Commit Graph
234 Commits
Author SHA1 Message Date
Jens 25cc7a1b0d chore: remove generated agent handoff entrypoint 2026-08-31 07:53:12 +02:00
Jens 6fd1d5e5e9 chore: remove generated build-agent prompt 2026-08-31 07:53:02 +02:00
Jens 54b7719759 chore: remove generated repository file index 2026-08-31 07:52:54 +02:00
Jens a19613d5e9 chore: remove project-local Claude instructions 2026-08-31 07:52:44 +02:00
Jens b62ecf66d8 chore: remove generated project-state chronology 2026-08-31 07:52:35 +02:00
Jens 97b8cd1c8c docs: generalize demo deployment instructions 2026-08-31 07:51:49 +02:00
Jens 50f9bb471a docs: replace private deployment topology with configuration 2026-08-31 07:51:06 +02:00
Jens 719b710926 chore: exclude internal evidence from source archives 2026-08-31 07:50:44 +02:00
Jens 441b3624e1 chore: block generated evidence and local private state 2026-08-31 07:50:30 +02:00
ChatGPT MCP ccae0538d7 chore: remove generated design-validation screenshot baselines 2026-08-31 05:49:42 +00:00
ChatGPT MCP 7d935c5a7d chore: remove generated deployment and audit evidence 2026-08-31 05:49:16 +00:00
Jens 51c3c90fa1 ci: keep workflow-only pull requests lightweight (#6)
Full acceptance remains mandatory for product and test changes; workflow-only pull requests run checkout and verified-secret scanning without rebuilding every stack.
2026-08-29 09:09:14 +02:00
NuklearRabbit d6a566e1a1 ci: keep workflow-only pull requests lightweight
MobilityOps acceptance / acceptance (pull_request) Successful in 26s
2026-08-29 09:07:38 +02:00
NuklearRabbit 4b727a109f ci: avoid duplicate post-merge acceptance
MobilityOps acceptance / acceptance (pull_request) Canceled after 2m0s
2026-08-29 09:04:25 +02:00
Jens 1bf72c39e3 ci: streamline MobilityOps validation (#5)
MobilityOps acceptance / acceptance (push) Failing after 2s
One bounded PR acceptance job, lightweight hourly probe, daily browser canary, deterministic isolated demo resets, and pinned weekly/release scans.
2026-08-29 09:03:13 +02:00
NuklearRabbit 55e8ebd81e fix(ci): isolate demo resets and keep acceptance deterministic
MobilityOps acceptance / acceptance (pull_request) Successful in 9m46s
2026-08-29 08:48:06 +02:00
NuklearRabbit b2bdb78baa fix(ci): reach DIND services over the compose network
MobilityOps acceptance / acceptance (pull_request) Failing after 6m58s
2026-08-29 08:36:14 +02:00
NuklearRabbit fe92a7f491 ci: consolidate validation and split lightweight probes
MobilityOps acceptance / acceptance (pull_request) Failing after 4m47s
2026-08-29 06:59:02 +02:00
NuklearRabbit 19df5f7508 ci: keep one required pull-request gate
MobilityOps acceptance / backend (pull_request) Failing after 2m18s
MobilityOps acceptance / frontend (pull_request) Successful in 29s
MobilityOps acceptance / e2e (pull_request) Skipped
2026-08-29 05:38:23 +02:00
Jens 51d488a634 Merge pull request '[skip ci] Centralize Gitea Actions runner' (#2) from codex/centralize-gitea-runner into master 2026-08-27 23:51:14 +02:00
NuklearRabbit da2f0956c9 chore(actions): use central Unraid runner [skip ci] 2026-08-27 23:42:54 +02:00
Jens 13f8db7573 ci: align managed validation contract [skip ci] 2026-08-27 07:40:50 +02:00
Jens e6ec89658e ci: add managed validation contract [skip ci] 2026-08-27 06:28:27 +02:00
NuklearRabbit 9d71555135 ci: add scoped Unraid autoredeploy
MobilityOps acceptance / backend (push) Failing after 33s
MobilityOps acceptance / frontend (push) Successful in 45s
MobilityOps acceptance / e2e (push) Skipped
2026-08-26 02:50:54 +02:00
NuklearRabbit 81de78bd8b M56: make RAGcore sync fail closed
MobilityOps acceptance / backend (push) Failing after 19s
MobilityOps acceptance / frontend (push) Successful in 26s
MobilityOps acceptance / e2e (push) Skipped
2026-08-24 03:58:57 +02:00
NuklearRabbit 444e61253b M55: restore private RAGcore routing
MobilityOps acceptance / backend (push) Failing after 18s
MobilityOps acceptance / frontend (push) Successful in 27s
MobilityOps acceptance / e2e (push) Skipped
2026-08-24 03:45:09 +02:00
NuklearRabbit 81e3fd63bd M54: harden operations and demo resilience
MobilityOps acceptance / backend (push) Failing after 19s
MobilityOps acceptance / frontend (push) Successful in 25s
MobilityOps acceptance / e2e (push) Skipped
2026-08-24 03:31:03 +02:00
NuklearRabbit b0706989db M53: record OneDrive production acceptance
MobilityOps acceptance / backend (push) Failing after 33s
MobilityOps acceptance / frontend (push) Successful in 26s
MobilityOps acceptance / e2e (push) Skipped
2026-08-22 00:00:45 +02:00
NuklearRabbit 2036e8b4ec M52: activate verified OneDrive backups
MobilityOps acceptance / backend (push) Failing after 18s
MobilityOps acceptance / frontend (push) Successful in 26s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 23:57:47 +02:00
NuklearRabbit 51b0ade7e7 M51: record zero-error rollout acceptance
MobilityOps acceptance / backend (push) Failing after 19s
MobilityOps acceptance / frontend (push) Successful in 30s
MobilityOps acceptance / e2e (push) Skipped
MobilityOps release evidence / release-evidence (push) Failing after 2m18s
v1.1.0-poc
2026-08-21 22:33:41 +02:00
NuklearRabbit cea0825d60 M50: preserve rollout API compatibility alias
MobilityOps acceptance / backend (push) Failing after 17s
MobilityOps acceptance / frontend (push) Successful in 29s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 22:29:55 +02:00
NuklearRabbit dd3acd872c M49: record resilience production acceptance
MobilityOps acceptance / backend (push) Failing after 20s
MobilityOps acceptance / frontend (push) Successful in 26s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 22:25:48 +02:00
NuklearRabbit 00191e9b54 M48: harden demo operations and offsite recovery
MobilityOps acceptance / backend (push) Failing after 20s
MobilityOps acceptance / frontend (push) Successful in 28s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 22:17:49 +02:00
NuklearRabbit a24098c583 M47: record final production acceptance
MobilityOps acceptance / backend (push) Failing after 15s
MobilityOps acceptance / frontend (push) Successful in 29s
MobilityOps acceptance / e2e (push) Skipped
MobilityOps release evidence / release-evidence (push) Failing after 1m10s
v1.0.0-poc
2026-08-21 18:52:23 +02:00
NuklearRabbit 95c91797fa M46: refresh web runtime base
MobilityOps acceptance / backend (push) Failing after 18s
MobilityOps acceptance / frontend (push) Successful in 27s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 18:46:10 +02:00
NuklearRabbit ec02aca0fd M45: authenticate Prometheus scraping
MobilityOps acceptance / backend (push) Failing after 17s
MobilityOps acceptance / frontend (push) Successful in 25s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 18:33:23 +02:00
NuklearRabbit acd8b82b09 M44: harden release integrity and assurance
MobilityOps acceptance / backend (push) Failing after 20s
MobilityOps acceptance / frontend (push) Successful in 26s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 18:32:02 +02:00
NuklearRabbit 9e4fca5708 M43: record production deployment evidence
MobilityOps acceptance / backend (push) Failing after 15s
MobilityOps acceptance / frontend (push) Successful in 25s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 17:25:04 +02:00
NuklearRabbit 0045778dbb M42: calibrate grounded RAGcore fallback
MobilityOps acceptance / backend (push) Failing after 17s
MobilityOps acceptance / frontend (push) Successful in 29s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 17:22:17 +02:00
NuklearRabbit 24dcb3494c M41: harden trust boundaries and delivery
MobilityOps acceptance / backend (push) Failing after 47s
MobilityOps acceptance / frontend (push) Successful in 29s
MobilityOps acceptance / e2e (push) Skipped
2026-08-21 17:06:59 +02:00
JensandClaude Fable 5 a830e8a2d0 ci(security): pin trivy-action to an existing tag (v0.30.0) so the gate can resolve on Gitea Actions
MobilityOps acceptance / backend (push) Failing after 33s
MobilityOps acceptance / frontend (push) Successful in 33s
MobilityOps acceptance / e2e (push) Skipped
The first real platform runs (2026-08-17, new instance runner) failed at
'Unable to resolve 0.30.0: reference not found' - the tag exists only as v0.30.0.
Where present, the trufflehog GitHub Action (which fails under the act runner) is
replaced by the pinned trufflehog binary in filesystem mode next to gitleaks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 14:13:18 +02:00
NuklearRabbit ca66083c8b M40: record hardening deployment evidence
MobilityOps acceptance / backend (push) Failing after 14s
MobilityOps acceptance / frontend (push) Successful in 37s
MobilityOps acceptance / e2e (push) Skipped
2026-08-17 03:31:10 +02:00
NuklearRabbit ae39a8947f M39: harden application and acceptance gates
MobilityOps acceptance / backend (push) Failing after 45s
MobilityOps acceptance / frontend (push) Successful in 32s
MobilityOps acceptance / e2e (push) Skipped
2026-08-17 03:17:44 +02:00
NuklearRabbit a9f48d6880 fix(security): add secret-scan step to backend CI job
Backend job had static checks (ruff/mypy) and a dependency-vulnerability
gate but no secret scan; frontend had a dependency audit but no secret
scan either. Adds trufflehog once, on the backend job's full checkout,
covering the whole repository - the last gap for this repo to count as
fully-authored.
2026-08-16 14:54:44 +02:00
NuklearRabbit 6859249570 fix(security): add backend dependency vulnerability gate to CI
Backend CI had ruff/mypy static checks and a real pip-audit-equivalent
was missing; frontend already had npm audit, so backend was the only
side of this repo without any dependency-vulnerability gate (partial
coverage). Adds trivy-action fs scoped to backend/, HIGH/CRITICAL only,
consistent with this security programme's gate convention elsewhere.
Verified clean (0 HIGH/CRITICAL) against backend/pyproject.toml before
wiring in, so the gate does not immediately fail CI.
2026-08-16 04:41:07 +02:00
NuklearRabbit 1ca70187a2 M38: record production acceptance evidence
MobilityOps acceptance / backend (push) Canceled after 0s
MobilityOps acceptance / frontend (push) Canceled after 0s
2026-08-10 23:29:10 +02:00
NuklearRabbit 26819354ee M37: complete production acceptance hardening
MobilityOps acceptance / backend (push) Canceled after 0s
MobilityOps acceptance / frontend (push) Canceled after 0s
2026-08-10 23:19:26 +02:00
NuklearRabbit 9dfbd7c4bf M36: deepen operational and mobile UX 2026-08-10 22:53:45 +02:00
NuklearRabbit 809ba0ddcc M35: harden the shared public demo 2026-08-10 22:32:58 +02:00
NuklearRabbit c7492bf6ad M34: enforce domain integrity in PostgreSQL 2026-08-10 22:28:38 +02:00