-
6c9f9e59a3
[grade=B urn:ump:ez33fpgyydl3nyjnwaaplisz7slunupcf5dnr42pdblwx7chfcma] feat(DC-171): phase 2 — PowerDNS adapter (full plug-in parity) + shared wizard DNS serialisation
dc/DC-168-calendar-widget
Hermes
2026-10-29 23:46:03 -07:00
-
d8c9d79855
[grade=C urn:ump:iysmn53oxuhn57y5v6emmztvbissz275wl3wbp2pa2w5ou77mvua] docs(DC-171): evidence-file consistency per deploy judge r4 blockers
Hermes
2026-10-29 22:18:44 -07:00
-
9d5d640089
[grade=C urn:ump:bayk3f2ibc3nffwv7wiprdts2xegcp2pac525zwabp7dst37ecbq] docs(DC-171): qualify dig version claim per deploy judge r3 blocker
Hermes
2026-10-29 22:16:51 -07:00
-
bdc50f3f86
docs(DC-171): record BIND 9.18.50 live AXFR verification evidence (deploy judge r2 demand)
Hermes
2026-10-29 22:14:56 -07:00
-
acd03524ec
[grade=B urn:ump:wokpmecjfauc7jvnxyyyu4fq3zkkvwge455a5mxlmi3pdzkfdw3a] fix(DC-171): AXFR dig args to documented order (zone before type) — deploy-judge blocker
Hermes
2026-10-29 22:04:47 -07:00
-
1a736c89cc
[grade=B urn:ump:wokpmecjfauc7jvnxyyyu4fq3zkkvwge455a5mxlmi3pdzkfdw3a] feat(DC-171): DNS provider plug-in parity phase 1 — BIND 9 AXFR listing + capability honesty
Hermes
2026-10-29 03:21:48 -07:00
-
f0ce96f471
[grade=C urn:ump:7q53grgnx3hsksyvpsoolko4hgi67ehzius5j6sellfnhr5lzyjq] fix(DC-170): restore VERSION build-stamp + reproducible-claims runner (batch 7 fix)
Hermes
2026-10-29 02:44:44 -07:00
-
ecbb34ee39
[grade=pending-urn] fix(DC-170): restore VERSION build-stamp semantics (batch 7 regression)
Hermes
2026-10-29 02:34:37 -07:00
-
b4e09af712
[grade=A urn:ump:swcz3quualvlmdanpqm5v46cr6zkazes7erbftk6rj3jxv6ip4fa] docs(DC-170): changelog rebuild, version sync, API-SURFACE regen (audit batch 7)
Hermes
2026-10-29 02:29:07 -07:00
-
6b7ca4b3e9
[grade=A urn:ump:qszwspay7vhx7wcpqekkkidni3ehhgidvze5qk2y22fvg2wqz3ja] fix(DC-170): reliability batch — hangs, atomicity, fail-closed, SW (audit batch 6)
Hermes
2026-10-29 01:46:13 -07:00
-
f4f2c26de3
[grade=B urn:ump:35dpnggtxsqrxvlqm2d2buqkbnggw3acflbccnkqpqyiiijcxx3q] fix(DC-170): MCP truth batch — 6 dead tools fixed, full-catalog drift gate
Hermes
2026-10-29 01:30:42 -07:00
-
94ee76e9de
[grade=A urn:ump:josd2g7kqv476vux6euigmygdkijya2s4tsbyivtobw5ftzuf6ba] fix(DC-170): revive 19 CSP-blocked inline handlers across the dashboard — audit P0-3
Hermes
2026-10-28 00:48:32 -07:00
-
8a6aed546d
[grade=A urn:ump:5bm325dgncwgwsl2joztkf4br3wh5lh6jam3rn32fvyr62zyoysa] fix(auth): machine credentials (dk_ keys, JWTs) dead under TOTP — audit P0-1
Hermes
2026-10-28 00:35:20 -07:00
-
db99f2b54d
[grade=A urn:ump:zmnws7b7c63n4sr4qr6collvmttg4ksuaju4z2ndhxo5lntczfbq] test(DC-168): update widget-contract sandbox for batch-2 widget contract
Hermes
2026-10-28 00:34:14 -07:00
-
4339d430f6
[grade=A urn:ump:5clu4udrbwuwxn74tqwxtukfjnrwkrbiykp6uh66ipipzxr32xsq] Merge dc/DC-166-mcp-completion (
e524d16): MCP 17->28 tools + workflows double-prefix fix
Hermes
2026-10-28 00:03:42 -07:00
-
-
3a0f595a17
[grade=B urn:ump:dbxmyhvr7cpkeu3mbfdevrco7utsok743udjsj7atih6qk4frdiq] fix(DC-168): calendar widget CSRF writes, error path, modal UX (audit batch 2)
Hermes
2026-10-27 23:58:55 -07:00
-
253a5fbf75
[grade=A urn:ump:3n5xljspojvc57x7isxi4busps2dxlpwuzivhntg44i3jkpiqfaa] test(DC-168): make calendar events fixture date-relative (was a time bomb)
Hermes
2026-10-27 23:49:40 -07:00
-
6eaee811b6
[grade=A urn:ump:2zv7d7z2xll4sep4nfljfgkox76klsgptujxnv7tdn3jnxyfosmq] fix(DC-169): add missing service logos (samimail, samipanel, gitea, dashcaddy-logo)
Hermes
2026-10-14 03:58:06 -07:00
-
f44b7c2b1b
chore(DC-168): record grade B (round 16) in changelog
Hermes
2026-10-12 01:11:23 -07:00
-
dbede032eb
[pending-judge] feat(DC-168): calendar widget UX + theming — "No upcoming appointments" state, month grid with highlighted appointment days, theme-correct styling
Hermes
2026-10-11 23:40:46 -07:00
-
2adbbd9384
chore(DC-167): record grade B (round 11) in changelog
dc/DC-167-calendar-dns3
Hermes
2026-10-11 23:20:31 -07:00
-
613bfeda71
[pending-judge] fix(DC-167): CalDAV multistatus default-ns parsing (Radicale silent zero-events) + scope-aware fixture ns validation
Hermes
2026-10-11 21:45:13 -07:00
-
e524d1663d
[pending-judge] feat(DC-166 r2): MCP tool-set expansion + workflows double-prefix route fix (17 -> 28 tools)
dc/DC-166-mcp-completion
Hermes
2026-10-09 03:44:42 -07:00
-
-
a1b8fa36d9
chore(DC-165): record grade B (round 5) in changelog
integration-v1.17
dc/DC-165-uniformity
Hermes
2026-10-09 03:20:31 -07:00
-
30e8055536
[pending-judge] feat(DC-165 rev5): product/site uniformity — fleet gate proven at composition root, single-source capabilities manifest
Hermes
2026-10-09 02:24:55 -07:00
-
4143bff8aa
chore(DC-164): record grade B (round 6) in changelog
Hermes
2026-10-08 23:41:47 -07:00
-
ec038df111
[pending-judge] feat(DC-164 rev5): operator env overrides — fd-pinned contract, no-blocking opens, fail-loud wiring, untracked license material
dc/DC-164-license-hardening-r6
dc/DC-164-license-hardening-r5
Hermes
2026-10-08 23:04:26 -07:00
-
d362e79b1b
[pending-judge] feat(DC-164 rev4): operator env overrides — fd-pinned contract, fail-loud wiring, untracked license material
dc/DC-164-license-hardening-r4
Hermes
2026-10-08 23:04:26 -07:00
-
-
c721956a32
[pending-judge] feat(DC-164): operator env overrides in start.sh + lifetime-license wiring (rev2)
dc/DC-164-license-hardening
Hermes
2026-10-08 22:29:49 -07:00
-
-
b0fcfddc2c
chore(DC-163): record grade B (round 2) in changelog
dc/DC-163-ai-assistant
Hermes
2026-10-08 15:05:15 -07:00
-
14160f9317
[grade=B] fix(DC-163 rev2): strict merge semantics, contract-proving settings/test, valid enginecheck fixture
Hermes
2026-10-08 14:55:54 -07:00
-
e80e3273b7
[pending-judge] feat(DC-163): AI assistant that works — LLM intent engine + fixed chat panel
Hermes
2026-10-08 14:32:54 -07:00
-
2aa1247a94
chore(DC-162): record grade B (round 3) + sync changelog test count
dc/DC-162-ai-connect
Hermes
2026-10-08 04:03:21 -07:00
-
73fde1e2a8
[grade=B] fix(DC-162 rev3): presence-based id detection, null-params rejection, boundary matrix
Hermes
2026-10-08 03:56:22 -07:00
-
c9015b59ad
[pending-judge] feat(DC-162 rev2): "Connect your AI" — spec Streamable HTTP MCP + one-click keys
Hermes
2026-10-08 03:46:56 -07:00
-
470dfaac2a
chore(DC-161): record grade B (round 5) in changelog
dc/DC-161-calendar
Hermes
2026-10-07 21:20:04 -07:00
-
f64a3cda7d
[pending-judge] fix(DC-161 r4): address judge r3 blockers
Hermes
2026-10-07 20:59:17 -07:00
-
eb8de990df
[pending-judge] fix(DC-161 r3): address judge r2 blockers
Hermes
2026-10-07 20:44:07 -07:00
-
0b3a03a4c2
[pending-judge] fix(DC-161 r2): address judge r1 blockers
Hermes
2026-10-07 20:14:17 -07:00
-
74e21c1edc
[pending-judge] feat(DC-161): calendar widget + Radicale auto-wiring
Hermes
2026-10-07 19:57:22 -07:00
-
448f5358bf
[pending-judge] release: v1.17.0 - version bump 1.16.0 -> 1.17.0 + changelog for the integrated catalog pipeline (DC-160, DC-CATALOG-3)
v1.17.0
Hermes
2026-10-07 08:48:45 -07:00
-
026437035d
[pending-judge] fix(r5): exercise the boot-timeout kill, total bridge-body handling, strict subdomain labels (judge r4 blockers)
Hermes
2026-10-07 08:31:14 -07:00
-
88c9a3e4b6
[pending-judge] fix(r4/polish1): server-assigned port — no freePort release-rebind race
Hermes Agent
2026-10-07 04:23:00 -07:00
-
5cf5dac281
[pending-judge] fix(r4): audit contract, subdomain forwarding, timeout kill (judge r3 blockers)
Hermes Agent
2026-10-07 03:59:30 -07:00
-
2549101af1
[pending-judge] feat(selector): App Selector deploys via shipdeck catalog (DC-CATALOG-3)
Hermes Agent
2026-10-07 03:09:53 -07:00
-
5bd5345469
[pending-judge] test(e2e): authenticated composition-root probes (r2 C blockers)
Hermes Agent
2026-10-07 03:09:14 -07:00
-
0704676741
[pending-judge] feat(deploys): catalog deploy via shipdeck bridge (DC-CATALOG-3)
Hermes Agent
2026-10-07 02:08:32 -07:00
-
8744609887
[pending-judge] fix(integration): catalog detail reads app.docker.* (DC-160); Shield committed; composition-root e2e
Hermes Agent
2026-10-07 00:58:03 -07:00
-
1fa5ba8baa
[grade=B urn:ump:x37xj4seku3isvffxkwmahymvjijrwinndnfpubv664spur7kogq] fix(installer): remove BACKUP_DIR readonly collision that aborted every install
main
Hermes
2026-10-05 18:18:22 -07:00
-
0fd1bbd80b
P7 people-store providerUserId dedupe [grade=B] (PR #4)
sami7777
2026-10-04 12:14:44 +02:00
-
-
c430e02117
[grade=B urn:ump:bbfbsfru4nizg75wcxum7mwzhie6txhr22hw6jvz36wiihmgzmlq] P7 people store: dedupe upsert by providerUserId
p7-people-dedupe
Hermes Agent
2026-10-04 03:09:32 -07:00
-
-
776cf3c4ca
P7 tailscale coord-client wiring [grade=B] (PR #3)
sami7777
2026-10-04 11:51:34 +02:00
-
-
5b3e637423
[grade=B urn:ump:mao7vadnesmquhmgr4oeg554edt6fn3ykxyiydtfs2psoekd4s7q] P7 tailscale provider: wire coord client via ctx delegation
p7-coord-wiring
Hermes Agent
2026-10-04 02:48:48 -07:00
-
-
ecdb2fd8ee
P7 wizard prod wiring fix [grade=B] (PR #2)
sami7777
2026-10-04 11:41:45 +02:00
-
-
f7d6fe4a8a
[grade=B urn:ump:2swys44kxvulm5flu4skibjq3yfvtnzrsbgkvm2g65ht55i4jtoa] P7 wizard prod wiring: pass provider instances (dogfood finding)
p7-wizard-wiring
Hermes Agent
2026-10-04 02:37:11 -07:00
-
-
e04787477a
P7 Private Network [grade=A] (PR #1)
sami7777
2026-10-04 11:04:23 +02:00
-
-
75a0385c38
P7 r10: probes assert expected head + every outcome (nonzero exit on mismatch); phase-2 rejection-path cleanup guaranteed
p7-wave1
Hermes
2026-10-04 00:06:24 -07:00
-
51ba85fc69
P7 r9: probes isolated (DATA_DIR tmp), self-authenticating (git stamp + asserts), try/finally cleanup, explicit exit
Hermes
2026-10-03 23:47:43 -07:00
-
af0d6b2fe5
P7 live probes: real-HTTP transcripts for forward_auth (inactive 503; active: allow/deny/unknown-device/step-up) via seeded real stores + registry stub provider
Hermes
2026-10-03 23:39:01 -07:00
-
2e651bd84e
P7 r8 fixes: lazy mounts catch ProviderNotActiveError (503 not 500), wg redeem added to PUBLIC_ROUTES (redemption is sessionless), live-curl probe script
Hermes
2026-10-03 23:34:00 -07:00
-
d4973f3af3
P7 r8 fix: forward_auth trust boundary (XFF/XFH honored only from trusted proxy; direct/spoofed requests use socket identity) + adversarial tests
Hermes
2026-10-03 23:25:23 -07:00
-
1e606bf0f3
P7 r3 fix: single-preview contract (syncAccess delegates drift-check+preview+push to pushIfNoDrift; acl_preview_failed mapped non-retryable) + test updates
Hermes
2026-10-03 22:55:22 -07:00
-
d2d0d73477
P7 r2 fixes: drift guard wired through pushIfNoDrift (acl_drift_detected ProviderError, never overwrites drifted remote) + unknown-device forward_auth audit + drift regression tests
Hermes
2026-10-03 22:47:27 -07:00
-
a5ef5b345e
merge dc/DC-153 into p7-wave1
Hermes
2026-10-03 22:34:32 -07:00
-
-
44567031eb
DC-153: provider.syncAccess enforcement wiring (tailscale ACL push + wireguard nftables apply) + contract tests
Hermes
2026-10-03 22:34:02 -07:00
-
32998fe4b8
merge dc/DC-154 into p7-wave1
Hermes
2026-10-03 22:31:14 -07:00
-
-
-
-
aac2343df3
DC-154: forward_auth enforcement endpoint (whois + access map + sensitive step-up) + tests
Hermes
2026-10-03 22:30:23 -07:00
-
-
88f7600693
P7: mount public WG invite redemption route (lazy provider, 503 when not wireguard)
Hermes
2026-10-03 22:08:52 -07:00
-
2f14936970
merge dc/mount (network router mounts) into p7-wave1
Hermes
2026-10-03 22:08:44 -07:00
-
-
5bcf4e99ee
merge dc/DC-150 into p7-wave1
Hermes
2026-10-03 22:05:39 -07:00
-
-
e8ef2a089b
merge spec rev5 into p7-wave1
Hermes
2026-10-03 21:54:40 -07:00
-
-
a39602afe5
P7 spec rev5: DC-150 ticket X25519-only (remove ECDSA fallback contradiction)
feature/private-network-spec
Hermes
2026-10-03 21:54:40 -07:00
-
a443f030c0
P7 integration: mount network routers (people/access/invites/lifecycle/groups/resources/wizard) with shared stores + lazy lifecycle proxy
Hermes
2026-10-03 21:52:14 -07:00
-
-
-
ae78e2e318
merge dc/DC-152 into p7-wave1
Hermes
2026-10-03 21:49:08 -07:00
-
-
178a2fbb9f
merge dc/DC-147 into p7-wave1
Hermes
2026-10-03 21:48:27 -07:00
-
-
38af7ba224
DC-152: Private Network setup wizard (mode/domain/connect/dns/ca/admin steps) + status API + tests
Hermes
2026-10-03 21:47:34 -07:00
-
c12bff597b
merge dc/DC-146 into p7-wave1
Hermes
2026-10-03 21:47:32 -07:00
-
-
d224a24566
DC-147: named root CA with critical name constraints, leaf compliance assertions, install-page hardening, encrypted backup + tests
Hermes
2026-10-03 21:43:11 -07:00
-
b4e683a7fc
DC-150: WG invite redemption page (browser X25519 keygen, client-side config+QR) + public redeem API + tests
Hermes
2026-10-03 21:40:09 -07:00
-
9215037553
DC-146: Technitium zone/record sync (idempotent upserts) + split-DNS gate + setup check + tests
Hermes
2026-10-03 21:39:33 -07:00
-
de6a2fa4ae
merge dc/DC-144 into p7-wave1
Hermes
2026-10-03 21:38:34 -07:00
-
-
-
-
3291f80d0c
merge dc/DC-151 into p7-wave1
Hermes
2026-10-03 21:37:39 -07:00
-
-
-
-
695794987b
DC-144: DashCaddy-side groups + resources model/routes with cascade delete + tests
Hermes
2026-10-03 21:37:13 -07:00
-
24ec88a30d
DC-151: WG nftables matrix compiler + transactional apply/rollback + tests
Hermes
2026-10-03 21:35:15 -07:00
-
f7c5ff1d0b
merge dc/DC-142 into p7-wave1
Hermes
2026-10-03 21:34:22 -07:00
-
-
-
-
151b42e0ea
merge dc/DC-149 into p7-wave1
Hermes
2026-10-03 21:33:37 -07:00
-
-
-
-
b7d9e2b983
merge dc/DC-143 into p7-wave1
Hermes
2026-10-03 21:32:45 -07:00
-
-
-
-
88d34c6d7e
DC-142: link-first invites routes via network provider + tests
Hermes
2026-10-03 21:31:57 -07:00
-
fcfe5dff1b
DC-149: WireGuard hub provider (peer store, pool allocator, hub lifecycle) + tests
Hermes
2026-10-03 21:31:09 -07:00
-
-
-
a4f961d609
P7 spec rev4: pin provider-contract unblock wording, PKCS8-prefix X25519 private-key extraction, DC-143 authorization-vs-key-expiry distinction
Hermes
2026-10-03 21:31:08 -07:00
-
4e4306b00f
DC-143: block/unblock/remove person + revoke device orchestration + tests
Hermes
2026-10-03 21:29:41 -07:00
-
97de94d496
merge dc/DC-148 into p7-wave1
Hermes
2026-10-03 21:28:29 -07:00
-
-
486d0e8d11
DC-148: Tailscale ACL compiler + lockout guard + preview/push/rollback + drift detection + tests
Hermes
2026-10-03 21:26:29 -07:00
-
a8183459e7
merge spec rev3 into p7-wave1
Hermes
2026-10-03 21:25:35 -07:00
-
-
-
-
5f47e12f18
P7 spec rev3: X25519-only browser keygen (no ECDSA fallback), unblock row + honest semantics everywhere, three-zone WG firewall model
Hermes
2026-10-03 21:25:17 -07:00
-
6e25001738
P7 spec rev3: X25519-only browser keygen (no ECDSA fallback), unblock row + honest semantics everywhere, three-zone WG firewall model
Hermes
2026-10-03 21:25:17 -07:00
-
-
-
a78d0ef857
Merge branch 'dc/DC-145' into dc/DC-142
Hermes
2026-10-03 21:23:43 -07:00
-
-
b2c70a0323
Merge branch 'dc/DC-141' into dc/DC-142
Hermes
2026-10-03 21:23:42 -07:00
-
-
806d720af6
Merge branch 'dc/DC-140' into dc/DC-142
Hermes
2026-10-03 21:23:41 -07:00
-
-
-
c09fc7b1ef
Merge branch 'dc/DC-145' into dc/DC-143
Hermes
2026-10-03 21:23:14 -07:00
-
-
-