Rain Ocampo
|
8f29924ec6
|
Phase 13.5 Recovery Control-Plane Rotation: real recover freigegeben, Build-Context-Rotation (kein /opt/historical-v2), Recovery-Identity-Rotation (CURRENT_RECOVERY_ID statt d2db), READY-Gate, wrapper-sha
|
2026-08-30 09:26:59 +00:00 |
|
root
|
563ed111b9
|
Phase 13.5: Deployed Gold Source Recovery Control Plane - feste Subcommands verify-deployed-gold-source / dry-run recover-gold-build-source / recover-gold-build-source (real blockiert) / verify-recovered-gold-build-source; Gold-Source fest an Container+Image+63-File-Manifest gebunden, kein latest, kein full_sot_backup, immutable Target, FAIL CLOSED
|
2026-08-30 08:46:32 +00:00 |
|
root
|
65c1d57fa7
|
Phase 13.5: Image Retention & Archive Control Plane - feste Subcommands archive/pin/verify-archive/verify-pin/verify-ready/dry-run restore (FAIL CLOSED, kein Overwrite, kein Coolify-Cleanup-Disable, kein coolify.managed-Spoof); Restore nur dry-run (real blockiert)
|
2026-08-30 06:05:56 +00:00 |
|
Rain Ocampo
|
8187a4bc1d
|
Phase 13.5: Authorized Remediation Divergence Verify Fix - verify-runner-remediation-image nutzt gemeinsame authorized_gold_delta-Policy (exakt 1 autorisierte Runner-Divergenz, alles andere FAIL CLOSED); Candidate-vs-Host-SoT direkter Vergleich; verify_critical_files runner-Flag
|
2026-08-29 23:56:14 +00:00 |
|
Rain Ocampo
|
6194868100
|
Phase 13.5: Remediation Build/Deploy Control Plane - build-runner-remediation, verify-runner-remediation-image, recreate-runner-remediation-safe, verify-remediation-build-input; Full/Partial SoT-Backup-Klassifikation (Blocker A)
|
2026-08-29 23:01:57 +00:00 |
|
root
|
223fa33f50
|
Phase 13.5: Persistent Host-SoT Patch Promotion Channel - promote-runner-patch, rollback-runner-patch (SHA-bound, atomic, FAIL CLOSED)
|
2026-08-29 20:59:30 +00:00 |
|
root
|
6bcad03e18
|
Phase 13.5: Final Reproduction Control Plane - pin-current-candidate, verify-candidate-image, recreate-candidate-safe, rollback-to-recovery-gold (Safe Recreate + Rollback Prep)
|
2026-08-29 19:17:23 +00:00 |
|
root
|
9d2bfe3ae4
|
CP2A2: verify-recovery-gold-image PATH-NORMALIZATION-FIX (Image-Manifest app/-Präfix, Container-Pfad /app/app) + Critical-File-Pfadfix
|
2026-08-29 19:08:42 +00:00 |
|
root
|
c6046feaf2
|
CP2A2: rq-historical build-recovery-gold Kanal (fix Context/Dockerfile/Tag, 7 Guards, DIRECT-Tag no-latest, verify-recovery-gold-image, Host-Legacy-Guard)
|
2026-08-29 18:46:00 +00:00 |
|
root
|
efe13ec92d
|
Phase 13.5: Recovery-Gold-Snapshot-Kanal (snapshot-recovery/verify/dry-run, 14 Guards, fail-closed) | Rain Ocampo 2026-08-29
|
2026-08-29 18:12:04 +00:00 |
|
root
|
c9b3dafd9f
|
rq-historical: CONTROLLED NO-OP BUILD/RECREATE Kanal (build-historical, recreate-historical, verify-gold-reproduction) — dry-run Mutation Guard, .dockerignore Build-Pollution-Exclusion, fail-closed, kein echter Build/Recreate
|
2026-08-29 16:50:17 +00:00 |
|
Rain Ocampo
|
64240ea3b1
|
rq-historical: HOST-SOT-RECOVERY Kanal (backup-sot, recover-sot, verify-sot-recovery, restore-sot) — Gold-SHA-gebunden, fail-closed, kein Build
|
2026-08-29 15:56:57 +00:00 |
|
Rain Ocampo
|
9129e76a6d
|
rq-historical: SOT-Discovery read-only Kanal (build-def, build-files, host/container-manifest, host/container-code, tree-diff) — redacted Secrets
|
2026-08-29 15:24:28 +00:00 |
|
root
|
6324c8aaac
|
rq-historical: add dev/test/deploy channel (stage-check,test,deploy,backup,rollback,search-writes,healthcheck)
|
2026-08-29 10:34:59 +00:00 |
|
root
|
bbfd85e472
|
rq-historical: add READ-ONLY code/hashes/code-list (allowlist) for RQ Phase 13.5
|
2026-08-29 09:51:04 +00:00 |
|
root
|
a0c388ab18
|
CP2A2.2B: Fix worker UID/GID to 10000/10000 (hermes user in base image) - non-root hardening correction
|
2026-08-29 07:17:11 +00:00 |
|
root
|
7a4220d86d
|
CP2A2.2B: L1 Red Queen Worker Foundation - separate minimal worker runtime (non-root, read-only rootfs, cap-drop ALL, no-new-privileges, internal-net, credential-zero, inert idle, NO autonomy/heartbeat/scheduler)
|
2026-08-29 07:16:28 +00:00 |
|
root
|
7b58d27fa0
|
CP2A1: Trusted Gate Evaluator (External Gate Enforcement Foundation) - non-productive, no autonomy, CP1-logic reuse, fail-closed, internal-net, no credentials
|
2026-08-28 13:24:58 +00:00 |
|
Red Queen
|
058c92e5d0
|
CP1.1: PRE_HERMES Control Plane SOT closure - 5-control scope (trading_execution removed), RED_QUEEN_TRADING_AUTHORITY=NEVER, reproducible deployment
|
2026-08-28 11:27:31 +00:00 |
|
Rain Ocampo
|
b6c9da3e12
|
CP1.1: Control Plane SoT closure - reader, tests, deploy script, ops contract
|
2026-08-28 09:18:04 +00:00 |
|
|
|
581253cda9
|
docs(a1): fix typo 'wo manten' -> 'Worktree behalten' + A2 status note
Kosmetische A1-Fixes (A2 §20), getrennt vom A2-Feature-Commit.
- PARALLEL_EXECUTION.md: Tippfehler korrigiert.
- README.md: Implementierungsstatus (A2 abgeschlossen) ergänzt.
|
2026-08-24 20:18:36 +00:00 |
|
|
|
3d738e6015
|
docs(a1): Red Queen architecture & contracts
|
2026-08-24 19:24:12 +00:00 |
|
