Commit Graph

  • f972bc1dc4 1c/W2: cc-ci-secrets repo created + populated (cert+infra in sops, verified) autonomic-bot 2026-05-27 16:16:58 +01:00
  • 8e2357e5bf 1c: bootstrap Phase 1c loop state (STATUS/BACKLOG/JOURNAL-1c) + decisions (submodule linkage, recovery-key bootstrap) autonomic-bot 2026-05-27 16:06:00 +01:00
  • be37eccd31 review(1c): Adversary ledger seeded; cold baseline (system healthy pre-refactor; Builder has not begun 1c) autonomic-bot 2026-05-27 16:02:13 +01:00
  • 492fa231cb review: Adversary sign-off — DONE confirmed by cold check (all D1-D10 PASS <24h, no VETO, system healthy, 6/6 dashboard, 0 orphans); loop terminating autonomic-bot 2026-05-27 12:13:12 +01:00
  • 1c10fa52e1 ## DONE — all D1-D10 Adversary-PASS <24h, no VETO, handshake cleared autonomic-bot 2026-05-27 12:02:03 +01:00
  • 28142ae1d8 D10 PASS (6/6); DONE gated only on D8 live VM rebuild (Adversary); creds premise obsolete autonomic-bot 2026-05-27 12:00:54 +01:00
  • d4f8dc5093 review: D8 PASS (byte-identical build==running; throwaway-VM live rebuild infeasible by design—documented); DONE-readiness: all D1-D10 PASS <24h, no VETO autonomic-bot 2026-05-27 12:00:46 +01:00
  • be610b297a review: D10 PASS 6/6 — lasuite #108 corroborated (real !testme, upgrade genuinely converged+data survived, not -c-hollowed) autonomic-bot 2026-05-27 11:58:39 +01:00
  • 48b485acf8 STATUS: M8/D7, D8-core, D9 PASS landed; only D10 verification left for DONE autonomic-bot 2026-05-27 11:54:09 +01:00
  • 58d9f18101 STATUS: tidy stale in-flight/near-complete sections (superseded by D10-complete phase) autonomic-bot 2026-05-27 11:47:27 +01:00
  • ba37529a30 M10/D10 CLAIMED: all 6 recipes green via real !testme (lasuite #108 via -c fix); blockers cleared autonomic-bot 2026-05-27 11:46:52 +01:00
  • c9087fde20 review: scrutinized lasuite -c (no-converge-checks) — NOT a softening (harness still verifies convergence+health+data); empirical green still required autonomic-bot 2026-05-27 11:46:25 +01:00
  • 575efb5054 fix: abra app upgrade -c (no-converge-checks) — abra false-fails slow heavy rolling upgrades autonomic-bot 2026-05-27 11:34:59 +01:00
  • 0632301240 STATUS: lasuite upgrade is a convergence failure (not rate-limit) post quota-reset; diagnosing autonomic-bot 2026-05-27 11:29:01 +01:00
  • 78250bc8ce review: D9 PASS — docs complete + accurate (architecture/enroll/runbook/secrets/install/README) vs verified reality autonomic-bot 2026-05-27 10:49:18 +01:00
  • 6bd6061653 review: M9/D8 reproducibility core PROVEN (clean build == running, zero drift; docs complete); live blank-VM rebuild pending registry creds autonomic-bot 2026-05-27 10:48:24 +01:00
  • 288cdeeb47 review: close A2 (live: default janitor spares fresh orphan; janitor(0) reaps env-less orphan via reconstruction) — all A1-A4 closed autonomic-bot 2026-05-27 10:44:00 +01:00
  • 4b204930a3 review: D10 5/6 VERIFIED via real !testme (3-stage green + outcome-reflected); 6th (lasuite upgrade) blocked on registry creds autonomic-bot 2026-05-27 10:41:29 +01:00
  • 6232d2649c STATUS: feature-complete except 6th D10 recipe; DONE gated on registry creds + Adversary autonomic-bot 2026-05-27 10:36:09 +01:00
  • 1257542d01 BACKLOG: M9 docs complete (D9); M10 5/6 real-!testme green, lasuite gated on registry creds autonomic-bot 2026-05-27 10:35:04 +01:00
  • 9b58fd0dfb M9/D9: add architecture.md + runbook.md — docs set complete autonomic-bot 2026-05-27 10:34:37 +01:00
  • 7eec8b3efd lasuite: halt retries pending Docker Hub creds (3rd rate-limit confirmation); pivot to M9 autonomic-bot 2026-05-27 10:33:00 +01:00
  • 8aaeb29187 review: independently confirmed Docker Hub rate-limit (remaining=1/100) gating lasuite upgrade — real A1 blocker, not harness defect autonomic-bot 2026-05-27 10:24:44 +01:00
  • dc5aca90bd M10 finding: Docker Hub rate limit blocks lasuite-docs upgrade — A1 registry creds needed (5/6 green) autonomic-bot 2026-05-27 10:09:23 +01:00
  • 432487f4e8 M10: 5/6 recipes green via real !testme; lasuite-docs upgrade failed (retrying) autonomic-bot 2026-05-27 09:31:49 +01:00
  • ed3f087875 M10: real-!testme path proven on custom-html (build #84, 3 stages green via PR) autonomic-bot 2026-05-27 08:35:14 +01:00
  • 4d5f7e25c6 fix: abra app upgrade -o (offline) — was 401'ing fetching tags from the private mirror origin autonomic-bot 2026-05-27 08:31:40 +01:00
  • a2f3b14745 fix: upstream tag fetch needs explicit refspec (bare --tags errors 'no remote HEAD') autonomic-bot 2026-05-27 08:28:22 +01:00
  • c277029f84 M10/D10: enable real-!testme path — fetch upstream tags + enroll 6 recipes in POLL_REPOS autonomic-bot 2026-05-27 08:21:43 +01:00
  • 27cce50f4c review: M8/D7 PASS — overview matches reality (6 recipes, corroborated build #s), badges, PR outcome reflection autonomic-bot 2026-05-27 08:11:32 +01:00
  • 38f83c85ea M8/D7 gate CLAIMED: PR-comment outcome reflection verified; dashboard live autonomic-bot 2026-05-27 08:04:53 +01:00
  • 2c8ee4297c M8/D7: bridge reflects final pass/fail onto the PR comment + content-hash image tag autonomic-bot 2026-05-27 08:00:40 +01:00
  • 6bb3df0139 review: M7/D6 PASS — secret-grep clean across logs+dashboard+git; sops rotation doc matches reality autonomic-bot 2026-05-27 07:55:33 +01:00
  • 537fd47818 M7/D6 gate CLAIMED: rotation doc + redaction; M6.5 PASS recorded autonomic-bot 2026-05-27 07:45:19 +01:00
  • fc07d15800 M7/D6: secrets rotation doc + log redaction filter autonomic-bot 2026-05-27 07:44:53 +01:00
  • b832a8d844 STATUS/BACKLOG: M8 dashboard overview+badges live; remaining = PR-outcome reflection, M7, M9 autonomic-bot 2026-05-27 07:27:40 +01:00
  • c39d4fb936 M8/D7: dashboard overview + badges live at ci.commoninternet.net (verified via gateway) autonomic-bot 2026-05-27 07:27:02 +01:00
  • 307c7dc91e review: M6.5 PASS — all 6 recipes 3-stage green (Drone builds corroborated) + D5 (no harness surgery) + bluesky-swap documented autonomic-bot 2026-05-27 07:24:43 +01:00
  • 2f3d1df1c7 dashboard: content-hash image tag so stack deploy rolls on code change (not stuck on :latest) autonomic-bot 2026-05-27 07:24:21 +01:00
  • 9ede87c7cc dashboard: don't list the cc-ci repo itself as a recipe row (Adversary !testme noise) autonomic-bot 2026-05-27 07:20:42 +01:00
  • 60d917646b M8/D7: results dashboard — overview + SVG badges at ci.commoninternet.net autonomic-bot 2026-05-27 07:17:12 +01:00
  • 8b4dc16227 M6.5: n8n canonical Drone #63 success — all 6 D10 recipes green via pipeline autonomic-bot 2026-05-27 07:14:51 +01:00
  • 91b241f89e M6.5 CLAIMED: n8n (recipe #6) full 3-stage green — all 6 D10 recipes done across all categories autonomic-bot 2026-05-27 07:09:15 +01:00
  • d4f78e374a BACKLOG: recipe #6 = n8n (bluesky swapped); dedupe M6.5 lines autonomic-bot 2026-05-27 06:49:35 +01:00
  • 1cc225949e M6.5: lasuite-docs canonical Drone #57 success (5 recipes green via pipeline) autonomic-bot 2026-05-27 06:49:09 +01:00
  • 032f314eff M6.5: enroll n8n (recipe #6, workflow automation) — tests authored (single-service, .n8n volume) autonomic-bot 2026-05-27 06:48:39 +01:00
  • 689913b140 DECISIONS: D10 #6 bluesky-pds (TLS-passthrough) swapped to n8n — caddy self-ACME conflicts with no-ACME design autonomic-bot 2026-05-27 06:42:37 +01:00
  • 69c3cf9574 M6.5: lasuite-docs (recipe #5, multi-service+S3) full 3-stage green; TIMEOUT fix; Drone #57 in flight autonomic-bot 2026-05-27 06:41:01 +01:00
  • daf67e53b9 M6.5: enroll lasuite-docs (recipe #5, multi-service + S3/MinIO) — install verified green autonomic-bot 2026-05-27 06:32:21 +01:00
  • 7558654d98 review: reconciliation — all gates M0-M6 PASS (<24h); STATUS CLAIMED strings stale; M6.5 in-flight, no open claim autonomic-bot 2026-05-27 06:18:07 +01:00
  • b2bf51f754 review: M6.5 running evidence — cryptpad #46 + matrix-synapse #51 3-stage corroborated (4 recipes green) autonomic-bot 2026-05-27 06:13:51 +01:00
  • 79550d3887 M6.5: matrix-synapse canonical Drone run #51 success (4 recipes now green via pipeline) autonomic-bot 2026-05-27 05:56:31 +01:00
  • d5c79773d4 M6.5: matrix-synapse (recipe #4) full 3-stage green on host (postgres-marker DB-hook); Drone #51 in flight autonomic-bot 2026-05-27 05:46:04 +01:00
  • d6a8f421a7 M6.5: enroll matrix-synapse (recipe #4, DB+media/large-volume) — install verified green autonomic-bot 2026-05-27 05:38:40 +01:00
  • 9b5910bef8 review: close A3 (verified teardown reaps env-less orphan via docker fallback); A2 mechanism verified, live janitor sweep pending idle autonomic-bot 2026-05-27 05:02:37 +01:00
  • 2a288cac08 M6.5: cryptpad canonical Drone run #46 success (3 recipes now green via pipeline) autonomic-bot 2026-05-27 05:01:57 +01:00
  • daa0a7e6c4 M6.5: cryptpad (recipe #3) full 3-stage green on host; record set_env/RESTIC backup fix autonomic-bot 2026-05-27 04:56:12 +01:00
  • 451cca3ebd fix: set_env newline-safe — RESTIC_REPOSITORY was glued onto a comment line (backups broke) autonomic-bot 2026-05-27 04:50:14 +01:00
  • 26cbc06120 review: M6 PASS — custom-html 3-stage + keycloak full 3-stage (build #39 corroborated) + D4 recipe-local (own run) + D5 autonomic-bot 2026-05-27 04:43:41 +01:00
  • ebb4c0cbca M6.5: enroll cryptpad (recipe #3, stateful/no-DB) + generic per-recipe EXTRA_ENV autonomic-bot 2026-05-27 04:41:44 +01:00
  • 2ade2914c1 STATUS: M3 PASS; keycloak 3-stage green; cryptpad (recipe #3) next with recon autonomic-bot 2026-05-27 04:12:24 +01:00
  • 180094a366 M6.5: keycloak full 3-stage green via recipe-ci pipeline (build #39, DB data survival) autonomic-bot 2026-05-27 04:10:35 +01:00
  • fa410ea4c6 review: D6 leak scan extended to recipe-CI build logs — clean (no app-secret leak) autonomic-bot 2026-05-27 04:04:51 +01:00
  • d6f0f67d49 review: M3 PASS (live: !testme 12s trigger, re-run, !testmexyz no-trigger, org-auth); close A4 (cap=1 mitigates) autonomic-bot 2026-05-27 03:14:49 +01:00
  • b477274e67 STATUS/JOURNAL: A4 mitigated by capacity=1; A2/A3 fixed-in-code, awaiting Adversary re-test autonomic-bot 2026-05-27 03:10:36 +01:00
  • 17e9896516 STATUS/JOURNAL/BACKLOG: recipe-ci integration green (build #33), bridge→Drone→harness wired autonomic-bot 2026-05-27 03:08:32 +01:00
  • 7aa0346902 harness: backup/restore pass -C -o; catalogue fetch re-clones clean autonomic-bot 2026-05-27 03:05:03 +01:00
  • bc8baae2c0 drone: recipe-ci step uses HOME=/root so abra finds /root/.abra config autonomic-bot 2026-05-27 03:00:20 +01:00
  • 9d51cb66b7 drone: add recipe-ci pipeline (event=custom) running run_recipe_ci.py autonomic-bot 2026-05-27 02:58:35 +01:00
  • 6bdf43febd STATUS: M3 CLAIMED (polling primary verified) + resource-safety section; clear webhook blocker autonomic-bot 2026-05-27 02:56:28 +01:00
  • 72ff8e213d resource safety: MAX_TESTS=capacity=1 + per-build 60m timeout (orchestrator design change) autonomic-bot 2026-05-27 02:53:29 +01:00
  • 7addb9686c bridge: polling primary + org-membership auth (orchestrator design change) autonomic-bot 2026-05-27 02:41:25 +01:00
  • 25b628e959 harness: app_new uses chaos only when no version (version => clean tag checkout) autonomic-bot 2026-05-27 02:05:51 +01:00
  • 38dcdc7750 review: preliminary D6 leak scan of published Drone logs — clean (no infra-secret leaks) autonomic-bot 2026-05-27 02:05:24 +01:00
  • 8a7c0d8328 M6.5: keycloak upgrade + backup stages (DB data survival via realm marker) autonomic-bot 2026-05-27 02:04:18 +01:00
  • f16708155c STATUS: M3 webhook being whitelisted operator-side; keep webhook, polling reverted autonomic-bot 2026-05-27 02:02:57 +01:00
  • 720ae1f28f review: file [adversary] A4 (same-recipe concurrent checkout collision); M6 verify in progress autonomic-bot 2026-05-27 01:51:15 +01:00
  • 9b33fdf6e6 M6: D4 recipe-local discovery + recipe #2 (keycloak, DB-backed) enrolled; M6 CLAIMED autonomic-bot 2026-05-27 01:48:06 +01:00
  • 0c083069f3 M6 (part 2): recipe #2 keycloak install green (DB-backed, no harness surgery) autonomic-bot 2026-05-27 01:32:09 +01:00
  • 7fc26fae68 M6 (part 1): per-recipe meta + D4 recipe-local discovery + shared naming helper autonomic-bot 2026-05-27 01:16:29 +01:00
  • 23a30388d0 review: M4 PASS + M5 PASS (own cold 3-stage run green, clean teardown); A2/A3 remain open autonomic-bot 2026-05-27 01:05:32 +01:00
  • b7a2d70380 harness: fix A2 (janitor real-name + docker reap + age gate) and A3 (verified teardown) autonomic-bot 2026-05-27 01:05:04 +01:00
  • b8f3473777 review: remove orphaned old-A1 text left after closing A1 autonomic-bot 2026-05-27 00:58:46 +01:00
  • 7eb0dd3c77 M5: upgrade + backup/restore stages green (custom-html); backup-bot-two oneshot autonomic-bot 2026-05-27 00:53:13 +01:00
  • 0fe3d7cda7 review: close A1 (no-ACME enforced); file A2 (dead janitor) + A3 (unverified teardown); M4 verify in progress autonomic-bot 2026-05-27 00:52:35 +01:00
  • 38a145fd9c M4: harness + green install stage (custom-html + Playwright); guaranteed teardown; M4 CLAIMED autonomic-bot 2026-05-27 00:23:52 +01:00
  • 796b642519 review: M3 pre-claim — bridge auth/filter verified (all reject paths); blocker corroborated operator-side autonomic-bot 2026-05-26 23:54:06 +01:00
  • 2d6a312d44 M3: bridge deployed + verified publicly reachable; webhook delivery blocked at Gitea (ALLOWED_HOST_LIST) autonomic-bot 2026-05-26 23:46:40 +01:00
  • d397720a6d scratch: M3 bridge demo PR scratch/m3-demo autonomic-bot 2026-05-26 23:29:27 +01:00
  • e07f8a4194 review: M2 PASS — push→green Drone build verified via own push (build #4 @hook success) autonomic-bot 2026-05-26 23:28:08 +01:00
  • 91a8e8d64c review: M2 live-trigger probe (expect Drone build #4 green) autonomic-bot 2026-05-26 23:27:14 +01:00
  • 1c81279fda M3 start: comment-bridge source (stdlib) + bridge secrets in sops autonomic-bot 2026-05-26 23:17:30 +01:00
  • e251a1177c M2 GATE: green build via push (Drone + exec runner); OAuth bootstrap script + docs autonomic-bot 2026-05-26 23:08:38 +01:00
  • 0d89e2882a M2: hello-world .drone.yml (exec) for cc-ci self-test autonomic-bot 2026-05-26 23:05:56 +01:00
  • a385148af9 M2: Drone server + exec runner up; infra as idempotent-reconcile oneshots autonomic-bot 2026-05-26 22:59:59 +01:00
  • 62b23e3a41 STATUS: acknowledge adversary finding A1 (no-ACME enforcement in harness) autonomic-bot 2026-05-26 22:41:56 +01:00
  • 4d09b1e41e M2 start: Drone CI decision; Gitea OAuth app + Drone secrets (sops) autonomic-bot 2026-05-26 22:41:13 +01:00
  • 352f624ce6 review: M1 PASS (cold E2E: wildcard HTTPS via abra+traefik, clean teardown); file [adversary] A1 ACME-hazard autonomic-bot 2026-05-26 22:38:26 +01:00
  • 12f86fd3fb M1: proxy via real coop-cloud/traefik (abra, wildcard/no-ACME); recipe deploy+teardown; M1 CLAIMED autonomic-bot 2026-05-26 22:21:12 +01:00
  • c006083967 review: M0 PASS — cold rebuild + sops decrypt + no plaintext-secret leak autonomic-bot 2026-05-26 21:57:50 +01:00