29 15:24:28 +00:00
root
6324c8aaac rq-historical: add dev/test/deploy channel (stage-check,test,deploy,backup,rollback,search-writes,healthcheck) 2026-08-29 10:34:59 +00:00
root
bbfd85e472 rq-historical: add READ-ONLY code/hashes/code-list (allowlist) for RQ Phase 13.5 2026-08-29 09:51:04 +00:00