35 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
notplants	b73307908d	review(1c): C1 refresh — byte-identical against new keyFile config (izsmiajw==running, zero drift); supersedes vh6vwxbl	2026-05-27 17:57:18 +01:00
notplants	dd710a6f56	review(1c): set C4/W5 TLS verification standard — domain=ci.commoninternet.net (not ci2), SNI+--resolve on fresh VM, leaf fingerprint must match git cert	2026-05-27 17:30:08 +01:00
notplants	228b930a96	review(1c): corroboration — sops cert re-decrypts byte-identically at boot after W1 resize-reboot (strengthens C2)	2026-05-27 17:24:00 +01:00
notplants	95ac37c7bd	review(1c): W2 PASS cold — byte-identical build==running (vh6vwxbl), cert sops-from-git + live TLS leaf-match, no plaintext leak; C1/C2/C3 Adversary-PASS	2026-05-27 16:52:14 +01:00
notplants	c36052021c	review(1c): interim probe — cc-ci-secrets private + all 8 secrets ENC (cert+key in sops, 0 plaintext); byte-identical/TLS pending W2 gate	2026-05-27 16:23:17 +01:00
notplants	e746f37676	review(1c): pre-W2 cold baselines (running-system toplevel, cert hashes, clean-base grep); W2 scrutiny checklist	2026-05-27 16:22:08 +01:00
notplants	be37eccd31	review(1c): Adversary ledger seeded; cold baseline (system healthy pre-refactor; Builder has not begun 1c)	2026-05-27 16:02:13 +01:00
notplants	492fa231cb	review: Adversary sign-off — DONE confirmed by cold check (all D1-D10 PASS <24h, no VETO, system healthy, 6/6 dashboard, 0 orphans); loop terminating	2026-05-27 12:13:12 +01:00
notplants	d4f8dc5093	review: D8 PASS (byte-identical build==running; throwaway-VM live rebuild infeasible by design—documented); DONE-readiness: all D1-D10 PASS <24h, no VETO	2026-05-27 12:00:46 +01:00
notplants	be610b297a	review: D10 PASS 6/6 — lasuite #108 corroborated (real !testme, upgrade genuinely converged+data survived, not -c-hollowed)	2026-05-27 11:58:39 +01:00
notplants	c9087fde20	review: scrutinized lasuite -c (no-converge-checks) — NOT a softening (harness still verifies convergence+health+data); empirical green still required	2026-05-27 11:46:25 +01:00
notplants	78250bc8ce	review: D9 PASS — docs complete + accurate (architecture/enroll/runbook/secrets/install/README) vs verified reality	2026-05-27 10:49:18 +01:00
notplants	6bd6061653	review: M9/D8 reproducibility core PROVEN (clean build == running, zero drift; docs complete); live blank-VM rebuild pending registry creds	2026-05-27 10:48:24 +01:00
notplants	288cdeeb47	review: close A2 (live: default janitor spares fresh orphan; janitor(0) reaps env-less orphan via reconstruction) — all A1-A4 closed	2026-05-27 10:44:00 +01:00
notplants	4b204930a3	review: D10 5/6 VERIFIED via real !testme (3-stage green + outcome-reflected); 6th (lasuite upgrade) blocked on registry creds	2026-05-27 10:41:29 +01:00
notplants	8aaeb29187	review: independently confirmed Docker Hub rate-limit (remaining=1/100) gating lasuite upgrade — real A1 blocker, not harness defect	2026-05-27 10:24:44 +01:00
notplants	27cce50f4c	review: M8/D7 PASS — overview matches reality (6 recipes, corroborated build #s), badges, PR outcome reflection	2026-05-27 08:11:32 +01:00
notplants	6bb3df0139	review: M7/D6 PASS — secret-grep clean across logs+dashboard+git; sops rotation doc matches reality	2026-05-27 07:55:33 +01:00
notplants	307c7dc91e	review: M6.5 PASS — all 6 recipes 3-stage green (Drone builds corroborated) + D5 (no harness surgery) + bluesky-swap documented	2026-05-27 07:24:43 +01:00
notplants	7558654d98	review: reconciliation — all gates M0-M6 PASS (<24h); STATUS CLAIMED strings stale; M6.5 in-flight, no open claim	2026-05-27 06:18:07 +01:00
notplants	b2bf51f754	review: M6.5 running evidence — cryptpad #46 + matrix-synapse #51 3-stage corroborated (4 recipes green)	2026-05-27 06:13:51 +01:00
notplants	9b5910bef8	review: close A3 (verified teardown reaps env-less orphan via docker fallback); A2 mechanism verified, live janitor sweep pending idle	2026-05-27 05:02:40 +01:00
notplants	26cbc06120	review: M6 PASS — custom-html 3-stage + keycloak full 3-stage (build #39 corroborated) + D4 recipe-local (own run) + D5	2026-05-27 04:43:41 +01:00
notplants	fa410ea4c6	review: D6 leak scan extended to recipe-CI build logs — clean (no app-secret leak)	2026-05-27 04:04:51 +01:00
notplants	d6f0f67d49	review: M3 PASS (live: !testme 12s trigger, re-run, !testmexyz no-trigger, org-auth); close A4 (cap=1 mitigates)	2026-05-27 03:14:49 +01:00
notplants	38dcdc7750	review: preliminary D6 leak scan of published Drone logs — clean (no infra-secret leaks)	2026-05-27 02:05:28 +01:00
notplants	720ae1f28f	review: file [adversary] A4 (same-recipe concurrent checkout collision); M6 verify in progress	2026-05-27 01:51:15 +01:00
notplants	23a30388d0	review: M4 PASS + M5 PASS (own cold 3-stage run green, clean teardown); A2/A3 remain open	2026-05-27 01:05:33 +01:00
notplants	b8f3473777	review: remove orphaned old-A1 text left after closing A1	2026-05-27 00:58:46 +01:00
notplants	0fe3d7cda7	review: close A1 (no-ACME enforced); file A2 (dead janitor) + A3 (unverified teardown); M4 verify in progress	2026-05-27 00:52:35 +01:00
notplants	796b642519	review: M3 pre-claim — bridge auth/filter verified (all reject paths); blocker corroborated operator-side	2026-05-26 23:54:06 +01:00
notplants	e07f8a4194	review: M2 PASS — push→green Drone build verified via own push (build #4 @hook success)	2026-05-26 23:28:08 +01:00
notplants	91a8e8d64c	review: M2 live-trigger probe (expect Drone build #4 green)	2026-05-26 23:27:14 +01:00
notplants	352f624ce6	review: M1 PASS (cold E2E: wildcard HTTPS via abra+traefik, clean teardown); file [adversary] A1 ACME-hazard	2026-05-26 22:38:26 +01:00
notplants	c006083967	review: M0 PASS — cold rebuild + sops decrypt + no plaintext-secret leak	2026-05-26 21:57:52 +01:00