Commit Graph
905 Commits
Author SHA1 Message Date
Jens 03df2db8b6 docs: add public security policy 2026-08-30 23:27:04 +02:00
Jens 9b400bc421 repo: remove all remaining local Codex scratch from release tree 2026-08-30 23:26:33 +02:00
Jens fc8719d8dd repo: remove cross-project scratch directory 2026-08-30 23:26:17 +02:00
Jens fb028e874a repo: remove cross-project scratch archive 2026-08-30 23:26:00 +02:00
Jens c3f83a0da2 repo: remove cross-project scratch archive 2026-08-30 23:25:53 +02:00
Jens eade3ddc20 repo: remove cross-project scratch archive 2026-08-30 23:25:45 +02:00
Jens 1020e97260 repo: remove cross-project scratch archive 2026-08-30 23:25:39 +02:00
Jens db280a838c repo: remove cross-project scratch archive 2026-08-30 23:25:33 +02:00
Jens 021799e21b repo: remove local Codex scratch database sidecar 2026-08-30 23:25:26 +02:00
Jens 487188c666 repo: remove local Codex scratch database sidecar 2026-08-30 23:25:20 +02:00
Jens 40951ad284 repo: remove local Codex scratch database 2026-08-30 23:25:10 +02:00
Jens 85873627ce repo: remove cross-project scratch screenshot 2026-08-30 23:25:03 +02:00
Jens 1dbe90bdc1 repo: remove cross-project scratch screenshot 2026-08-30 23:24:56 +02:00
Jens e4d940cdc8 repo: remove local Codex scratch database sidecar 2026-08-30 23:24:48 +02:00
Jens 8fa3283754 repo: remove local Codex scratch database sidecar 2026-08-30 23:24:42 +02:00
Jens d24ce9100a repo: remove local Codex scratch database 2026-08-30 23:24:33 +02:00
Jens 3953110048 repo: exclude Codex scratch from public release tree 2026-08-30 23:24:25 +02:00
Jens 5904086ab4 repo: remove local Codex scratch from release tree 2026-08-30 23:24:13 +02:00
Jens d24aa53056 Merge pull request 'Stabilize the protected production release' (#8) from codex/stabilize-ai-sbom into main
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 2m11s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m38s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 52m59s
2026-08-30 14:02:14 +02:00
Jens bf5e1b7e06 fix(deploy): ignore parent Git checkout in backup binding
Managed validation / Managed repository validation (pull_request) Successful in 2m16s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 2m7s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 26s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 7m43s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 13:32:22 +02:00
Jens 9f771a61cf fix(ci): cap Syft heap inside DinD
Managed validation / Managed repository validation (pull_request) Successful in 2m39s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 2m49s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 31s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 7m31s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 13:25:37 +02:00
Jens aec584d433 Merge pull request 'Full platform remediation' (#7) from codex/full-platform-remediation into main
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 2m25s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 28s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Failing after 2m41s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Skipped
2026-08-30 11:30:37 +02:00
Jens 11de6d0005 fix(ci): bound Syft binary cataloging
Managed validation / Managed repository validation (pull_request) Successful in 3m48s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 3m19s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 28s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Successful in 8m37s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 11:06:46 +02:00
Jens bcd023ec36 fix(deploy): bind prepared source and scanned image exactly
Managed validation / Managed repository validation (pull_request) Successful in 3m35s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Successful in 3m42s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 45s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Failing after 6m19s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 10:50:12 +02:00
Jens 16616d56a5 fix(ci): restore exact AI release evidence gates 2026-08-30 10:49:41 +02:00
Jens fd58cb2378 fix(release): keep large snapshots attached and low impact
Managed validation / ${{ inputs.profile || 'full' }} (pull_request) Failing after 1m35s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Failing after 1m43s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Failing after 32s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Failing after 31s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 10:09:26 +02:00
Jens f77f6f2d93 docs(accuracy): bind verification evidence to audited commit
Managed validation / ${{ inputs.profile || 'full' }} (pull_request) Failing after 1m59s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Failing after 4m12s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Failing after 1m15s
GeoIntel release gates / Production AI image, SBOM and container scan (pull_request) Failing after 15m2s
GeoIntel release gates / Deploy exact gated revision to Unraid (pull_request) Skipped
2026-08-30 06:01:13 +02:00
Jens 0e3c1b20e9 docs(accuracy): refresh governed scan and training evidence 2026-08-30 06:00:57 +02:00
Jens c272220277 fix(release): make deployment backup and rollback immutable 2026-08-30 06:00:43 +02:00
Jens a0884d64c9 feat(ui): refine governed workbench and dual-screen flows 2026-08-30 06:00:28 +02:00
Jens 80a2d1654d fix(platform): govern geospatial analysis and raster handoffs 2026-08-30 06:00:15 +02:00
Jens 96f90373dc feat(auth): harden Authentik and guest capability boundaries 2026-08-30 05:59:49 +02:00
Jens b93d926b94 chore(repo): retire duplicate nested source mirror 2026-08-30 05:59:32 +02:00
Jens d39816a4ca Merge pull request 'fix(ci): restore release gates and contract baseline (fixes #4)' (#6) from codex/resolve-open-issues into main
Unraid autoredeploy / Deploy geointel (push) Successful in 9m48s
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 2m24s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 25s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 14s
Reviewed-on: #6
2026-08-29 04:07:37 +02:00
NuklearRabbit 38c7b5f85e fix(ci): use one required pull-request gate
Managed validation / full (pull_request) Successful in 11s
2026-08-29 03:35:31 +02:00
NuklearRabbit 029ed9c3f1 fix(ci): stop duplicate feature-branch runs
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Waiting to run
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Waiting to run
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Waiting to run
Managed validation / full (pull_request) Canceled after 0s
2026-08-29 03:27:53 +02:00
NuklearRabbit edb762219c fix(ci): restore release gates and contract baseline (fixes #4)
Managed validation / full (pull_request) Canceled after 0s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 22s
GeoIntel release gates / Compile, test, contracts and builds (push) Waiting to run
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 45s
2026-08-29 02:00:23 +02:00
Jens d39f703abf Merge pull request '[skip ci] Centralize Gitea Actions runner' (#3) from codex/centralize-gitea-runner into main 2026-08-27 23:50:01 +02:00
NuklearRabbit 5b47df2750 chore(actions): use central Unraid runner [skip ci] 2026-08-27 23:42:26 +02:00
Jens ec1fbd5b15 ci: align managed validation contract [skip ci] 2026-08-27 07:40:32 +02:00
Jens 4d916ee04c ci: add managed validation contract [skip ci] 2026-08-27 06:27:41 +02:00
NuklearRabbit fb1b776843 deploy: attach production container group labels
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 29s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 39s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m28s
Unraid autoredeploy / Deploy geointel (push) Successful in 7m36s
2026-08-26 04:52:47 +02:00
NuklearRabbit fe51bfe3ae ci: add scoped Unraid autoredeploy
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 1m17s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 30s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m29s
2026-08-26 02:49:50 +02:00
Jens 3627a05bfe Recover model provenance from verified backup receipt
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 29s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 53s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 5m38s
2026-08-24 03:22:45 +02:00
Jens 36a3c84699 Fix governed runtime model registration
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 20s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 24s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 2m43s
2026-08-23 23:31:42 +02:00
Jens 73228259a0 Merge runtime provenance script execution fix
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:44 +02:00
Jens a37c6d5b17 Place runtime script lint exception correctly
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 25s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 26s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m49s
2026-08-23 23:26:37 +02:00
Jens d944fa7276 Keep runtime provenance script lint-clean
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:24 +02:00
Jens de8beae183 Make runtime provenance operator script directly executable
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:06 +02:00
Jens 2f15da97c3 Merge governed model provenance migration
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:22:12 +02:00