Commit graph

  • c77bc1a9bf release: 0.3.0 dan-claude-bot 2026-07-21 14:50:19 +0000
  • 6b012ab548
    Merge pull request #104 from dan-claude-bot/refactor/drills-per-version Daniel Marin 2026-07-21 18:41:34 +0100
  • 186d976686 fix: the guard's comment misstated set -e, and the form now matches its twins dan-claude-bot 2026-07-21 17:12:54 +0000
  • dbe04c7c36 test: the guard's verdict must match the tree, not always pass dan-claude-bot 2026-07-21 16:42:41 +0000
  • 11dfeb2ecd refactor: one drill record per version, in drills/ dan-claude-bot 2026-07-21 16:27:08 +0000
  • 750d93deda
    Merge pull request #102 from dan-claude-bot/feat/drill-gate Daniel Marin 2026-07-21 17:23:34 +0100
  • b234f48e68 test: pin that whitespace is not a drill record dan-claude-bot 2026-07-21 15:59:57 +0000
  • 77a9a1ad76 feat: CI refuses a release PR with no drill record dan-claude-bot 2026-07-21 15:24:42 +0000
  • b8ce8e5e1c
    Merge pull request #100 from dan-claude-bot/docs/changelog-one-line Daniel Marin 2026-07-21 15:44:03 +0100
  • d69ecd1104 docs(changelog): one line per entry, and a pass over the whole file dan-claude-bot 2026-07-21 13:50:43 +0000
  • 9c82d56230
    Merge pull request #93 from claude-bot-andresmgsl/fix/sshd-privsep-verdict Daniel Marin 2026-07-21 14:07:35 +0100
  • 9adf45a229
    Merge pull request #99 from dan-claude-bot/fix/changelog-monotonic Daniel Marin 2026-07-21 00:36:37 +0100
  • 1db7779b03 test: terminate the ci.yml step block at the job boundary too dan-claude-bot 2026-07-20 20:56:57 +0000
  • c199e8fd04 fix(changelog-monotonic): report containment vacuous when the base IS HEAD dan-claude-bot 2026-07-20 20:49:02 +0000
  • 27a5fa282e
    Merge pull request #97 from dan-claude-bot/fix/labels-sweep-on-labeled Daniel Marin 2026-07-20 21:32:44 +0100
  • 7ffc30bacc fix(changelog-monotonic): check uniqueness before anything base-side (#98) dan-claude-bot 2026-07-20 20:22:43 +0000
  • 0865ce6c02 fix(changelog): cite the sibling PRs, not the tracking issues dan-claude-bot 2026-07-20 20:07:58 +0000
  • b2e7febf08 fix: catch a deleted or duplicated release heading in CHANGELOG.md (#98) dan-claude-bot 2026-07-20 20:00:48 +0000
  • 23cca65855 fix(labels): sweep on labeled so the handoff is immediate dan-claude-bot 2026-07-20 19:44:07 +0000
  • ac1bb3bf76
    Merge pull request #94 from dan-claude-bot/docs/contributing-blocker-axis Daniel Marin 2026-07-20 20:27:32 +0100
  • 9ba16946fd
    Merge pull request #91 from codex-bot-andresmgsl/fix/issue-89-readme-channel Daniel Marin 2026-07-20 19:41:12 +0100
  • 8b2ddbdd2d docs(contributing): document the blocker axis and merge-next ownership dan-claude-bot 2026-07-20 18:40:12 +0000
  • 88d83a1aba
    Merge pull request #90 from dan-claude-bot/fix/labels-two-axis Daniel Marin 2026-07-20 19:30:07 +0100
  • 5eddf2e2ed fix(labels): a missing state label skips the edit, not the whole PR dan-claude-bot 2026-07-20 18:02:03 +0000
  • 2dc47112f2 fix: don't read a missing /run/sshd as a broken sshd config claude-bot-andresmgsl 2026-07-20 17:58:10 +0000
  • 491055c4cf docs: point stable installs at matching README codex-bot-andresmgsl 2026-07-20 17:50:18 +0000
  • b07e734fc0 fix(labels): survive a repo that lacks the new blocker labels dan-claude-bot 2026-07-20 17:49:44 +0000
  • 4f40cfabf2 fix(labels): distinguish an unreadable check rollup from no checks dan-claude-bot 2026-07-20 17:38:32 +0000
  • 4ea3579c2e docs(changelog): record that CI never ran the label fixtures dan-claude-bot 2026-07-20 17:34:21 +0000
  • b88495105d test: tighten README channel contract codex-bot-andresmgsl 2026-07-20 17:32:43 +0000
  • 3f6f05766f refactor(labels): split PR labels into state and blocker axes dan-claude-bot 2026-07-20 17:30:53 +0000
  • 32e17246a2 docs: align README quick start with main codex-bot-andresmgsl 2026-07-20 17:30:11 +0000
  • 616ada76b9
    Merge pull request #88 from dan-claude-bot/fix/labels-mergeability-aware Daniel Marin 2026-07-20 18:02:57 +0100
  • 108a944e1c chore(labels): converge reconciler and fixtures on the canonical text dan-claude-bot 2026-07-20 16:44:19 +0000
  • 57e37363f4 fix(labels): order check runs by one consistent quantity — when they began dan-claude-bot 2026-07-20 16:32:53 +0000
  • 800571fdfb fix(labels): date a check run by when it started, not by a zero completion dan-claude-bot 2026-07-20 16:18:50 +0000
  • a0951eacf8 fix(labels): unrecognised check outcomes block, and STALE outranks MISSING dan-claude-bot 2026-07-20 16:05:39 +0000
  • ef798f302c fix(labels): state:needs-human means a human could merge it right now dan-claude-bot 2026-07-20 15:26:54 +0000
  • 762cc9653e
    Merge pull request #84 from dan-claude-bot/feat/manifest-provenance Daniel Marin 2026-07-20 14:06:01 +0100
  • d2e03ce993 fix: read a manifest's final line when the file has no trailing newline dan-claude-bot 2026-07-20 11:27:55 +0000
  • 5c40e906a1 feat: /etc/rig/manifest — which rig converged this machine, and when dan-claude-bot 2026-07-20 10:05:13 +0000
  • d6e8cdda06
    Merge pull request #74 from dan-claude-bot/feat/platform Daniel Marin 2026-07-20 13:46:00 +0100
  • e11247b467 docs: the provenance comment matches #61's pinned contract, not the old story dan-claude-bot 2026-07-20 12:41:30 +0000
  • 92cdb327b9
    Merge pull request #81 from dan-claude-bot/test/at-risk-gate-pin Daniel Marin 2026-07-20 13:36:55 +0100
  • b5e01296ee
    Merge pull request #73 from dan-claude-bot/fix/users-apply-empty-file Daniel Marin 2026-07-20 13:36:35 +0100
  • d3577b9954 docs: a fresh bootstrap writes both pairs equal, not a missing converged_* dan-claude-bot 2026-07-20 00:34:26 +0000
  • 91a8905a71 fix: platform reads #61's actual manifest schema, not invented keys dan-claude-bot 2026-07-20 00:22:01 +0000
  • 3cfbb8921c fix: platform reads a manifest whose last line lacks a newline dan-claude-bot 2026-07-20 00:00:57 +0000
  • 75ef386601 feat: rig platform — what is this machine, computed not stored dan-claude-bot 2026-07-19 23:35:58 +0000
  • 8d4f6da64c test: pin the at-risk gate's floor at one operator dan-claude-bot 2026-07-20 09:56:47 +0000
  • 8d03184e55 fix: gate 'users apply' on an empty file that would revoke everyone dan-claude-bot 2026-07-19 23:35:42 +0000
  • 30ccb638dc
    Merge pull request #82 from dan-claude-bot/test/read-guard-sweep-bin-rig Daniel Marin 2026-07-20 13:24:23 +0100
  • 1ad90410bf
    Merge pull request #72 from dan-claude-bot/fix/uninstall-confirm-eof Daniel Marin 2026-07-20 13:23:50 +0100
  • d144ae379c test: widen the read-guard sweep to bin/ and to plain-statement reads dan-claude-bot 2026-07-20 09:58:19 +0000
  • 880e95df21 fix: uninstall_confirm swallows Ctrl-D — the abort was silent dan-claude-bot 2026-07-19 23:32:24 +0000
  • f972a6994c
    Merge pull request #71 from dan-claude-bot/fix/shellcheck-dotglob Daniel Marin 2026-07-20 13:16:56 +0100
  • 26ff38390b fix: lint .github/scripts with dotglob, and assert the sweep is total dan-claude-bot 2026-07-19 23:31:40 +0000
  • 0f2ec1c893
    Merge pull request #83 from dan-claude-bot/feat/root-door-trait Daniel Marin 2026-07-20 13:05:46 +0100
  • 435693860a
    Merge pull request #80 from dan-claude-bot/feat/tenant-role-suffixes Daniel Marin 2026-07-20 13:05:24 +0100
  • e2a8a647e4
    Merge pull request #79 from dan-claude-bot/feat/machine-role-suffixes Daniel Marin 2026-07-20 13:05:06 +0100
  • 4bbf1babe0 fix(users): the root-door resolver matches whole fields, not substrings dan-claude-bot 2026-07-20 11:18:37 +0000
  • b1c1357f2b feat(users)!: --class human|server becomes --root-door closed|open dan-claude-bot 2026-07-20 10:02:50 +0000
  • 94d9628766 feat(bootstrap)!: box tenant roles carry a -box suffix dan-claude-bot 2026-07-20 00:05:19 +0000
  • 00f6351e28 fix(bootstrap): stop telling operators to run bare roles; pin the migration dan-claude-bot 2026-07-20 00:21:35 +0000
  • 1845468765 feat(bootstrap)!: machine roles carry a -server suffix; staging-server restored dan-claude-bot 2026-07-20 00:01:16 +0000
  • d3b12742fd chore: bump main to 0.2.1-dev — a dev install must not impersonate 0.2.0 github-actions[bot] 2026-07-19 23:04:35 +0000
  • 1acc163163
    Merge pull request #69 from dan-claude-bot/release/0.2.0 0.2.0 Daniel Marin 2026-07-20 00:04:21 +0100
  • 0ea1933c99 release: 0.2.0 dan-claude-bot 2026-07-19 21:31:55 +0000
  • fcbe363a04
    Merge pull request #67 from dan-claude-bot/fix/changelog-rearm Daniel Marin 2026-07-19 22:06:49 +0100
  • 71c749e818
    Merge pull request #59 from dan-claude-bot/fix/empty-users-file Daniel Marin 2026-07-19 20:46:12 +0100
  • a43d91e7f9 docs(changelog): the changelog re-arm entry (#67) dan-claude-bot 2026-07-19 19:41:49 +0000
  • 971f33096d fix(release): re-arm the changelog heading, and guard it against VERSION dan-claude-bot 2026-07-19 19:40:27 +0000
  • af80c59942 docs(readme): rewrap the empty-users-file paragraph to the file's width dan-claude-bot 2026-07-19 19:37:34 +0000
  • b982399d3c fix(bootstrap): refuse a users file that names no users dan-claude-bot 2026-07-19 17:28:39 +0000
  • f579ce038f
    Merge pull request #54 from dan-claude-bot/feat/bootstrap-takes-users Daniel Marin 2026-07-19 20:17:45 +0100
  • b8dc1154c8 feat!: bootstrap takes the users file dan-claude-bot 2026-07-19 16:17:49 +0000
  • 19b937b858
    Merge pull request #53 from dan-claude-bot/feat/users-apply-grants-tier Daniel Marin 2026-07-19 20:12:09 +0100
  • a950569832 feat: users apply grants the box tier, not just the socket dan-claude-bot 2026-07-19 16:15:55 +0000
  • 71fd0513ab
    Merge pull request #55 from dan-claude-bot/fix/incus-revoke-via-box Daniel Marin 2026-07-19 20:08:00 +0100
  • 0ff520c850 fix: dropping the box role revokes through box, not behind its back dan-claude-bot 2026-07-19 16:18:21 +0000
  • 67386b4303
    Merge pull request #60 from dan-claude-bot/fix/host-no-bare-socket Daniel Marin 2026-07-19 20:02:12 +0100
  • 5a30c72eae chore: bump main to 0.1.1-dev — a dev install must not impersonate 0.1.0 github-actions[bot] 2026-07-19 18:03:46 +0000
  • 6ff90f04ea
    Merge pull request #46 from dan-claude-bot/release/0.1.0 0.1.0 Daniel Marin 2026-07-19 19:03:35 +0100
  • 49471bde4f docs: README's users-apply section matches the new gate (#60 review) dan-claude-bot 2026-07-19 17:50:24 +0000
  • 7614c1c171 docs: the 0.1.0 notes carry #39/#41 — the getent-$HOME installer fix shipped without its entry dan-claude-bot 2026-07-19 14:41:43 +0000
  • a702f1f8be release: 0.1.0 dan-claude-bot 2026-07-19 14:23:52 +0000
  • b8e8e79b87 fix(users): the host= marker gates the box role, not the incus group Claude 2026-07-19 17:29:20 +0000
  • 5902f61da4
    Merge pull request #48 from dan-claude-bot/feat/release-on-merge Daniel Marin 2026-07-19 18:12:09 +0100
  • e533e86322 fix: issues: write — the fallback PR's --label rides the issues API (labels.yml precedent) dan-claude-bot 2026-07-19 16:35:50 +0000
  • 0b6318fe24 chore: the permissions comment must not pre-match the ordering pin's grep dan-claude-bot 2026-07-19 16:34:56 +0000
  • 700e2185eb fix: pull-requests scope for the door's two PR-API calls; docs catch up dan-claude-bot 2026-07-19 16:34:29 +0000
  • 0dbcad2e3a test: pin exactly one on.push key dan-claude-bot 2026-07-19 16:14:42 +0000
  • 4b5d62e405 fix: one on.push key — YAML last-key-wins had dropped the tag door dan-claude-bot 2026-07-19 16:14:13 +0000
  • 053e12d51e feat: the release re-arms main — the -dev bump folds into the release act dan-claude-bot 2026-07-19 16:02:53 +0000
  • 44717863a1 fix: the merge door rides pushes to main — fork PR tokens are read-only dan-claude-bot 2026-07-19 15:44:27 +0000
  • c0cd4a1b15 fix: a -dev endstate is always work — the post-release bump must not run red dan-claude-bot 2026-07-19 15:42:27 +0000
  • d08ec8c6f6 fix: the release label's two meanings part ways in a decide step dan-claude-bot 2026-07-19 15:23:56 +0000
  • 4ce1ab50aa feat: merging a release-labeled PR is the release (#47) dan-claude-bot 2026-07-19 15:19:47 +0000
  • 219b0fbd72
    Merge pull request #45 from dan-claude-bot/fix/release-suite-stamped-tree Daniel Marin 2026-07-19 15:22:15 +0100
  • 589854ae0b fix: the release suite accepts the ceremony's own tree (#44) dan-claude-bot 2026-07-19 13:48:41 +0000