Commit Graph
198 Commits
Author SHA1 Message Date
Kronecker c820d4b637 fix(delivery): preserve bounded operator failure diagnostics 2026-10-30 02:01:16 +08:00
Kronecker cde9fab2d2 perf(delivery): release restored inventory before copying 2026-10-29 20:56:46 +08:00
Kronecker b3b0a5262a perf(delivery): overlap bounded readiness queries 2026-10-29 18:59:44 +08:00
Kronecker 4fc06ee233 perf(delivery): release copied large source pages 2026-10-29 17:13:17 +08:00
Kronecker 6e20b53013 fix(delivery): wait for HTTPS readiness during startup 2026-10-29 15:29:50 +08:00
Kronecker 4e5f491952 perf(delivery): reduce redundant restore file syscalls 2026-10-28 23:15:32 +08:00
Kronecker a436c659e9 perf(delivery): stream verified restore file pages 2026-10-28 21:35:41 +08:00
Kronecker 60a0dad94f perf(delivery): balance verified restore byte groups 2026-10-28 18:28:06 +08:00
Kronecker 70007a36b9 perf(delivery): ship verified Python bytecode caches 2026-10-28 16:40:52 +08:00
Kronecker 81b5258808 perf(delivery): reduce repeated validation scheduling 2026-10-28 14:16:25 +08:00
Kronecker 8d7f651ddc perf(delivery): use bounded native cold restore copies 2026-10-28 12:11:53 +08:00
Kronecker 9f4a8c9a68 perf(delivery): streamline complete recovery inventories 2026-10-28 09:51:18 +08:00
Kronecker db834dfc73 perf(delivery): reuse verified readback bytes within batches 2026-10-28 04:56:18 +08:00
Kronecker 39a7b2902a perf(delivery): batch installs and parallelize cold recovery 2026-10-28 02:00:58 +08:00
Kronecker 08bac1ad84 perf(delivery): batch durable cold recovery copies 2026-10-27 23:12:07 +08:00
Kronecker 1b712aae2c docs: require cleanup of disposable test artifacts 2026-10-27 22:25:32 +08:00
Kronecker 45360f72dd test(ci): include private backup format fixtures 2026-10-27 13:27:36 +08:00
Kronecker dbbb495b42 feat(delivery): deduplicate bounded cold backups 2026-10-27 13:11:39 +08:00
Kronecker 0575bb4286 fix(delivery): add bounded explicit TLS rotation
Keep immutable overwrite refusal as the default. Explicit previous fingerprints authorize a stopped-node directory switch with retained private history and resumable publication. Preserve all installed versions with a 65536-entry backup inventory under the existing byte and resource limits.
2026-10-27 04:28:49 +08:00
Kronecker 944ac0a03b perf(delivery): reduce manifest ancestor validation overhead 2026-10-25 06:41:47 +08:00
Kronecker c54d989fc7 fix(delivery): initialize broker client before probe deadline 2026-10-24 03:22:54 +08:00
Kronecker 278337dd46 fix(delivery): recognize privileged service groups in byte proofs 2026-10-22 05:54:34 +08:00
Kronecker 0cd94a20ec perf(delivery): reuse verified bundle reads during node startup 2026-10-22 02:01:57 +08:00
Kronecker cc8f4217db perf(delivery): allocate node CPU by maintenance phase 2026-10-21 16:59:44 +08:00
Kronecker 7650a7e7b6 perf(delivery): avoid duplicate installed byte reads 2026-10-21 14:41:56 +08:00
Kronecker d66d42d021 fix(delivery): reject incompatible release selection 2026-10-21 11:50:40 +08:00
Kronecker cf43ae6c75 perf(delivery): bound concurrent bundle byte reads 2026-10-21 11:23:24 +08:00
Kronecker b7c586cebb fix(delivery): bound parallel startup checks 2026-10-21 10:00:59 +08:00
Kronecker 8e8015d3f8 perf(delivery): start independent services in bounded groups 2026-10-21 08:03:53 +08:00
Kronecker 14d931a8d7 perf(delivery): share byte proofs across bounded setup 2026-10-21 06:40:00 +08:00
Kronecker 9ea709af92 perf(delivery): reuse proofs within installer operations 2026-10-20 17:55:12 +08:00
Kronecker ebe71db564 fix(delivery): align postgres recovery runtime checks 2026-10-20 06:42:10 +08:00
Kronecker 0a27704fd4 fix(delivery): use installed postgres identity for recovery 2026-10-20 05:31:34 +08:00
Kronecker ee9ebd6d24 perf(delivery): bound copy I/O and streamline metadata scans 2026-10-20 03:51:01 +08:00
Kronecker 02c1dadf67 perf(delivery): reduce verified installation and recovery I/O 2026-10-20 01:46:18 +08:00
Kronecker 95a6b0dc1e perf(delivery): verify restored files before cache eviction 2026-10-19 23:28:25 +08:00
Kronecker ecce953fbb fix(delivery): validate the recovery broker as read-only 2026-10-19 22:19:15 +08:00
Kronecker 6071994695 fix(frontend): handle session 401 before reading error bodies 2026-10-19 04:51:56 +08:00
Kronecker 3b8d9a2e71 fix(release): close admission after maintenance helper failure 2026-10-18 23:03:10 +08:00
Kronecker c60ccf6858 perf(sandbox): limit javac to the first JIT tier
Keep the short-lived compiler VM on the first JIT tier while preserving student runtime options and every resource budget. The closed profile validator rejects removed or overridden compiler tier options.

Validation: make contracts; make check. Actual isolated VM reacceptance remains pending.
2026-10-18 17:18:55 +08:00
Kronecker d30043b99b fix(release): keep backup and restore mounts private 2026-10-18 04:17:32 +08:00
Kronecker 75f781ee87 chore(delivery): pin Node.js 26.11.1 2026-10-17 17:35:03 +08:00
Kronecker b181ca6bd6 fix(delivery): preserve established language resource budgets 2026-10-17 17:19:33 +08:00
Kronecker 09266df638 fix(delivery): enable I/O accounting for node observation 2026-10-16 18:11:50 +08:00
Kronecker 2cae75920d fix(release): honor factory preparation startup deadline 2026-10-16 13:38:49 +08:00
Kronecker e159576340 fix(delivery): align readiness with local database authority 2026-10-16 00:35:04 +08:00
Kronecker 721c293382 fix(delivery): fit bounded health probes into startup budgets 2026-10-15 21:50:57 +08:00
Kronecker 04e5fac311 perf(release): isolate read-only helper startup dependencies 2026-10-15 18:44:47 +08:00
Kronecker 1bd1746ef2 fix: allow bounded Erlang JIT file mappings in broker checks 2026-10-15 06:54:32 +08:00
Kronecker 72828c06e6 fix: budget health checks for bounded interpreter startup 2026-10-15 06:33:13 +08:00