625 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
ms-lead-reviewer	2bba933f67	docs(827): Gate0 Probe-3 full-closure §3-review v7 PASS @f609a449 ... Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100; Gate-16 author≠reviewer; byte-only; did not build). Reviewed object = f609a44953 harness sha256 = 0f1bd1b39399b32f243d901230e2d840794a2144edd723a095dab716833a7a9b Verdict PASS: B5 full-closure hashed==executed via conjunction (git-object source @f4008307/@23c0caca + fixture-private 0700/0600 O_EXCL no-writable-window + re-hash immediately before each Popen) for launcher e950e422 / helper 06162540 / broker 4db4fef1; B6 one shared pinned lease_generation.py bound to launcher import (sys.path[0]=pinned) AND broker --generation-module; closure import guard complete; BAR1 fwd-contains 66b1e0a0; BAR2 .state stays in fixture root, fidelity untouched; BAR3 carry-over intact; ABSENT sweep 0. Byte-only; ran nothing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 17:51:46 -05:00
ms-lead-reviewer	f609a44953	test(827): pin full D4 runtime closure	2026-07-18 17:45:47 -05:00
mos-orchestrator	b6bd0cd91c	docs(827): SUPERSEDE Mos co-attest 12914d8 — homelab 3rd-principal FAIL upheld, stricter hashed==executed-full-closure bar; live target=v7 (ii)-materialization	2026-07-18 17:27:05 -05:00
mos-orchestrator	12914d8edd	docs(827): Mos byte-scope-verify CO-ATTESTATION v-final — probe-3 PASS @2d54a9dd ... Independent provider-byte verify of harness 2d54a9dd (sha256 15a154df, 27366B) + review-v6 23c0caca. VERDICT: byte-scope + mechanism + hygiene PASS. NEW-5 closed via approach (i) [exec-adjacent re-hash, in-place, (ii) reverted]; NEW-6 closed [portable resolve_gated_wi_root, off-by-one gone]; creds-scrub + source-invalid-purge confirmed; all mechanism/assertion/fidelity/isolation invariants byte-stable; R1 boundary held. Committed under distinct mos-orchestrator identity = distinct-identity co-attestation of record (resolves shared ms-lead-reviewer signer gap). Byte-clear ONLY — FIRE still gated on homelab third-principal verify + transparency-to-Jason + explicit Mos FIRE GO.	2026-07-18 17:06:58 -05:00
ms-lead-reviewer	23c0caca9b	docs(827): Gate0 Probe-3 NEW5/NEW6 §3-review v6 PASS @2d54a9dd ... Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100; Gate-16 author≠reviewer; byte-only; did not build). Reviewed object = 2d54a9dd14 harness sha256 = 15a154df55273f51301763a984485fd63813f6d1f05d2728abb9fb8b9c040b1a Verdict PASS: NEW-5 approach (i) exact-byte sha256 pin trust anchor + adjacent re-hash immediately before Popen (no interleaved yield) + exec in place at pinned f4008307 worktree ((ii) copy-to-fixture/PYTHONPATH reverted); NEW-6 portable+validated GATED_WI_ROOT (worktree enumeration, is-inside-work-tree + HEAD==f4008307, off-by-one gone); full v4/v5 carry-over byte-stable, R1 file-backed fidelity unperturbed, ABSENT sweep 0. Byte review only; ran nothing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 16:55:17 -05:00
ms-lead-reviewer	2d54a9dd14	fix(827): execute pinned launcher in place	2026-07-18 16:51:08 -05:00
ms-lead-reviewer	6164dc0794	fix(827): harden pinned launcher validation	2026-07-18 16:48:53 -05:00
ms-lead-reviewer	7ff63cd5c1	fix(827): bind D4 launcher bytes to fixture	2026-07-18 16:46:38 -05:00
ms-lead-reviewer	49f0cdd15a	docs(827): Gate0 Probe-3 hygiene §3-review v5 FAIL @7f975b95 ... Independent Opus §3-conformance/SECREV review (Gate-16 author≠reviewer). Reviewed object = 7f975b95ad harness sha256 = c3a09a342a4b367184d44472ec6fc11f8a3aabb7e90d5a72aa6b7044b1d9b91e Verdict FAIL: hygiene delta (a) creds-scrub + (b) source-invalid-removal landed correctly and (c) byte-stable + (d) absent-sweep-0 hold, BUT homelab NEW-6 (GATED_WI_ROOT off-by-one/non-portable resolution, :32) and NEW-5 (check-then-exec launcher TOCTOU, hash :280/:287 vs exec :514-515) are present in these bytes; both must close for PASS. Byte review only; ran nothing. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 16:41:32 -05:00
ms-lead-reviewer	7f975b95ad	test(827): scrub D4 fixture credentials	2026-07-18 16:34:36 -05:00
ms-lead-reviewer	cff21358a2	docs(827): Gate0 Probe-3 fidelity §3-review v4 PASS @48484938 ... Independent Opus §3-conformance review (Gate-16 author≠reviewer). Reviewed object = 4848493870 harness sha256 = 9095eab7a4ddf11bb92bb5971d49e1facad12f4692ce2081665b0af47cbe5098 Verdict PASS: BAR1 traceability (launcher pinned head+sha256 to WI-3 f4008307), BAR2 file-backed generation fidelity (read/bump_runtime_generation on the fixture .state; assert_d4 observes state-file source), BAR3 carry-over (live-path/precondition/isolation/lease_anchor_registered intact), BAR4 b4-1..b4-5 (gated launcher, allow-list env no-escape, --runs==3, whole-launch cleanup, -O-safe derived PASS). Byte review only; ran nothing. FIRE remains separately gated on Mos GO. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 16:24:17 -05:00
ms-lead-reviewer	4848493870	test(827): observe file-backed D4 generations	2026-07-18 16:15:50 -05:00
ms-lead-reviewer	d19b41a62c	docs(827): Gate0 Probe-3 Class-B §3-review v3 PASS @ace60667 ... Independent Opus §3-conformance review (Gate-16 author≠reviewer). Reviewed object = ace6066762 harness sha256 = 2f11c9391c0eef203f26b1206bee8bc4cd106e8c1192399c5e7b71f41a3f6b75 Verdict PASS: (a) live-path gated launcher, (b) fail-closed precondition, (c) fixture-socket isolation, (d) lease_anchor_registered assertion intact. Byte review only; ran nothing. FIRE remains separately gated on Mos GO. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-18 15:38:57 -05:00
ms-lead-reviewer	ace6066762	fix(827): gate D4 launcher fixture	2026-07-18 15:32:45 -05:00
ms-lead-reviewer	839d156f6c	fix(827): isolate D4 lease broker fixture	2026-07-18 13:44:08 -05:00
ms-lead-reviewer	aa88a5cb9d	test(827): add D4-focused generation harness	2026-07-18 13:26:13 -05:00
ms-lead-reviewer	a532df5943	test(827): harden and review Gate0 probes	2026-07-17 19:39:45 -05:00
ms-lead-reviewer	b9780eb058	chore(827): exclude probe bytecode	2026-07-17 19:38:18 -05:00
ms-lead-reviewer	d5c599e2b0	test(827): capture Gate0 runtime evidence	2026-07-17 19:37:56 -05:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00
jason.woltje	3f77229e88	fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)	2026-07-17 21:36:36 +00:00
jason.woltje	686c881fe4	fix: fetch actual Gitea PR head for Codex reviews (#815)	2026-07-17 19:44:56 +00:00
jason.woltje	fe7a468c9d	ci: bake jq into the prebuilt test image (#821)	2026-07-17 19:12:43 +00:00
jason.woltje	cabf02e7b9	ci: bake git into the prebuilt test image (#819)	2026-07-17 18:11:16 +00:00
jason.woltje	9ddc6fbda8	feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)	2026-07-17 03:17:55 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	3be443c96d	feat(mosaic): claudex isolated config + env-inject + yolo wiring (P2–P4 of #790) (#806)	2026-07-16 22:10:33 +00:00
jason.woltje	59f5f51ffd	feat(mosaic): claudex proxy preflight + lifecycle (P1 of #790) (#793)	2026-07-16 21:15:33 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	c593a15ef8	docs(kbn): freeze KBN-101 database role split contract (#774)	2026-07-15 13:34:29 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	eb4e14ae5c	feat(mos): add logical identity connector fencing (#757)	2026-07-14 23:33:06 +00:00
jason.woltje	2e2280070a	docs(#753): clear KBN-010 threat and schema gate (#765)	2026-07-14 21:46:44 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	ba13c08890	Fixes #756 (#763)	2026-07-14 20:26:15 +00:00
jason.woltje	c32d85a337	docs(fleet): define declarative configuration M0 (#760)	2026-07-14 19:53:12 +00:00
jason.woltje	48b2bc42c9	docs(mos): format Option 2 qualification report (#762)	2026-07-14 19:33:09 +00:00
jason.woltje	5e832049bb	docs(mos): preserve Option 2 qualification evidence (#759)	2026-07-14 19:16:11 +00:00
jason.woltje	49e8a54105	docs(#751): Publish native Kanban/SOT canon (#752)	2026-07-14 17:08:09 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00