This website requires JavaScript.
506b7506a5
docs(platform): ID beside HOSTNAME — the slot vs the machine, the derivation, and the cloned-image caveat (#95 )
2026-07-24 02:02:59 +0000
bd2918d0c5
test(platform): the identity contract, pinned — derivation, determinism, shape, confidentiality, loud degradation (#95 )
2026-07-24 02:02:08 +0000
f26ed51938
feat(platform): ID names the machine — a namespaced sha256 of /etc/machine-id, computed at run time, stored nowhere (#95 )
2026-07-24 01:59:45 +0000
f9407aea43
docs(drill): the Leg 1 comment stops calling main box's default — it's the BOX_RELEASE pin
2026-07-24 07:47:43 +0000
f00c90738b
Merge pull request #130 from codex-bot-andresmgsl/build/123-entry-templates
2026-07-24 08:46:27 +0100
277d28e01e
docs(drill): the defaults are sane now, and that is exactly the danger
2026-07-24 07:16:42 +0000
b971471b52
docs: add repository entry templates
2026-07-24 02:03:12 +0000
8dcf52940e
Merge pull request #122 from codex-bot-andresmgsl/build/103-box-ref-release-pin
2026-07-24 08:01:14 +0100
3698eb5fbe
Merge pull request #125 from claude-bot-andresmgsl/build/105-drill-harness
2026-07-24 08:00:08 +0100
c02226cb66
fix: propagate pinned box ref
2026-07-24 00:39:24 +0000
7b2de4a9e6
fix: the job poll cannot mistake an old run for the dispatched one, and --help covers its own header
2026-07-24 00:36:00 +0000
5bcd8853d4
docs: the run is written down, and the doctrine stops claiming there is no instrument
2026-07-24 00:34:30 +0000
77cb4bdd64
test: the instrument's honesty, proven without hardware
2026-07-24 00:31:53 +0000
6241e87538
feat: drill/drill.sh — the instrument rig's drill gate never had
2026-07-24 00:26:58 +0000
df29d43a23
Merge pull request #121 from claude-bot-andresmgsl/build/120-kimi-panel
2026-07-24 01:20:37 +0100
493ae31811
fix: pin bootstrap box release
2026-07-23 23:56:54 +0000
0b3c7cb055
fix: kimi-bot-andresmgsl joins the review panel — the roster predated it joining the bench
2026-07-23 23:53:30 +0000
66d304f21f
Merge pull request #112 from claude-bot-andresmgsl/build/13-convert-rig
2026-07-23 12:58:33 +0100
3c72c1b8c3
docs: changelog — the conversion's Unreleased entries (ceremony#13)
2026-07-23 00:29:42 +0000
119fb68359
docs: CONTRIBUTING keeps only rig's specifics — the doctrine is the vendored .ceremony/ mirror (ceremony#13)
2026-07-23 00:29:20 +0000
36da497352
docs: vendor the ceremony doctrine — .ceremony/ mirrors heavy-duty/ceremony@0.1.0, root AGENTS.md routes to it (ceremony#13, ceremony#19)
2026-07-23 00:27:43 +0000
be71e1c8b2
feat: the machinery hands over — guard scripts deleted, CI pins ceremony's actions at 0.1.0 (ceremony#13)
2026-07-23 00:27:10 +0000
e6584ceb2b
feat: labels.yml becomes the ceremony caller — panel and scope taxonomy extracted to labels.conf (ceremony#13)
2026-07-23 00:26:11 +0000
d8a0e22894
feat: release.yml becomes the ceremony caller stub — both doors move upstream (ceremony#13)
2026-07-23 00:25:05 +0000
595a152925
Merge pull request #109 from dan-claude-bot/feat/kimi-box-tenant
2026-07-22 16:06:45 +0100
5bf0acd940
feat: kimi-box joins the box tenant roles — the Kimi CLI agent guest
2026-07-22 15:02:49 +0000
7f8a0e0885
chore: bump main to 0.3.1-dev — a dev install must not impersonate 0.3.0
2026-07-21 18:07:01 +0000
c6a3c23869
Merge pull request #101 from dan-claude-bot/release/0.3.0
2026-07-21 19:06:51 +0100
9b7cb57005
docs: record the 0.3.0 drill as waived, with what that leaves unproven
2026-07-21 17:17:28 +0000
c77bc1a9bf
release: 0.3.0
2026-07-21 14:50:19 +0000
6b012ab548
Merge pull request #104 from dan-claude-bot/refactor/drills-per-version
2026-07-21 18:41:34 +0100
186d976686
fix: the guard's comment misstated set -e, and the form now matches its twins
2026-07-21 17:12:54 +0000
dbe04c7c36
test: the guard's verdict must match the tree, not always pass
2026-07-21 16:42:41 +0000
11dfeb2ecd
refactor: one drill record per version, in drills/
2026-07-21 16:27:08 +0000
750d93deda
Merge pull request #102 from dan-claude-bot/feat/drill-gate
2026-07-21 17:23:34 +0100
b234f48e68
test: pin that whitespace is not a drill record
2026-07-21 15:59:57 +0000
77a9a1ad76
feat: CI refuses a release PR with no drill record
2026-07-21 15:24:42 +0000
b8ce8e5e1c
Merge pull request #100 from dan-claude-bot/docs/changelog-one-line
2026-07-21 15:44:03 +0100
d69ecd1104
docs(changelog): one line per entry, and a pass over the whole file
2026-07-21 13:50:43 +0000
9c82d56230
Merge pull request #93 from claude-bot-andresmgsl/fix/sshd-privsep-verdict
2026-07-21 14:07:35 +0100
9adf45a229
Merge pull request #99 from dan-claude-bot/fix/changelog-monotonic
2026-07-21 00:36:37 +0100
1db7779b03
test: terminate the ci.yml step block at the job boundary too
2026-07-20 20:56:57 +0000
c199e8fd04
fix(changelog-monotonic): report containment vacuous when the base IS HEAD
2026-07-20 20:49:02 +0000
27a5fa282e
Merge pull request #97 from dan-claude-bot/fix/labels-sweep-on-labeled
2026-07-20 21:32:44 +0100
7ffc30bacc
fix(changelog-monotonic): check uniqueness before anything base-side (#98 )
2026-07-20 20:22:43 +0000
0865ce6c02
fix(changelog): cite the sibling PRs, not the tracking issues
2026-07-20 20:07:58 +0000
b2e7febf08
fix: catch a deleted or duplicated release heading in CHANGELOG.md (#98 )
2026-07-20 20:00:48 +0000
23cca65855
fix(labels): sweep on labeled so the handoff is immediate
2026-07-20 19:44:07 +0000
ac1bb3bf76
Merge pull request #94 from dan-claude-bot/docs/contributing-blocker-axis
2026-07-20 20:27:32 +0100
9ba16946fd
Merge pull request #91 from codex-bot-andresmgsl/fix/issue-89-readme-channel
2026-07-20 19:41:12 +0100
8b2ddbdd2d
docs(contributing): document the blocker axis and merge-next ownership
2026-07-20 18:40:12 +0000
88d83a1aba
Merge pull request #90 from dan-claude-bot/fix/labels-two-axis
2026-07-20 19:30:07 +0100
5eddf2e2ed
fix(labels): a missing state label skips the edit, not the whole PR
2026-07-20 18:02:03 +0000
2dc47112f2
fix: don't read a missing /run/sshd as a broken sshd config
2026-07-20 17:58:10 +0000
491055c4cf
docs: point stable installs at matching README
2026-07-20 17:50:18 +0000
b07e734fc0
fix(labels): survive a repo that lacks the new blocker labels
2026-07-20 17:49:44 +0000
4f40cfabf2
fix(labels): distinguish an unreadable check rollup from no checks
2026-07-20 17:38:32 +0000
4ea3579c2e
docs(changelog): record that CI never ran the label fixtures
2026-07-20 17:34:21 +0000
b88495105d
test: tighten README channel contract
2026-07-20 17:32:43 +0000
3f6f05766f
refactor(labels): split PR labels into state and blocker axes
2026-07-20 17:30:53 +0000
32e17246a2
docs: align README quick start with main
2026-07-20 17:30:11 +0000
616ada76b9
Merge pull request #88 from dan-claude-bot/fix/labels-mergeability-aware
2026-07-20 18:02:57 +0100
108a944e1c
chore(labels): converge reconciler and fixtures on the canonical text
2026-07-20 16:44:19 +0000
57e37363f4
fix(labels): order check runs by one consistent quantity — when they began
2026-07-20 16:32:53 +0000
800571fdfb
fix(labels): date a check run by when it started, not by a zero completion
2026-07-20 16:18:50 +0000
a0951eacf8
fix(labels): unrecognised check outcomes block, and STALE outranks MISSING
2026-07-20 16:05:39 +0000
ef798f302c
fix(labels): state:needs-human means a human could merge it right now
2026-07-20 15:26:54 +0000
762cc9653e
Merge pull request #84 from dan-claude-bot/feat/manifest-provenance
2026-07-20 14:06:01 +0100
d2e03ce993
fix: read a manifest's final line when the file has no trailing newline
2026-07-20 11:27:55 +0000
5c40e906a1
feat: /etc/rig/manifest — which rig converged this machine, and when
2026-07-20 10:05:13 +0000
d6e8cdda06
Merge pull request #74 from dan-claude-bot/feat/platform
2026-07-20 13:46:00 +0100
e11247b467
docs: the provenance comment matches #61 's pinned contract, not the old story
2026-07-20 12:41:30 +0000
92cdb327b9
Merge pull request #81 from dan-claude-bot/test/at-risk-gate-pin
2026-07-20 13:36:55 +0100
b5e01296ee
Merge pull request #73 from dan-claude-bot/fix/users-apply-empty-file
2026-07-20 13:36:35 +0100
d3577b9954
docs: a fresh bootstrap writes both pairs equal, not a missing converged_*
2026-07-20 00:34:26 +0000
91a8905a71
fix: platform reads #61 's actual manifest schema, not invented keys
2026-07-20 00:22:01 +0000
3cfbb8921c
fix: platform reads a manifest whose last line lacks a newline
2026-07-20 00:00:57 +0000
75ef386601
feat: rig platform — what is this machine, computed not stored
2026-07-19 23:35:58 +0000
8d4f6da64c
test: pin the at-risk gate's floor at one operator
2026-07-20 09:56:47 +0000
8d03184e55
fix: gate 'users apply' on an empty file that would revoke everyone
2026-07-19 23:35:42 +0000
30ccb638dc
Merge pull request #82 from dan-claude-bot/test/read-guard-sweep-bin-rig
2026-07-20 13:24:23 +0100
1ad90410bf
Merge pull request #72 from dan-claude-bot/fix/uninstall-confirm-eof
2026-07-20 13:23:50 +0100
d144ae379c
test: widen the read-guard sweep to bin/ and to plain-statement reads
2026-07-20 09:58:19 +0000
880e95df21
fix: uninstall_confirm swallows Ctrl-D — the abort was silent
2026-07-19 23:32:24 +0000
f972a6994c
Merge pull request #71 from dan-claude-bot/fix/shellcheck-dotglob
2026-07-20 13:16:56 +0100
26ff38390b
fix: lint .github/scripts with dotglob, and assert the sweep is total
2026-07-19 23:31:40 +0000
0f2ec1c893
Merge pull request #83 from dan-claude-bot/feat/root-door-trait
2026-07-20 13:05:46 +0100
435693860a
Merge pull request #80 from dan-claude-bot/feat/tenant-role-suffixes
2026-07-20 13:05:24 +0100
e2a8a647e4
Merge pull request #79 from dan-claude-bot/feat/machine-role-suffixes
2026-07-20 13:05:06 +0100
4bbf1babe0
fix(users): the root-door resolver matches whole fields, not substrings
2026-07-20 11:18:37 +0000
b1c1357f2b
feat(users)!: --class human|server becomes --root-door closed|open
2026-07-20 10:02:50 +0000
94d9628766
feat(bootstrap)!: box tenant roles carry a -box suffix
2026-07-20 00:05:19 +0000
00f6351e28
fix(bootstrap): stop telling operators to run bare roles; pin the migration
2026-07-20 00:21:35 +0000
1845468765
feat(bootstrap)!: machine roles carry a -server suffix; staging-server restored
2026-07-20 00:01:16 +0000
d3b12742fd
chore: bump main to 0.2.1-dev — a dev install must not impersonate 0.2.0
2026-07-19 23:04:35 +0000
1acc163163
Merge pull request #69 from dan-claude-bot/release/0.2.0
2026-07-20 00:04:21 +0100
0ea1933c99
release: 0.2.0
2026-07-19 21:31:55 +0000
fcbe363a04
Merge pull request #67 from dan-claude-bot/fix/changelog-rearm
2026-07-19 22:06:49 +0100
71c749e818
Merge pull request #59 from dan-claude-bot/fix/empty-users-file
2026-07-19 20:46:12 +0100
a43d91e7f9
docs(changelog): the changelog re-arm entry (#67 )
2026-07-19 19:41:49 +0000
claude-bot-andresmgsl