Commit Graph
906 Commits
Author SHA1 Message Date
Jens 23581a34fa repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:25:27 +02:00
Jens 5f8e80c3fe repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 8s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:25:18 +02:00
Jens 885e86b823 repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 7s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:25:10 +02:00
Jens 3be393d174 repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 4s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:25:02 +02:00
Jens 25e0fffd9a repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 3s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:24:54 +02:00
Jens b308bf46a6 repo: remove transient codex SQLite state
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 9s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:24:44 +02:00
Jens 2376d089be ci: enforce hygiene architecture static and frontend policy gates
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 22s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:24:16 +02:00
Jens df9cb7ac56 ci: mirror pinned dual-image release gates
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 50s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:23:06 +02:00
Jens 1fe77f4de4 ci: pin actions and scan both GIS and AI images
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 22s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:22:41 +02:00
Jens 68e2741272 supply-chain: pin all-in-one production base images 2026-08-26 22:21:59 +02:00
Jens cedf55b955 supply-chain: pin frontend base images and lock npm install 2026-08-26 22:21:25 +02:00
Jens 7923017716 supply-chain: pin backend Python base image 2026-08-26 22:21:15 +02:00
Jens 8343c9b6be supply-chain: pin PostGIS development image digest 2026-08-26 22:20:44 +02:00
Jens fd79c59e3f deploy: bind model scope and CUDA build defaults 2026-08-26 22:18:28 +02:00
Jens fc9cf5581c security: make Unraid guest access explicitly opt in 2026-08-26 22:17:34 +02:00
Jens ca8b87f1c4 security: make example access and model scope fail closed 2026-08-26 22:16:58 +02:00
Jens 1bbe3d2de0 test: keep production GIS available without AI scope evidence 2026-08-26 22:16:22 +02:00
Jens 50d57b6ab0 security: keep GIS startup available while AI scope fails closed 2026-08-26 22:15:39 +02:00
Jens 4ba7ab9aca ci: deploy only successful validated revisions 2026-08-26 22:14:15 +02:00
Jens f176915966 frontend: wire source policy lint 2026-08-26 22:13:04 +02:00
Jens 56b2a36528 frontend: add dependency-free source policy lint 2026-08-26 22:12:52 +02:00
Jens 6ac87a0504 hardening: verify immutable supply chain references 2026-08-26 22:12:39 +02:00
Jens 86675faf49 hardening: add architecture debt ratchet 2026-08-26 22:12:22 +02:00
Jens d5570c962e hardening: add repository hygiene gate 2026-08-26 22:12:07 +02:00
Jens e187dbfffc hardening: record audit remediation boundaries 2026-08-26 22:11:52 +02:00
Jens d36c5424cd hardening: document security invariants 2026-08-26 22:11:39 +02:00
Jens 82458b4d29 repo: restore README after branch-only tool error 2026-08-26 21:35:56 +02:00
Jens fd52142ef6 noop 2026-08-26 21:35:23 +02:00
Jens bd52652232 test: cover secure runtime defaults 2026-08-26 21:35:05 +02:00
Jens 284fe4f248 security: complete production YOLO fail-closed validation 2026-08-26 21:34:36 +02:00
Jens 931a037361 repo: remove generated codex contact sheet 2026-08-26 21:10:45 +02:00
Jens 8d1daa2931 repo: remove cross-project DockDeck archive 2026-08-26 21:10:39 +02:00
Jens 406fa39b35 repo: remove cross-project DockDeck archive 2026-08-26 21:10:31 +02:00
Jens 06fc2a8d24 repo: remove cross-project DockDeck archive 2026-08-26 21:10:22 +02:00
Jens d61b807c6d repo: remove cross-project DockDeck archive 2026-08-26 21:10:15 +02:00
Jens 7aad50f35f repo: remove cross-project DockDeck archive 2026-08-26 21:10:08 +02:00
Jens 9b89506f87 repo: remove generated codex contact sheet 2026-08-26 21:09:54 +02:00
Jens 8fa8e84ef6 repo: remove generated codex contact sheet 2026-08-26 21:09:48 +02:00
Jens 149657f8ed repo: remove generated codex contact sheet 2026-08-26 21:09:37 +02:00
Jens 6b82e2e124 repo: prevent codex working inputs from returning 2026-08-26 21:09:17 +02:00
Jens ab0e2b446c security: make guest and YOLO scope defaults fail closed 2026-08-26 21:08:57 +02:00
Jens c0dcf573a8 security: fail closed for guest and production YOLO scope 2026-08-26 21:08:13 +02:00
NuklearRabbit fb1b776843 deploy: attach production container group labels
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 29s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 39s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m28s
Unraid autoredeploy / Deploy geointel (push) Successful in 7m36s
2026-08-26 04:52:47 +02:00
NuklearRabbit fe51bfe3ae ci: add scoped Unraid autoredeploy
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 1m17s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 30s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m29s
2026-08-26 02:49:50 +02:00
Jens 3627a05bfe Recover model provenance from verified backup receipt
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 29s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 53s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 5m38s
2026-08-24 03:22:45 +02:00
Jens 36a3c84699 Fix governed runtime model registration
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 20s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 24s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 2m43s
2026-08-23 23:31:42 +02:00
Jens 73228259a0 Merge runtime provenance script execution fix
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:44 +02:00
Jens a37c6d5b17 Place runtime script lint exception correctly
GeoIntel release gates / Compile, test, contracts and builds (push) Failing after 25s
GeoIntel release gates / Python and npm vulnerability policy (push) Failing after 26s
GeoIntel release gates / GIS image, SBOM and container scan (push) Failing after 1m49s
2026-08-23 23:26:37 +02:00
Jens d944fa7276 Keep runtime provenance script lint-clean
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:24 +02:00
Jens de8beae183 Make runtime provenance operator script directly executable
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-08-23 23:26:06 +02:00