Commit graph

  • 41e68aeb21 wave1: persist canonical L0 schema and fingerprint tooling main Red Queen 2026-09-08 13:10:06 +0000
  • e56567f7cf wave1: formally close provenance foundation production deployment Red Queen 2026-09-04 20:02:48 +0000
  • 36916a073d phase13.6: formally close hardening repair root 2026-09-01 10:20:24 +0000
  • 51c03f7ade phase13.5: formally close runner trustgate remediation root 2026-08-31 23:00:47 +0000
  • 738af54c93 phase13.5: verify recreate post-gates against target class root 2026-08-31 18:54:03 +0000
  • 35bbdd89e7 phase13.5: add bounded recreate startup readiness gate root 2026-08-31 17:29:06 +0000
  • b61acd3f08 phase13.5: fix remediation recreate Gate O runner allowance root 2026-08-31 16:13:40 +0000
  • d6394ef327 RAIN: Phase 13.5 Emergency Rollback CP Repair - target-image-based rollback pre-gates (current/recovery gold). SoT local, no push. root 2026-08-31 12:54:03 +0000
  • a7336c2585 RAIN: Phase 13.5 Remediation Recreate Gate Decoupling + fixed-ID rollback-to-current-gold-anchor (SoT) root 2026-08-31 11:38:41 +0000
  • 41c82f14d3 RAIN Hotfix: Partial Archive Cleanup Semantics (PARTIAL statt UNKNOWN fuer image.tar+fehlende Metadaten, fail-closed) root 2026-08-31 07:51:49 +0000
  • 561133f39b RAIN Hotfix: Remediation Archive Build-Input-Semantik (branch-spezifisch, recovery unveraendert) root 2026-08-31 07:02:48 +0000
  • 75b594f225 Phase 13.5: verify-runner-remediation-image session-binding hotfix (load_remediation_source_state) root 2026-08-31 05:57:34 +0000
  • ce58a067ee Phase 13.5: Deploy verified partial-archive control-plane patch (cleanup-partial-remediation-archive + active remediation image state validation) root 2026-08-30 20:39:13 +0000
  • 3e65c36cce Phase 13.5: Orphan Remediation Staging Cleanup Control-Plane Hotfix (cleanup-partial-remediation-staging) root 2026-08-30 17:31:47 +0000
  • f69774e34b Phase 13.5 Remediation Staging Consistency + Active Image ID Hotfix: remediation_staging_matches_expected entfernt fehlerhaftes | sort (SHA-sortiert) das gegen Pfad-sortiertes Staging-Manifest verglich -> Staging-Check FAIL CLOSED trotz identischem Inhalt. Fix: exp ohne | sort (remediation_expected_manifest erzeugt bereits Pfad-sortiert). Active-ID bereits state-basiert (remediation_session/full_image_id), 41e357a1 nur noch dokumentarisch. Verdict A. root 2026-08-30 16:58:10 +0000
  • c95fbe6b3c Phase 13.5 Remediation Build-Context Control-Plane Rotation: build-runner-remediation von /opt/historical-v2 auf immutable Gold-Source-Session 20260830_104127 + autorisierter Runner-Overlay 6cca3c55; Guards A/B/C/D/N auf Gold+Overlay; Guard I diagnostisch (No-op-Tag-Loss NON-BLOCKING); verify_runner_remediation_image 62+1 + repository.py Hard Gate; verify_archive/pin/archive aktive Build-Session-Identity; deterministischer REMEDIATION_BUILD_INPUT_SHA root 2026-08-30 16:36:42 +0000
  • 8161208f1c Phase 13.5 Archive Metadata Variable Hotfix: gen_archive_meta nach write_runtime_config/write_app_manifest + SHA-Validierung (unbound variable Fix) root 2026-08-30 14:22:14 +0000
  • 9685b616cf Phase 13.5 Recovery Archive Hotfix: Fix A (Reihenfolge-Bug nach docker image save) + cleanup-partial-recovery-archive Command root 2026-08-30 11:34:11 +0000
  • a9d7da14f5 Phase 13.5 Recovery Rebuild Guard Source Rotation: rebuild_guards Guard A/B/C auf Gold-Source-Session (verify-recovered-gold-build-source + verify_recovery_build_input), Host-SoT-Drift non-blocking Diagnostic, kein /opt/historical-v2 als Recovery-Build-Blocker root 2026-08-30 11:10:07 +0000
  • d7db920116 Phase 13.5 Nested Verify Exit Hotfix: verify_deployed_gold_source + verify_recovered_gold_build_source exit 0 -> return 0 (nested-call Guard-Defekt) Rain Ocampo 2026-08-30 10:28:46 +0000
  • 8f29924ec6 Phase 13.5 Recovery Control-Plane Rotation: real recover freigegeben, Build-Context-Rotation (kein /opt/historical-v2), Recovery-Identity-Rotation (CURRENT_RECOVERY_ID statt d2db), READY-Gate, wrapper-sha Rain Ocampo 2026-08-30 09:26:59 +0000
  • 563ed111b9 Phase 13.5: Deployed Gold Source Recovery Control Plane - feste Subcommands verify-deployed-gold-source / dry-run recover-gold-build-source / recover-gold-build-source (real blockiert) / verify-recovered-gold-build-source; Gold-Source fest an Container+Image+63-File-Manifest gebunden, kein latest, kein full_sot_backup, immutable Target, FAIL CLOSED root 2026-08-30 08:46:32 +0000
  • 65c1d57fa7 Phase 13.5: Image Retention & Archive Control Plane - feste Subcommands archive/pin/verify-archive/verify-pin/verify-ready/dry-run restore (FAIL CLOSED, kein Overwrite, kein Coolify-Cleanup-Disable, kein coolify.managed-Spoof); Restore nur dry-run (real blockiert) root 2026-08-30 06:05:56 +0000
  • 8187a4bc1d Phase 13.5: Authorized Remediation Divergence Verify Fix - verify-runner-remediation-image nutzt gemeinsame authorized_gold_delta-Policy (exakt 1 autorisierte Runner-Divergenz, alles andere FAIL CLOSED); Candidate-vs-Host-SoT direkter Vergleich; verify_critical_files runner-Flag Rain Ocampo 2026-08-29 23:56:14 +0000
  • 6194868100 Phase 13.5: Remediation Build/Deploy Control Plane - build-runner-remediation, verify-runner-remediation-image, recreate-runner-remediation-safe, verify-remediation-build-input; Full/Partial SoT-Backup-Klassifikation (Blocker A) Rain Ocampo 2026-08-29 23:01:57 +0000
  • 223fa33f50 Phase 13.5: Persistent Host-SoT Patch Promotion Channel - promote-runner-patch, rollback-runner-patch (SHA-bound, atomic, FAIL CLOSED) root 2026-08-29 20:59:30 +0000
  • 6bcad03e18 Phase 13.5: Final Reproduction Control Plane - pin-current-candidate, verify-candidate-image, recreate-candidate-safe, rollback-to-recovery-gold (Safe Recreate + Rollback Prep) root 2026-08-29 19:17:23 +0000
  • 9d2bfe3ae4 CP2A2: verify-recovery-gold-image PATH-NORMALIZATION-FIX (Image-Manifest app/-Präfix, Container-Pfad /app/app) + Critical-File-Pfadfix root 2026-08-29 19:08:42 +0000
  • c6046feaf2 CP2A2: rq-historical build-recovery-gold Kanal (fix Context/Dockerfile/Tag, 7 Guards, DIRECT-Tag no-latest, verify-recovery-gold-image, Host-Legacy-Guard) root 2026-08-29 18:46:00 +0000
  • efe13ec92d Phase 13.5: Recovery-Gold-Snapshot-Kanal (snapshot-recovery/verify/dry-run, 14 Guards, fail-closed) | Rain Ocampo 2026-08-29 root 2026-08-29 18:12:04 +0000
  • c9b3dafd9f rq-historical: CONTROLLED NO-OP BUILD/RECREATE Kanal (build-historical, recreate-historical, verify-gold-reproduction) — dry-run Mutation Guard, .dockerignore Build-Pollution-Exclusion, fail-closed, kein echter Build/Recreate root 2026-08-29 16:50:17 +0000
  • 64240ea3b1 rq-historical: HOST-SOT-RECOVERY Kanal (backup-sot, recover-sot, verify-sot-recovery, restore-sot) — Gold-SHA-gebunden, fail-closed, kein Build Rain Ocampo 2026-08-29 15:56:57 +0000
  • 9129e76a6d rq-historical: SOT-Discovery read-only Kanal (build-def, build-files, host/container-manifest, host/container-code, tree-diff) — redacted Secrets Rain Ocampo 2026-08-29 15:24:28 +0000
  • 6324c8aaac rq-historical: add dev/test/deploy channel (stage-check,test,deploy,backup,rollback,search-writes,healthcheck) root 2026-08-29 10:34:59 +0000
  • bbfd85e472 rq-historical: add READ-ONLY code/hashes/code-list (allowlist) for RQ Phase 13.5 root 2026-08-29 09:51:04 +0000
  • a0c388ab18 CP2A2.2B: Fix worker UID/GID to 10000/10000 (hermes user in base image) - non-root hardening correction root 2026-08-29 07:17:11 +0000
  • 7a4220d86d CP2A2.2B: L1 Red Queen Worker Foundation - separate minimal worker runtime (non-root, read-only rootfs, cap-drop ALL, no-new-privileges, internal-net, credential-zero, inert idle, NO autonomy/heartbeat/scheduler) root 2026-08-29 07:16:28 +0000
  • 7b58d27fa0 CP2A1: Trusted Gate Evaluator (External Gate Enforcement Foundation) - non-productive, no autonomy, CP1-logic reuse, fail-closed, internal-net, no credentials root 2026-08-28 13:24:58 +0000
  • 058c92e5d0 CP1.1: PRE_HERMES Control Plane SOT closure - 5-control scope (trading_execution removed), RED_QUEEN_TRADING_AUTHORITY=NEVER, reproducible deployment Red Queen 2026-08-28 11:27:31 +0000
  • b6c9da3e12 CP1.1: Control Plane SoT closure - reader, tests, deploy script, ops contract Rain Ocampo 2026-08-28 09:18:04 +0000
  • dcc6d8a098 AUTH.4D: P10/P11 test suite + mutation/sensitivity tests Rain Ocampo 2026-08-28 02:30:19 +0000
  • 9c2d6e365a AUTH.4D: DELETE-scoped executor + delete_request_id binding in SoT core Rain Ocampo 2026-08-28 02:28:48 +0000
  • 5f3adda73f AUTH.4C3: Dockerfile kopiert save_reconciliation.py ins Image (BUILD_REPRODUCIBLE_FROM_SOT) Red Queen 2026-08-27 16:52:11 +0000
  • dbc31ad1bb AUTH.4C3: OUTCOME_UNKNOWN read-only reconciliation contract — RECONCILED state, immutable-field guard, provenance recompute, fail-closed classification, 61 isolated tests (reconciliation 30, incident fixture 5, adversarial 14, sensitivity 12) Red Queen 2026-08-27 15:57:06 +0000
  • 2e631fd5fa AUTH.4C2: relative vault path contract repair (OPTION A) — canonical relative path, absolute/traversal fail-closed, no approval_payload dual-semantics, 20 path-contract tests Red Queen 2026-08-27 13:23:56 +0000
  • 2ba503df0e AUTH.4C1: SoT reconciliation — runtime wiring (entrypoint, worker, tolaria_client, forgejo_source_loader, Dockerfile) + Read-Back-Verifikation + SHA1-Korrektur Red Queen 2026-08-27 13:23:43 +0000
  • 9f3ed82cfc AUTH.4C2: First Productive SAVE Canary (tolaria/auth4c2-canary.md) Red Queen 2026-08-27 12:47:50 +0000
  • 373425fc0d AUTH.3E: Audit-Trail trennt REQUESTED/AUTHORIZED/EXECUTED (Fresh Checker Punkt 27) Red Queen 2026-08-27 10:09:18 +0000
  • 10761f52b2 AUTH.3E: Executor Command Channel + Runtime Boundary Contract Red Queen 2026-08-27 10:03:32 +0000
  • 9c8d239ae5 AUTH.3D: Human DELETE Approval Authenticity (Ed25519, verify-only) Red Queen 2026-08-27 09:36:21 +0000
  • a11c1bbe53 AUTH.3A: C5 Caller Auth Integration (SAVE/DELETE Credential, fail-closed, Tests, Sensitivity, Gap-Doku) Red Queen 2026-08-27 08:42:26 +0000
  • 40bbc40a49 PRE_HERMES_SECURITY_GATE AUTH.1: Tolaria Write Auth Contract + isolierte Test-Suite Red Queen 2026-08-27 05:57:22 +0000
  • 9402a92cc3 C5G.1: Acceptance/Exit-Criteria test (17 tests, 12/12 adversarial sensitivity) Red Queen 2026-08-27 04:12:20 +0000
  • 951868dda9 C5F: Remove controlled canary object (c5f-controlled-canary.md) Red Queen 2026-08-26 19:26:28 +0000
  • 3db1c71b68 C5: Human-Gated DELETE Execution Contract (Todo 7-13) Red Queen 2026-08-26 19:22:44 +0000
  • 363f27327b fix(tolaria): C5D source_provenance persistence contract (OPTION A) Red Queen 2026-08-26 16:07:49 +0000
  • 76512ddd48 fix(tolaria): C5A reason-code closed-set accepts C5D build code Red Queen 2026-08-26 15:24:03 +0000
  • 747376ebb0 fix(tolaria): adopt externally completed search rebuild Red Queen 2026-08-26 15:18:27 +0000
  • 12635e8672 fix(tolaria): C5F Phase B — search-source indexability path-independent (valid C3 object_id suffices; LEGACY kept; out-of-scope dirs no longer auto-exclude indexable knowledge) Red Queen 2026-08-26 13:05:13 +0000
  • 5e4191578a fix(tolaria): C5D search-source pipeline — build+verify source from current Tolaria before rebuild Red Queen 2026-08-26 12:12:45 +0000
  • f451283276 fix(tolaria): allow propagate_commit resume from PROPAGATING_TOLARIA crash-window Red Queen 2026-08-26 10:48:10 +0000
  • c5b3db153a fix(tolaria): handle null success response from vault save Red Queen 2026-08-26 10:23:14 +0000
  • 238536710a fix(tolaria): handle missing vault object in C5C read path Red Queen 2026-08-26 10:03:40 +0000
  • 63f957f4fb c5f: add controlled canary object (C5F CONTROLLED CANARY) Red Queen 2026-08-26 08:11:42 +0000
  • 3289098040 C5E: Fix replay crash-window (PROPAGATING_TOLARIA/READY + all objects propagated) via formal VERIFYING_TOLARIA path Rain Ocampo 2026-08-26 07:06:50 +0000
  • 22e1cd0d44 C5E: FAILURE/REPLAY/RECOVERY + OBSERVABILITY (fail-closed Library) Red Queen 2026-08-26 06:54:10 +0000
  • 1404e78cb9 c5d: search integration + commit completion (UPDATING_SEARCH->VERIFYING_SEARCH->APPLIED) Red Queen 2026-08-26 06:15:33 +0000
  • 8d7647b113 fix(tolaria): repair C5C retry state transitions and add retry tests Red Queen 2026-08-26 05:57:55 +0000
  • 763f1ca9da feat(tolaria): add C5 Tolaria propagation and drift verification Red Queen 2026-08-26 05:55:38 +0000
  • ed374ac4ce fix(c5b): persist human-review object changes + read content_before from parent commit Red Queen 2026-08-26 05:20:38 +0000
  • 091c1828c7 feat(tolaria): add C5 Forgejo polling and change detection Red Queen 2026-08-26 05:13:33 +0000
  • 183afed1d6 feat(tolaria): add C5 sync state machine Red Queen 2026-08-26 05:03:19 +0000
  • 68db35f55c docs(tolaria): add C5 sync architecture design Red Queen 2026-08-26 04:31:56 +0000
  • 4122bdd408 fix(tolaria-search): repair admin rebuild source path Rain Ocampo 2026-08-26 03:37:26 +0000
  • 29cbca9357 docs(tolaria): add C4 Search v1 production deployment plan (C4B) Red Queen 2026-08-26 02:45:34 +0000
  • aad56a26ea feat(tolaria): add C4B keyword and metadata search service Red Queen 2026-08-25 20:28:37 +0000
  • 35446c03df feat(tolaria): C3I final individual decisions — reconcile modul-12 + migrate modul-18/19 root-only to schema v1 Red Queen 2026-08-25 19:27:07 +0000
  • 022c30e537 feat(tolaria): migrate C3H HR wave 1 — 16 safe root↔canonical pairs to schema v1 Red Queen 2026-08-25 19:19:02 +0000
  • adbb96d04a feat(tolaria): migrate final auto-safe knowledge batch 3 to schema v1 Red Queen 2026-08-25 19:06:44 +0000
  • 7ae7249c00 feat(tolaria): migrate auto-safe knowledge batch 2 to schema v1 Red Queen 2026-08-25 18:48:25 +0000
  • 38049b1475 feat(tolaria): migrate auto-safe knowledge batch 1 to schema v1 Red Queen 2026-08-25 18:29:35 +0000
  • c1453b65ce feat(tolaria): migrate ports-reference pair to knowledge schema v1 Red Queen 2026-08-25 18:03:57 +0000
  • 47f80bc34d docs(tolaria): canonicalize modul-09 system documentation Red Queen 2026-08-25 16:56:37 +0000
  • e8a9804f8e docs(tolaria): align four canonical system-docs with master Red Queen 2026-08-25 16:34:44 +0000
  • fd4ac59acd M006: Notion PROJECT COMMAND CENTER Doku (COMPLETE, Fresh Checker PASS) Red Queen 2026-08-25 12:41:27 +0000
  • 36c804325b docs: RQ-NOTION-PILOT-20260825-001 Pilot-Backup-Doku (Notion Safety Brain) Red Queen 2026-08-25 07:35:31 +0000
  • 9b89ed77bb notion-safety-brain: Mission 003 Discovery & Architecture docs (11 files) Red Queen 2026-08-25 05:49:25 +0000
  • 819fd8a6ff tolaria: Mission 002 B1 Foundation & Backup docs (10 files) Red Queen 2026-08-25 05:21:29 +0000
  • 1dc44d3b4f docs(tolaria): discovery & forensic audit — READ-ONLY IST-Zustand, 9 Analyse-Dokumente tolaria-discovery Red Queen 2026-08-25 04:32:47 +0000
  • 968094498a feat(a5): Controlled Heartbeat & Resume v1 Red Queen 2026-08-24 23:04:16 +0000
  • a6a7ca62f4 feat(a4): bounded orchestrator v1 (deterministic orchestration logic, A2/A3 integration, 83 tests PASS) Red Queen 2026-08-24 21:31:09 +0000
  • 43f6da153a feat(a3): deterministic safety layer v1 (attempt ledger, retry, circuit breaker) Red Queen 2026-08-24 20:46:19 +0000
  • e8881436bb docs(a2): add A2 README (architecture, modules, rollback) Red Queen 2026-08-24 20:19:32 +0000
  • 581253cda9 docs(a1): fix typo 'wo manten' -> 'Worktree behalten' + A2 status note Red Queen 2026-08-24 20:18:36 +0000
  • dbbbb1dddc feat(a2): persistent mission state & state machine Red Queen 2026-08-24 20:18:32 +0000
  • 3d738e6015 docs(a1): Red Queen architecture & contracts Red Queen 2026-08-24 19:24:12 +0000
  • 16a104822e Phase 13.4: Historical Data Trust Gate (Provenance + Sanity Validation) - Doku - Rain Ocampo, 24.08.2026 root 2026-08-24 11:05:32 +0000
  • 4d421eab0d Phase 10e: Intrabar Execution + Gap Execution Realism - formal verifikativ abgeschlossen (Doku) - Rain Ocampo, 23.08.2026 Rain Ocampo 2026-08-23 14:53:17 +0000
  • 69aecf2bb3 Phase 10d: Commission/Fees cost_model_v1_simple - Deterministische Fees, Regression+Deploy+Smoke 2x gruen - Rain Ocampo, 23.08.2026 Rain Ocampo 2026-08-23 13:56:47 +0000
  • 1cb7022fc9 Phase 10c: Deterministische Slippage (DETERMINISTIC_FIXED) - formal verifikativ abgeschlossen (Doku) - Rain Ocampo, 23.08.2026 Rain Ocampo 2026-08-23 10:25:16 +0000