-
7d453ac5a6
docs(milestone): complete v0.16 — checkpoint update
main
Jon Chery
2026-08-12 23:11:39 +00:00
-
cc09351185
docs(milestone): complete v0.16 release binary asset fix
v0.15.2
Jon Chery
2026-08-12 23:10:58 +00:00
-
405877ee27
fix(P1): verify assets via /releases/{id}/assets — tag endpoint has cache delay
v0.15.1
Jon Chery
2026-08-12 23:01:48 +00:00
-
5af2b1d660
fix(P1): fix bash substring in ci-release.sh — dash doesn't support ${var:0:12}
Jon Chery
2026-08-12 22:52:53 +00:00
-
075d8bbc5f
fix(P1): free disk space before Install CoreCI — runner disk full
Jon Chery
2026-08-12 22:44:12 +00:00
-
a2738f56c4
fix(P1): continue-on-error for coreci run — release step must execute
Jon Chery
2026-08-12 22:37:37 +00:00
-
df3f980fa0
fix(P1): move release to Gitea Actions step — CoreCI disk full issue
Jon Chery
2026-08-12 22:36:56 +00:00
-
7e26490b5f
fix(P1): release job uses existing bin/orca from build job
Jon Chery
2026-08-12 22:27:38 +00:00
-
8ca5ffd0fc
fix(P1): clean disk before release + fallback to existing binary
Jon Chery
2026-08-12 22:18:45 +00:00
-
5c07fafa18
fix(P1): add CI_GITEA_TOKEN for shell-isolated env forwarding
Jon Chery
2026-08-12 22:10:16 +00:00
-
fb89c30d91
fix(P1): simplify release job — direct Gitea API, skip tea+changelog
Jon Chery
2026-08-12 22:01:04 +00:00
-
b8f766de03
fix(P1): use #!/bin/sh not bash — runner uses dash as /bin/sh
Jon Chery
2026-08-12 21:51:56 +00:00
-
566145d45a
fix(P1): debug build job — add stderr logging, remove set -e
Jon Chery
2026-08-12 21:44:16 +00:00
-
4a97cb1ea2
fix(P1): set Go env vars in ci-run.sh — shell-isolated executor drops them
Jon Chery
2026-08-12 21:37:01 +00:00
-
e55dfed716
fix(P1): simplify pipeline to build→test→release (skip validate jobs)
Jon Chery
2026-08-12 21:36:40 +00:00
-
1b71e0515f
fix(P1): wrap CI jobs in scripts/ci-run.sh — CoreCI forbids shell metacharacters in invoke: (REQ-184)
Jon Chery
2026-08-12 21:29:22 +00:00
-
d7896e5287
fix(P1): remove plugin: from .coreci.yml jobs — invoke-only (REQ-184)
Jon Chery
2026-08-12 21:19:36 +00:00
-
fed24b93e9
fix(P1): drop embed build tag — coreci run doesn't need web assets
Jon Chery
2026-08-12 21:11:56 +00:00
-
3be86e6daf
fix(P1): Gitea Actions clone auth + .coreci.yml native format rewrite (REQ-183,184)
Jon Chery
2026-08-12 21:05:21 +00:00
-
437908662f
docs(P00): create phase plans — v0.16 release binary asset fix
v0.15.0
Jon Chery
2026-08-12 21:03:48 +00:00
-
1c2843a39d
docs(P00): research findings — v0.16 release binary asset fix
Jon Chery
2026-08-12 21:03:36 +00:00
-
82dfe7a941
docs(P00): clarify — v0.16 release binary asset fix decisions
Jon Chery
2026-08-12 21:03:15 +00:00
-
699196f368
docs(init): validate specification — v0.16 release binary asset fix
Jon Chery
2026-08-12 21:02:58 +00:00
-
61c97c847c
fix(P1): recompute TARBALL after fallback version walk (REQ-132)
dev
Jon Chery
2026-08-10 21:18:24 +00:00
-
6f04b22df0
docs(milestone): complete v0.15 CI release pipeline fix
v0.14.2
Jon Chery
2026-08-10 21:01:56 +00:00
-
eadf2cc2c5
fix(P1): Gitea Actions workflow + kaniko container publishing (REQ-180,181)
v0.14.1
Jon Chery
2026-08-10 20:59:10 +00:00
-
93ac4bda66
docs(P00): clarify+research+plan — v0.15 CI release pipeline
v0.14.0
Jon Chery
2026-08-10 20:57:55 +00:00
-
454040fdd1
docs(init): validate specification — v0.15 CI release pipeline fix
Jon Chery
2026-08-10 20:55:03 +00:00
-
c95bd73e42
docs(milestone): complete v0.14 ingress bootstrap
v0.13.8
Jon Chery
2026-08-10 20:26:26 +00:00
-
ecdba833d9
feat(P7): doctor ingress + docs + integration tests (REQ-177,178,179)
v0.13.7
Jon Chery
2026-08-10 20:24:13 +00:00
-
6e65eadaa5
feat(P6): proxmox floating-IP LXC ingress + interactive prompt (REQ-176)
v0.13.6
Jon Chery
2026-08-10 20:19:47 +00:00
-
1b7aac71f6
feat(P5): proxmox native ingress mode — LXC + podman traefik (REQ-175)
v0.13.5
Jon Chery
2026-08-10 20:16:40 +00:00
-
ea42a17474
feat(P4): linux node join remote ingress bootstrap (REQ-174)
v0.13.4
Jon Chery
2026-08-10 20:11:32 +00:00
-
5013209e31
feat(P3): nft SNAT+DNAT + orca init ingress bootstrap (REQ-173)
v0.13.3
Jon Chery
2026-08-10 20:09:26 +00:00
-
dea472f443
feat(P2): podman traefik reconciler + TLS model fix (REQ-172)
v0.13.2
Jon Chery
2026-08-10 20:04:20 +00:00
-
dccdb746ea
feat(P1): orca-traefik container image + release pipeline (REQ-171)
v0.13.1
Jon Chery
2026-08-10 18:30:37 +00:00
-
080919fde6
chore(P00): phase 0 complete — checkpoint update
Jon Chery
2026-08-10 18:27:10 +00:00
-
3551b37ac0
docs(P00): grill + plan revision — v0.14 binding conditions
v0.13.0
Jon Chery
2026-08-10 18:26:33 +00:00
-
65e50e465b
docs(P00): grill v0.14 — red-team review, RETHINK verdict
Jon Chery
2026-08-10 18:24:32 +00:00
-
0e7ee4f324
docs(P00): create phase plans — v0.14 ingress bootstrap
Jon Chery
2026-08-10 18:13:59 +00:00
-
b925fda3aa
docs(P00): research findings — v0.14 ingress bootstrap
Jon Chery
2026-08-10 18:12:59 +00:00
-
9853aee589
docs(P00): clarify — v0.14 ingress bootstrap decisions
Jon Chery
2026-08-10 18:08:26 +00:00
-
5e0b899f1a
docs(init): validate specification — v0.14 ingress bootstrap
Jon Chery
2026-08-10 18:07:55 +00:00
-
0424f8ce02
feat(init): interactive remote pre-staging via ssh-copy-id
Jon Chery
2026-08-10 17:37:42 +00:00
-
5600531bd7
fix(install): default to /usr/local/bin (on PATH for all users)
Jon Chery
2026-08-10 17:22:42 +00:00
-
d324939699
fix: PVE role/user idempotency + init pre-staging instructions
Jon Chery
2026-08-10 17:07:30 +00:00
-
00efe25ce4
fix(release): clean release assets + SHA256SUMS URL lookup fix
Jon Chery
2026-08-10 16:56:17 +00:00
-
1ad6780df1
fix(release): install.sh asset matching + SHA256SUMS + Dockerfile 1.25.12
Jon Chery
2026-08-10 16:54:11 +00:00
-
7dc7980d74
docs(E): UAT docs + signoff script fixes + pve-ct example (REQ-170)
v0.12.18
milestone/v0.12.18-uat-remediation
Jon Chery
2026-08-10 16:37:57 +00:00
-
790109ea24
feat(D): capacity auto-discovery + partial updates + ACL debug + UX (REQ-168,169)
v0.12.17
Jon Chery
2026-08-10 16:33:27 +00:00
-
64cbbd543e
feat(C): remote deployment correctness — PVE runtime, DB record, Traefik (REQ-166)
v0.12.16
Jon Chery
2026-08-10 16:21:50 +00:00
-
16440a89f2
feat(B): Traefik deployment to all nodes during init/join (REQ-165, REQ-167)
v0.12.15
Jon Chery
2026-08-10 16:09:48 +00:00
-
a6ceb13491
fix(A): bootstrap plumbing — init creates SSH key + known_hosts + master key (REQ-164)
v0.12.14
Jon Chery
2026-08-10 16:02:19 +00:00
-
c0ba30824e
chore(P13): final review + audit — v0.13 milestone complete
v0.12.13
milestone/v0.13-production-hardening-2
Jon Chery
2026-08-10 14:37:33 +00:00
-
52e17aefbf
feat(P12): --type linux SSH-join + UAT plan + signoff script (REQ-161..163)
v0.12.12
Jon Chery
2026-08-10 14:33:29 +00:00
-
b6dd86fdf3
docs(P11): doc drift round 2 — README, cli.md, CHANGELOG, verify-reqs (REQ-160)
v0.12.11
Jon Chery
2026-08-10 14:18:27 +00:00
-
ed91d68fbf
feat(P10): observability expansion — metrics + security headers (REQ-159)
v0.12.10
Jon Chery
2026-08-10 13:44:04 +00:00
-
531b36924c
fix(P09): migration + operational safety — job stop, retention, logs cap (REQ-158)
v0.12.9
Jon Chery
2026-08-10 13:37:28 +00:00
-
3a3ea74d76
fix(P08): transport + SSH safety — typed errors, IPv6, timeouts, signal (REQ-157)
v0.12.8
Jon Chery
2026-08-10 13:11:07 +00:00
-
0358efe95b
fix(P07): concurrency safety — SQLite, flock, cache, atomic writes (REQ-156)
v0.12.7
Jon Chery
2026-08-10 12:27:05 +00:00
-
978334a4bc
feat(P06): auth init-idp real + auth register + doctor oidc (REQ-155)
v0.12.6
Jon Chery
2026-08-10 11:55:01 +00:00
-
9e832387c6
feat(P05): seal/audit CLI + chain race fix + key zeroing (REQ-154)
v0.12.5
Jon Chery
2026-08-07 21:06:39 +00:00
-
5232fcb808
fix(P04): wire ACL enforcement + WebAuthn reg auth + audit actor (REQ-153)
v0.12.4
Jon Chery
2026-08-07 20:33:39 +00:00
-
cf3d98eb2b
feat(P03): wire scheduler into job run + fix jobspec parser (REQ-151, REQ-152)
v0.12.3
Jon Chery
2026-08-07 19:59:31 +00:00
-
4b70e31cf4
fix(P02): input validation + injection hardening — 11 vectors (REQ-150)
v0.12.2
Jon Chery
2026-08-07 19:28:01 +00:00
-
b0158c96e9
fix(P01): bump go toolchain to 1.25.12 + fix pre-existing test bugs (REQ-149)
v0.12.1
Jon Chery
2026-08-07 19:07:17 +00:00
-
7479cd1534
docs(checkpoint): P0 shipped — v0.12.0 tagged
Jon Chery
2026-08-07 18:50:08 +00:00
-
1a2dd1ad73
docs(P00): incorporate grill binding conditions C-44..C-49
v0.12.0
Jon Chery
2026-08-07 18:49:49 +00:00
-
437d9b2691
docs(P00): grill v0.13 — CONDITIONAL PROCEED (6 binding conditions C-44..C-49)
Jon Chery
2026-08-07 18:49:18 +00:00
-
82bfab1da3
docs(P00): create phase plans — 14 phases, 15 REQs, vertical slices
Jon Chery
2026-08-07 18:44:59 +00:00
-
a2a651e628
docs(P00): ideation results — 15 accepted (REQ-149..REQ-163), 0 skipped
Jon Chery
2026-08-07 18:44:24 +00:00
-
3f5e5de729
docs(P00): research findings — threat model round 3 (~60 gaps, F26-F101)
Jon Chery
2026-08-07 18:44:05 +00:00
-
7a60b35b7a
docs(P00): clarify v0.13 — 7 decisions resolved (D-248..D-254)
Jon Chery
2026-08-07 18:43:15 +00:00
-
8071793260
docs(init): validate specification — v0.13 Production Hardening Round 2 + UAT Plan
Jon Chery
2026-08-07 18:43:04 +00:00
-
64e5321c96
fix(audit): post-v0.12 audit remediation — checkpoint typo + report template + ARCHITECTURE drift
v0.11.29
Jon Chery
2026-08-07 18:05:42 +00:00
-
8c13b160c9
docs(milestone): complete v0.12 — Security Hardening (Zero-Trust Identity) (29 phases shipped)
v0.11.28
Jon Chery
2026-08-07 11:34:59 +00:00
-
0f7f9cf914
docs(P27): zero-trust + OIDC + WebAuthn + threat-model docs (REQ-142)
v0.11.27
Jon Chery
2026-08-07 11:33:58 +00:00
-
5a43cb8538
test(P26): security integration test suite (REQ-141, C-33)
v0.11.26
Jon Chery
2026-08-07 11:33:39 +00:00
-
7cb5d8d8c4
fix(P25): drift event authentication (REQ-140, F18)
v0.11.25
Jon Chery
2026-08-07 11:33:20 +00:00
-
19b52f6c9b
fix(P24): known_hosts tightening + transport hardening (REQ-139, F15, F25)
v0.11.24
Jon Chery
2026-08-07 11:32:25 +00:00
-
9c65833954
docs(P23): dual-write closure deferred to v1.x (REQ-138, F16, C-29)
v0.11.23
Jon Chery
2026-08-07 11:31:55 +00:00
-
6f5705fe02
fix(P22): migration safety (REQ-137, F19, C-34)
v0.11.22
Jon Chery
2026-08-07 11:31:26 +00:00
-
b4a0ada87e
fix(P21): SQLite file-mode 0600 (REQ-136, F8, C-31)
v0.11.21
Jon Chery
2026-08-07 11:30:56 +00:00
-
ced2182322
fix(P20): system user consistency (REQ-135, F23)
v0.11.20
Jon Chery
2026-08-07 11:29:56 +00:00
-
da682f1017
fix(P19): sudoers hardening — remove apt-get/dpkg (REQ-134, F22)
v0.11.19
Jon Chery
2026-08-07 11:29:26 +00:00
-
3269e1cb1d
fix(P19): sudoers hardening — NOEXEC on apt-get/dpkg (REQ-134, F22)
Jon Chery
2026-08-07 11:28:24 +00:00
-
a6bd1385ab
fix(P18): nftables ruleset hardening (REQ-133, F21)
v0.11.18
Jon Chery
2026-08-07 11:27:33 +00:00
-
b765cca0ed
fix(P17): install.sh checksum verification (REQ-132, F14)
v0.11.17
Jon Chery
2026-08-07 11:26:35 +00:00
-
bfe92661ec
fix(P16): aggregate.sh JSON injection + drift-gate fix (REQ-131, F11, F18)
v0.11.16
Jon Chery
2026-08-07 11:26:04 +00:00
-
c5ce851fc7
docs(checkpoint): P13-P15 shipped (step-ca tmp, master key rotation, file-mode audit)
Jon Chery
2026-08-07 11:25:10 +00:00
-
10bcb49514
fix(P15): file-mode audit expansion (REQ-130, F13)
v0.11.15
Jon Chery
2026-08-07 11:25:02 +00:00
-
50c4e910ed
fix(P14): master key rotation (REQ-129, F12, C-30)
v0.11.14
Jon Chery
2026-08-07 11:24:19 +00:00
-
0d5ff663b4
fix(P13): step-ca /tmp hardening (REQ-128, F10)
v0.11.13
Jon Chery
2026-08-07 11:22:07 +00:00
-
7f81042abd
fix(P12): backup symlink validation (REQ-127, F7)
v0.11.12
Jon Chery
2026-08-07 11:21:19 +00:00
-
d7dc2d2aad
fix(P11): SVID chain validation (REQ-126, F9)
v0.11.11
Jon Chery
2026-08-07 11:20:10 +00:00
-
a627d0ee6d
docs(checkpoint): P09+P10 shipped (daemon auth + audit tamper-evidence)
Jon Chery
2026-08-07 11:18:52 +00:00
-
827f215115
fix(P10): audit log tamper-evidence (REQ-125, F2)
v0.11.10
Jon Chery
2026-08-07 11:18:42 +00:00
-
a81bbb2bcf
fix(P09): daemon auth hardening (REQ-123, REQ-124, F6, F24)
v0.11.9
Jon Chery
2026-08-07 11:16:16 +00:00
-
2cbfb5d561
feat(P08): master key seal-to-OIDC + Shamir 3-of-5 (REQ-147, D-241, C-35)
v0.11.8
Jon Chery
2026-08-07 11:14:01 +00:00
-
20523ac045
fix(P07): remove all password/token paths (REQ-146, R-021, C-34) -- BREAKING
v0.11.7
Jon Chery
2026-08-07 11:12:18 +00:00