262 Commits

Include renames

Author	SHA1	Message	Date
Hermes Agent	c09392e0c4	fix(guard): classify Git option grammar ... Replace finite clone/worktree boolean allowlists with the closed separate-value grammar, including Git's accepted long abbreviations and bundled short options. Keep placement operands distinct from HOME-valued sources, metadata, commit-ish values, and rule-generated --no-* flags while preserving separate-git-dir and later-command traps. Canonicalize shell-known HOME spellings, dot aliases, and existing symlink parents before placement comparison. Expand the hermetic suite from 242 to 292 fixtures and document the requirements and review evidence. Deliberate residuals: a future unclassified value-taking clone placement option can fail open, and a future worktree value option can shift the inferred path; defaulting it to flag grammar avoids present-day over-blocking of Git's non-enumerable boolean family. PreToolUse symlink canonicalization is non-atomic against replacement after inspection; architectural closure is tracked by #1199.	2026-08-13 06:46:25 -05:00
Hermes Agent	91cc37bcf6	fix(guard): inspect checkout placement operands ... Classify git clone and worktree add operands so HOME-valued environment assignments, sources, references, templates, and metadata do not impersonate checkout destinations. Preserve both forms of clone --separate-git-dir as real placement targets and distinguish shell words, command boundaries, and redirections in the existing quote-aware normalized stream. Deliberate fail-closed residual: unknown future Git options with a separate following word are not adjudicated as source-only. Their value remains a possible placement, so a HOME-shaped value blocks rather than silently creating a bypass. Relative destinations whose effective path depends on cwd remain out of scope in #1197.	2026-08-13 05:55:33 -05:00
mos-dt-0	563d1ac053	Merge pull request 'fix(shell): remove wake validation pipe hazards' (#1107) from fix/1099-pipefail-wake into main	2026-08-11 23:19:45 +00:00
mos-dt-0	722163671f	feat(pi): add persistent Mosaic /goal controller (#1152)	2026-08-10 22:54:43 +00:00
f10-coder	f158be8003	fix(shell): remove wake validation pipe hazards	2026-08-07 06:13:47 -05:00
f10-coderandMos	b0f7d26dd9	fix(shell): remove test harness pipe hazards (#1106) ... Co-authored-by: f10-coder <[email protected]>	2026-08-07 11:12:17 +00:00
f10-coderandMos	3a1203b2f8	fix(shell): remove runtime early-exit pipe hazards (#1105) ... Co-authored-by: f10-coder <[email protected]>	2026-08-07 09:38:37 +00:00
be-coder-08	df4c591ab4	fix(fleet): make framework shell assertions SIGPIPE-safe (#1100)	2026-08-07 08:21:20 +00:00
be-coder-06andMos	4fa2768962	fix(fleet): propagate roster git identity (#1073) ... Co-authored-by: be-coder-06 <[email protected]>	2026-08-07 07:07:45 +00:00
be-coder-08andMos	80a45b1e1c	feat(pr-merge): preserve linked authors in squash messages (#1066) ... Co-authored-by: be-coder-08 <[email protected]>	2026-08-06 05:36:59 +00:00
be-coder-08andMos	16f91157a1	test(ci): make queue guard harness deterministic (#1062) ... Co-authored-by: be-coder-08 <[email protected]>	2026-08-05 21:49:44 +00:00
coder-mos1andmos-dt-0	58b971aba3	fix(rm-03): make CI queue guard fail on asserted non-readiness (#1032) ... Co-authored-by: coder-mos1 <[email protected]>	2026-08-01 18:55:26 +00:00
coder-mos1andmos-dt-0	f4fd5967fc	RM-61: prove ci-postgres teardown discrimination (#1033) ... Co-authored-by: coder-mos1 <[email protected]>	2026-08-01 14:54:04 +00:00
mos-dt-0andMos	f65e9ea656	docs(remediation): mission-state snapshot at the RM-01 seam (#1028) ... Co-authored-by: mos-dt-0 <[email protected]>	2026-08-01 01:08:11 +00:00
mos-dt-0andMos	f58b3699a6	RM-01: reproducible checkout — the pre-push gate fails on code, not environment (#1027) ... Co-authored-by: mos-dt-0 <[email protected]>	2026-08-01 00:50:12 +00:00
mos-dt-0andMos	01e966f36d	docs(remediation): mission charter + reconciled execution backlog (#1026) ... Co-authored-by: mos-dt-0 <[email protected]>	2026-07-31 22:47:03 +00:00
jason.woltjeandMos	dc45eb7c30	feat(kbn): land KBN-101 Envelope A v6 (rc.20) — declarative sink-RBAC + RLS write-source (Form A) (#902) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 23:58:18 +00:00
jason.woltjeandMos	fabde1c834	docs(rfc): add RFC-001 (MACP/Matrix-native comms) + RFC-002 (install/config/topology) (#886) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 21:02:54 +00:00
jason.woltje	11d2818453	docs(tasks): FCM-M5-001 done — verified completion evidence (supersedes #848) (#853)	2026-07-20 07:45:08 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	627cf2bb38	docs(fleet): add operator configuration guide (#789)	2026-07-20 05:22:25 +00:00
jason.woltje	0582a8912b	WI-7 #834: T-C server-side branch-protection posture + R1 honesty amendment (#847)	2026-07-20 04:20:02 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e4d7d4502d	WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)	2026-07-19 19:46:28 +00:00
jason.woltje	8dfcf1903e	fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839) ... Bound broker reply deadlines (separate read/lock/send budgets, BROKER_BUSY-before-mutation, fresh post-handle send budget → closes drop-after-commit window); fail-close empty/truncated read → GATE_UNAVAILABLE deny. De-flakes the 1917 acceptance surface. terra CODE APPROVE (pi) + Opus SECREV APPROVED (claude) — RoR comment 18143. Promote-lease-lost-ACK residual = fail-safe two-generals observability-gap, routed to WI-3 D2-v5 as named-disclosed-bounded-residual (route i). Gate-16 3-principal author=gpt-sol. closes #838	2026-07-18 07:15:50 +00:00
jason.woltje	abd2791f59	feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837) ... WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829	2026-07-18 05:51:58 +00:00
jason.woltje	8ec67a1126	feat(mosaic): add authenticated external lease broker (#836)	2026-07-18 03:12:23 +00:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00
jason.woltje	3f77229e88	fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)	2026-07-17 21:36:36 +00:00
jason.woltje	9ddc6fbda8	feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)	2026-07-17 03:17:55 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	c593a15ef8	docs(kbn): freeze KBN-101 database role split contract (#774)	2026-07-15 13:34:29 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	eb4e14ae5c	feat(mos): add logical identity connector fencing (#757)	2026-07-14 23:33:06 +00:00
jason.woltje	2e2280070a	docs(#753): clear KBN-010 threat and schema gate (#765)	2026-07-14 21:46:44 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	ba13c08890	Fixes #756 (#763)	2026-07-14 20:26:15 +00:00
jason.woltje	c32d85a337	docs(fleet): define declarative configuration M0 (#760)	2026-07-14 19:53:12 +00:00