Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
596 commits
Select commit Hold shift + click to select a range
435c84b
fix: harden credential broker ledger verbs
ebursztein Jun 13, 2026
9fed218
test: prove unknown model shape detection
ebursztein Jun 13, 2026
620087a
test: prove unknown mcp activity routing
ebursztein Jun 13, 2026
5283e1d
test: prove model tool declarations are not calls
ebursztein Jun 13, 2026
e3dd374
test: tighten tool call ledger invariants
ebursztein Jun 13, 2026
c4b4c3d
test: prove streaming model ledger paths
ebursztein Jun 13, 2026
6f0540e
test: prove agent bootstrap profile state
ebursztein Jun 13, 2026
446db13
test: prove real model sdk ledger paths
ebursztein Jun 13, 2026
c909999
test: tighten doctor security ledger proof
ebursztein Jun 13, 2026
ac2e8cd
fix: expose profile status in gateway health
ebursztein Jun 13, 2026
4ae0636
fix: include manifest provenance in support bundle
ebursztein Jun 13, 2026
f0ca19f
test: prove package manifest override provenance
ebursztein Jun 13, 2026
5baa2d2
fix: log installed manifest provenance
ebursztein Jun 13, 2026
fc6f3cb
fix: expose profile obom in support diagnostics
ebursztein Jun 13, 2026
829a270
fix: include supply chain refs in support bundle
ebursztein Jun 13, 2026
c7b3c2b
docs: close status debug release proof
ebursztein Jun 13, 2026
91a78d2
docs: close doctor protocol coverage gate
ebursztein Jun 13, 2026
f18b27c
fix: enforce file boundary plugin decisions
ebursztein Jun 13, 2026
ec3b252
fix: make credential broker memory first
ebursztein Jun 13, 2026
29085b1
test: guard single db writer rail
ebursztein Jun 13, 2026
c22e92a
fix: route profile mcp calls through security ledger
ebursztein Jun 13, 2026
7e65198
test: add ironbank profile mcp ledger proof
ebursztein Jun 13, 2026
c9d0dbd
fix: satisfy clippy in logged mcp dispatch
ebursztein Jun 13, 2026
79b59e1
fix: clear full-gate rust drift
ebursztein Jun 13, 2026
412ad4a
test: align credential broker ledger assertions
ebursztein Jun 13, 2026
87d868c
test: clarify plugin route rewrite semantics
ebursztein Jun 13, 2026
ffcc648
fix: keep file previews out of rewrite data
ebursztein Jun 13, 2026
47d5100
fix: scope keychain index to macos
ebursztein Jun 13, 2026
81e0907
docs: record final gate proof
ebursztein Jun 13, 2026
aae1968
bench: refresh release gate baselines
ebursztein Jun 13, 2026
0d1c0a3
ci: align release gates with live rails
ebursztein Jun 13, 2026
74bcda4
ci: gate kvm checkpoint tests by architecture
ebursztein Jun 13, 2026
32712a8
ci: harden app and agent release tests
ebursztein Jun 13, 2026
785dd80
ci: materialize config before package repack
ebursztein Jun 13, 2026
3bd7826
ci: share config materialization in install tests
ebursztein Jun 13, 2026
36522cc
ci: prepare install test assets before materializing
ebursztein Jun 13, 2026
2f38acf
ci: let coverage report before release gates
ebursztein Jun 13, 2026
34bc1b0
ci: generate frontend settings before checks
ebursztein Jun 13, 2026
04e1fbc
ci: bound python coverage to contract tests
ebursztein Jun 13, 2026
5a8d7e2
test: harden skill contract coverage
ebursztein Jun 13, 2026
0b998e8
ci: prepare non-vm integration fixtures
ebursztein Jun 13, 2026
03c5319
fix: burn stale config authoring rails
ebursztein Jun 13, 2026
e1b3a76
docs: codify profile config authority
ebursztein Jun 13, 2026
019c78d
chore: burn backend builder authoring rail
ebursztein Jun 13, 2026
adebb38
docs: clarify config authority contract
ebursztein Jun 13, 2026
7065fdb
fix: route credential broker reload through gateway
ebursztein Jun 13, 2026
e9f1af0
test: prove profile overview routes through gateway
ebursztein Jun 13, 2026
e90ad6c
test: close ironbank plugin action matrix
ebursztein Jun 13, 2026
90a7e9a
docs: close release benchmark proof ledger
ebursztein Jun 13, 2026
1fd5619
docs: reconcile completed doctor benchmark sprint
ebursztein Jun 13, 2026
bc86d9d
docs: clarify config authority contract
ebursztein Jun 13, 2026
27ee87f
docs: pin config authority contract
ebursztein Jun 13, 2026
a589d42
fix: burn builder mcp escape hatch
ebursztein Jun 14, 2026
f390eb3
fix: keep image builds under capsem-admin
ebursztein Jun 14, 2026
c36a8ca
test: prove codex model tool ledger path
ebursztein Jun 14, 2026
c67f924
test: randomize codex tool ledger proof
ebursztein Jun 14, 2026
49127c4
fix: prove model and credential ledger truth
ebursztein Jun 14, 2026
9251683
fix: prove active profile model ledger truth
ebursztein Jun 14, 2026
14cb91c
fix: preserve http security event transport ledger
ebursztein Jun 14, 2026
3270443
fix: account for denied http request ledger
ebursztein Jun 14, 2026
fc9548f
fix: expose pending http ask decisions
ebursztein Jun 14, 2026
4346d11
fix: prove brokered http rewrite ledger
ebursztein Jun 14, 2026
67ec1c6
test: refactor openai ironbank client proof
ebursztein Jun 14, 2026
f161d33
test: require broker proof for ai clients
ebursztein Jun 14, 2026
4c6e957
fix: split model provider identity from protocol
ebursztein Jun 15, 2026
a369906
chore: format ledger write paths
ebursztein Jun 15, 2026
00d5f89
fix: keep local model fixtures on the security rail
ebursztein Jun 15, 2026
5c27a27
docs: mark unknown provider ironbank proof
ebursztein Jun 15, 2026
1ac8dd6
test: prove claude ollama launcher ledger
ebursztein Jun 15, 2026
ed46360
feat: support corp upstream routing overrides
ebursztein Jun 15, 2026
08fdbed
docs: record agy ironbank blocker
ebursztein Jun 15, 2026
939ca63
docs: record unknown provider ironbank proof
ebursztein Jun 15, 2026
dbf4bcf
docs: record local network rule proof
ebursztein Jun 15, 2026
aff7879
test: add agy code assist replay fixtures
ebursztein Jun 15, 2026
d62b309
test: align agy replay fixtures
ebursztein Jun 15, 2026
a89e106
test: align settings conformance with profile split
ebursztein Jun 15, 2026
8df3450
refactor: remove legacy MCP server merge rail
ebursztein Jun 15, 2026
6df73a1
fix: require explicit profile assets
ebursztein Jun 15, 2026
01962fe
refactor: rename MCP profile config contract
ebursztein Jun 15, 2026
967a92f
refactor: remove settings mcp rail
ebursztein Jun 15, 2026
c0a33ad
test: tighten agy fixture contract
ebursztein Jun 15, 2026
abf2185
fix: parse gpt5 responses through mitm
ebursztein Jun 15, 2026
c15c4b9
test: refresh ironbank model pricing ledger
ebursztein Jun 15, 2026
f237710
fix: use compact upstream pricing ledger
ebursztein Jun 15, 2026
1eedf72
test: extend ironbank http body ledger proof
ebursztein Jun 15, 2026
851112b
test: add ironbank dns ledger proof
ebursztein Jun 15, 2026
50faa6f
test: add ironbank mcp ledger proof
ebursztein Jun 15, 2026
1213d59
test: add ironbank file process package ledger proof
ebursztein Jun 15, 2026
c5467b3
test: add ironbank credential plugin ledger proof
ebursztein Jun 15, 2026
eda249e
fix: burn network security side rail
ebursztein Jun 15, 2026
48f8bbb
test: add ironbank two-turn ledger helper
ebursztein Jun 15, 2026
139239e
test: add ironbank capsem mcp proof
ebursztein Jun 15, 2026
850e9d7
test: prove openai model ledger paths
ebursztein Jun 15, 2026
67e8f12
test: prove claude streaming ledger path
ebursztein Jun 15, 2026
ada1675
fix: store full event body evidence
ebursztein Jun 15, 2026
cd59d27
fix: store broker credentials in single keychain vault
ebursztein Jun 15, 2026
742a450
fix(service): keep profile status off asset hash hot path
ebursztein Jun 16, 2026
828277c
test(ironbank): gate route latency and CPU health
ebursztein Jun 16, 2026
328d741
test(ironbank): assert route enforcement decisions
ebursztein Jun 16, 2026
c83876b
fix(cli): stop launchagent without keepalive restart
ebursztein Jun 16, 2026
b76341a
fix(service): classify stale boot sessions as defunct
ebursztein Jun 16, 2026
959f5b3
fix(cli): keep service control commands local
ebursztein Jun 16, 2026
83c483b
fix(service): return lifecycle state from provision routes
ebursztein Jun 16, 2026
6fd4eb0
fix(cli): honor explicit service stops
ebursztein Jun 16, 2026
5f9e1dc
fix(security): keep default rules out of effective decisions
ebursztein Jun 16, 2026
84a3c35
test(ironbank): ignore non-http transcript rows
ebursztein Jun 16, 2026
8381355
style(logger): apply rustfmt to body blob tests
ebursztein Jun 16, 2026
e00a5ea
fix(sessions): use profile scoped session names
ebursztein Jun 16, 2026
375daed
test(service): gate profile scoped session naming
ebursztein Jun 16, 2026
30f965b
fix(tui): refresh gateway state off input thread
ebursztein Jun 16, 2026
b4e5e7b
fix(tui): preserve agent terminal screens
ebursztein Jun 16, 2026
eab94b8
fix(service): inspect incompatible session ledgers
ebursztein Jun 16, 2026
543a614
fix(bench): run release benchmark through mock server
ebursztein Jun 16, 2026
f3154c5
test(bench): align release benchmark gate name
ebursztein Jun 16, 2026
64917bd
chore(bench): refresh release benchmark evidence
ebursztein Jun 16, 2026
b99f276
fix(frontend): coalesce terminal io
ebursztein Jun 16, 2026
b3cf15f
fix(logger): record model wire protocol
ebursztein Jun 16, 2026
a64e2ee
test(ironbank): assert dynamic codex tool calls
ebursztein Jun 16, 2026
2aa5ab2
fix(profiles): expose route-owned profile metadata
ebursztein Jun 16, 2026
d75a7dc
test(bench): rename local protocol benchmark rail
ebursztein Jun 16, 2026
541f8a4
fix(gateway): coalesce terminal relay bursts
ebursztein Jun 16, 2026
c061631
test(routes): guard profile UI route matrix
ebursztein Jun 16, 2026
c5fe801
test(sessions): guard dashboard session state
ebursztein Jun 16, 2026
614a1a4
fix(frontend): clean stats detail ledger vocabulary
ebursztein Jun 17, 2026
70ddfae
fix(profile): remove retired mcp approval route field
ebursztein Jun 17, 2026
a3af171
fix(tui): keep profile session contract route-owned
ebursztein Jun 17, 2026
299ff4a
fix(gateway): forward snapshot route contract
ebursztein Jun 17, 2026
fe72cb9
test(service): cover plugin route contract
ebursztein Jun 17, 2026
11046b8
test(service): prove credential store lifecycle routes
ebursztein Jun 17, 2026
d8ba5a6
test(frontend): lock profile plugin route contract
ebursztein Jun 17, 2026
2524255
test(service): prove snapshot routes ignore session db
ebursztein Jun 17, 2026
34480e3
test(security): prove first-party CEL fact contract
ebursztein Jun 17, 2026
3a9346d
test(ironbank): align route ledger contracts
ebursztein Jun 17, 2026
808fb40
test(install): expose package payload contract gate
ebursztein Jun 17, 2026
4351d63
test(admin): prove profile materialization contract
ebursztein Jun 17, 2026
9a5942c
fix(assets): preserve manifest hydration provenance
ebursztein Jun 17, 2026
fd06626
test(ironbank): prove gemini api ledger contract
ebursztein Jun 17, 2026
5de261e
test(config): gate source layout contract
ebursztein Jun 17, 2026
20717b1
refactor(config): derive image workspace from profiles
ebursztein Jun 17, 2026
fafdc39
test(ironbank): add claude cli ledger gate
ebursztein Jun 17, 2026
03dd773
test(release): gate obom and sbom evidence
ebursztein Jun 17, 2026
7fd6030
fix(frontend): burn retired policy vocabulary
ebursztein Jun 17, 2026
082ca7c
fix(frontend): hide toolbar build stamp
ebursztein Jun 17, 2026
835663b
fix(frontend): use semantic status colors
ebursztein Jun 17, 2026
73c0ca1
test(ironbank): gate profile asset readiness
ebursztein Jun 17, 2026
26791c6
test(frontend): restore route contract gates
ebursztein Jun 17, 2026
2860d9d
fix service file control frame contract
ebursztein Jun 17, 2026
693c295
fix(ironbank): parse google code assist envelopes
ebursztein Jun 17, 2026
54f0c55
fix(install): invoke mac package without gui wait
ebursztein Jun 17, 2026
7e907ed
test(ironbank): add session dashboard route proof
ebursztein Jun 17, 2026
c26cbaf
test(ironbank): prove stats detail route truth
ebursztein Jun 17, 2026
ceb2632
fix: persist profile plugin edits
ebursztein Jun 17, 2026
8f64d7b
fix(cli): honor run dir for status health
ebursztein Jun 17, 2026
935fe18
test(ironbank): prove local network policy facts
ebursztein Jun 17, 2026
c58e7c2
test(ironbank): prove mock server contract
ebursztein Jun 17, 2026
56222cd
test(ironbank): anchor capsem doctor gate
ebursztein Jun 17, 2026
b8e2821
chore(mock-server): finish protocol fixture rename
ebursztein Jun 17, 2026
d6092c5
test(release): guard bootstrap and just contracts
ebursztein Jun 17, 2026
683b82f
test(ironbank): harden capsem doctor acceptance
ebursztein Jun 17, 2026
f13ddd1
test(ironbank): add codex cli ledger gate
ebursztein Jun 17, 2026
a3236f5
test(bench): record release benchmark baseline
ebursztein Jun 17, 2026
087de80
test(bench): add release benchmark report details
ebursztein Jun 17, 2026
3138c5c
fix(build): generate settings from image config
ebursztein Jun 18, 2026
03357f6
fix(test): start colima from bootstrap gate
ebursztein Jun 18, 2026
4d3ae89
fix(frontend): update audited astro stack
ebursztein Jun 18, 2026
4ecaf3d
fix(model): preserve gemini tool argument bytes
ebursztein Jun 18, 2026
e349461
fix(model): infer provider from known model names
ebursztein Jun 18, 2026
6c0b1e4
fix(logger): tolerate older tool response ledgers
ebursztein Jun 18, 2026
af8edef
test(core): stabilize credential telemetry hook gates
ebursztein Jun 18, 2026
8a7b4ce
test: repair release gate regressions
ebursztein Jun 18, 2026
aa1edda
fix: disable keychain credential store
ebursztein Jun 18, 2026
856cf34
fix: align unknown model endpoint test
ebursztein Jun 18, 2026
5b6881d
fix: honor gateway run dir for logs
ebursztein Jun 18, 2026
04c7630
test: wait for OpenAI extra ledger rows
ebursztein Jun 18, 2026
88dfbed
test: cover builder backend helpers
ebursztein Jun 18, 2026
b971f9c
fix: preserve one-shot run isolation
ebursztein Jun 18, 2026
1d987bc
test: ignore live provider dotenv files
ebursztein Jun 18, 2026
e550ed1
test: guard credential store against keychain
ebursztein Jun 18, 2026
915b095
test: move Gemini replay to 3.5 flash
ebursztein Jun 18, 2026
0ddbb7c
test: keep Claude replay on release model
ebursztein Jun 18, 2026
532bc87
test: add live provider canary gate
ebursztein Jun 18, 2026
33daecf
test: pin file-backed credential storage
ebursztein Jun 18, 2026
89f8fa5
bench: refresh release benchmark evidence
ebursztein Jun 18, 2026
6a9b0ce
test: guard service control boundary
ebursztein Jun 18, 2026
d5e451d
test: add provider-specific ironbank gates
ebursztein Jun 18, 2026
4665a6d
test: make agy stats gate discoverable
ebursztein Jun 18, 2026
f7dbf9a
docs: mark credential store file-backed for 1.3
ebursztein Jun 18, 2026
2bc6681
test: add agy release replay gate
ebursztein Jun 18, 2026
6148985
fix: make credential store file-backed only
ebursztein Jun 18, 2026
1192a75
docs: reconcile 1.3 hotlist with sprinty
ebursztein Jun 18, 2026
4db9026
fix: pin installed credential store path
ebursztein Jun 18, 2026
8ae03e0
fix: restore docs release gate
ebursztein Jun 18, 2026
c304cfb
fix: keep cli boundary helper test-only
ebursztein Jun 18, 2026
468c28d
fix: remove keychain credential namespace vestige
ebursztein Jun 18, 2026
de0877e
test: refresh release benchmark baseline
ebursztein Jun 18, 2026
00af7a5
test: add release evidence collector
ebursztein Jun 18, 2026
6427d1f
fix: avoid stale keychain stop during install
ebursztein Jun 18, 2026
da0877e
fix: clean test-home service on gate exit
ebursztein Jun 18, 2026
c06b4b3
test: refresh release benchmark baseline
ebursztein Jun 18, 2026
f2848a3
docs: clarify gateway explicit route contract
ebursztein Jun 18, 2026
3f2550c
fix: harden file-backed credential install guard
ebursztein Jun 18, 2026
4d84e98
test: refresh release benchmark baselines
ebursztein Jun 18, 2026
ad1fb45
fix(service): cache profile rule route data
ebursztein Jun 18, 2026
a046812
test: enforce ironbank evidence guard
ebursztein Jun 18, 2026
8323a77
test: guard installed credential helpers
ebursztein Jun 18, 2026
cb00c5e
test: refresh release gate benchmarks
ebursztein Jun 18, 2026
0f72958
test: guard stop against credential hydration
ebursztein Jun 18, 2026
2c7486d
fix(installer): remove retired keychain backup helpers
ebursztein Jun 18, 2026
d19648d
fix(installer): remove stale user app bundle
ebursztein Jun 18, 2026
fc45d3d
test: refresh release benchmark artifacts
ebursztein Jun 18, 2026
201cf89
fix: remove hidden keychain trust paths
ebursztein Jun 18, 2026
782501d
test: refresh release benchmark baselines
ebursztein Jun 18, 2026
f272f41
fix: remove native tls from service release
ebursztein Jun 18, 2026
75f2d09
fix(tui): drain bursty terminal input
ebursztein Jun 18, 2026
ad0d677
test(gateway): pin terminal relay batching
ebursztein Jun 18, 2026
fd9d9a5
fix(installer): prevent mixed profile asset homes
ebursztein Jun 18, 2026
b74b07d
bench: refresh release benchmark evidence
ebursztein Jun 18, 2026
3166fd3
fix(pkg): reject retired keychain payloads
ebursztein Jun 18, 2026
5cbf38d
fix(ui): tighten stats ledger contract
ebursztein Jun 18, 2026
ae6b328
fix(service): remove legacy asset health from vm list
ebursztein Jun 18, 2026
9f2a7cd
fix(gateway): drop global asset status
ebursztein Jun 18, 2026
07348d0
fix(ui): avoid duplicate profile actions
ebursztein Jun 18, 2026
fe5dbf5
fix(service): remove legacy asset health payload
ebursztein Jun 18, 2026
0c35126
test: restore frontend release gate
ebursztein Jun 18, 2026
1e27400
fix(install): fail closed on missing helper binaries
ebursztein Jun 18, 2026
dac0ec0
fix(install): remove retired admin bundle
ebursztein Jun 18, 2026
081681c
fix(install): stabilize helper signing identities
ebursztein Jun 18, 2026
08fe2de
test(ui): align profile card readiness contract
ebursztein Jun 18, 2026
ba1a850
test(ui): align chrome wording with ledger contract
ebursztein Jun 18, 2026
0e5ad00
docs: enforce explicit gateway route guidance
ebursztein Jun 18, 2026
9319215
bench: refresh 1.3 release baselines
ebursztein Jun 18, 2026
c9505a8
ci: create generated profile catalog directory
ebursztein Jun 18, 2026
482a13d
ci: materialize runtime profiles before python tests
ebursztein Jun 18, 2026
2b6556c
test: pin profile config ontology
ebursztein Jun 18, 2026
3483a9e
fix: materialize profiles from manifest arch
ebursztein Jun 18, 2026
af2eec0
fix: prepare CI manifest before profile materialization
ebursztein Jun 18, 2026
fdaac1f
fix: refresh CI Python coverage list
ebursztein Jun 18, 2026
295b7ef
bench: refresh release benchmark evidence
ebursztein Jun 18, 2026
280f565
fix: make CI install-test assets valid
ebursztein Jun 18, 2026
6ff381b
fix: remove cpio dependency from CI asset prep
ebursztein Jun 19, 2026
9dda415
fix: bound Linux CI coverage hangs
ebursztein Jun 19, 2026
8d0f951
fix: stabilize Linux CI release tests
ebursztein Jun 19, 2026
63483d2
fix: stabilize terminal CI gates
ebursztein Jun 19, 2026
0de32a6
fix: tolerate Linux coverage bridge timing
ebursztein Jun 19, 2026
d9afabc
fix: stabilize Linux coverage terminal tests
ebursztein Jun 19, 2026
c6e86fc
fix: bound bridge coverage stress
ebursztein Jun 19, 2026
bcfea5b
fix: stabilize ipc handshake mismatch test
ebursztein Jun 19, 2026
5ab862e
fix: make bridge coverage proof deterministic
ebursztein Jun 19, 2026
412beb5
test: guard retired frontend vocabulary
ebursztein Jun 19, 2026
1ca0c9a
test: flush dns ledger writer before assertions
ebursztein Jun 19, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
3 changes: 3 additions & 0 deletions .config/nextest.toml
Original file line number Diff line number Diff line change
@@ -1,3 +1,6 @@
[profile.ci]
slow-timeout = { period = "120s", terminate-after = 3, grace-period = "10s", on-timeout = "fail" }

[profile.ci.junit]
path = "junit.xml"
report-name = "capsem-tests"
Expand Down
209 changes: 101 additions & 108 deletions .github/workflows/ci.yaml

Large diffs are not rendered by default.

1 change: 0 additions & 1 deletion .github/workflows/docs.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,6 @@ jobs:
deployments: write

env:
FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
steps:
Expand Down
Loading
Loading