Kronecker
39a7b2902a
perf(delivery): batch installs and parallelize cold recovery
2026-10-28 02:00:58 +08:00
Kronecker
08bac1ad84
perf(delivery): batch durable cold recovery copies
2026-10-27 23:12:07 +08:00
Kronecker
1b712aae2c
docs: require cleanup of disposable test artifacts
2026-10-27 22:25:32 +08:00
Kronecker
45360f72dd
test(ci): include private backup format fixtures
2026-10-27 13:27:36 +08:00
Kronecker
dbbb495b42
feat(delivery): deduplicate bounded cold backups
2026-10-27 13:11:39 +08:00
Kronecker
0575bb4286
fix(delivery): add bounded explicit TLS rotation
...
Keep immutable overwrite refusal as the default. Explicit previous fingerprints authorize a stopped-node directory switch with retained private history and resumable publication. Preserve all installed versions with a 65536-entry backup inventory under the existing byte and resource limits.
2026-10-27 04:28:49 +08:00
Kronecker
944ac0a03b
perf(delivery): reduce manifest ancestor validation overhead
2026-10-25 06:41:47 +08:00
Kronecker
c54d989fc7
fix(delivery): initialize broker client before probe deadline
2026-10-24 03:22:54 +08:00
Kronecker
278337dd46
fix(delivery): recognize privileged service groups in byte proofs
2026-10-22 05:54:34 +08:00
Kronecker
0cd94a20ec
perf(delivery): reuse verified bundle reads during node startup
2026-10-22 02:01:57 +08:00
Kronecker
cc8f4217db
perf(delivery): allocate node CPU by maintenance phase
2026-10-21 16:59:44 +08:00
Kronecker
7650a7e7b6
perf(delivery): avoid duplicate installed byte reads
2026-10-21 14:41:56 +08:00
Kronecker
d66d42d021
fix(delivery): reject incompatible release selection
2026-10-21 11:50:40 +08:00
Kronecker
cf43ae6c75
perf(delivery): bound concurrent bundle byte reads
2026-10-21 11:23:24 +08:00
Kronecker
b7c586cebb
fix(delivery): bound parallel startup checks
2026-10-21 10:00:59 +08:00
Kronecker
8e8015d3f8
perf(delivery): start independent services in bounded groups
2026-10-21 08:03:53 +08:00
Kronecker
14d931a8d7
perf(delivery): share byte proofs across bounded setup
2026-10-21 06:40:00 +08:00
Kronecker
9ea709af92
perf(delivery): reuse proofs within installer operations
2026-10-20 17:55:12 +08:00
Kronecker
ebe71db564
fix(delivery): align postgres recovery runtime checks
2026-10-20 06:42:10 +08:00
Kronecker
0a27704fd4
fix(delivery): use installed postgres identity for recovery
2026-10-20 05:31:34 +08:00
Kronecker
ee9ebd6d24
perf(delivery): bound copy I/O and streamline metadata scans
2026-10-20 03:51:01 +08:00
Kronecker
02c1dadf67
perf(delivery): reduce verified installation and recovery I/O
2026-10-20 01:46:18 +08:00
Kronecker
95a6b0dc1e
perf(delivery): verify restored files before cache eviction
2026-10-19 23:28:25 +08:00
Kronecker
ecce953fbb
fix(delivery): validate the recovery broker as read-only
2026-10-19 22:19:15 +08:00
Kronecker
6071994695
fix(frontend): handle session 401 before reading error bodies
2026-10-19 04:51:56 +08:00
Kronecker
3b8d9a2e71
fix(release): close admission after maintenance helper failure
2026-10-18 23:03:10 +08:00
Kronecker
c60ccf6858
perf(sandbox): limit javac to the first JIT tier
...
Keep the short-lived compiler VM on the first JIT tier while preserving student runtime options and every resource budget. The closed profile validator rejects removed or overridden compiler tier options.
Validation: make contracts; make check. Actual isolated VM reacceptance remains pending.
2026-10-18 17:18:55 +08:00
Kronecker
d30043b99b
fix(release): keep backup and restore mounts private
2026-10-18 04:17:32 +08:00
Kronecker
75f781ee87
chore(delivery): pin Node.js 26.11.1
2026-10-17 17:35:03 +08:00
Kronecker
b181ca6bd6
fix(delivery): preserve established language resource budgets
2026-10-17 17:19:33 +08:00
Kronecker
09266df638
fix(delivery): enable I/O accounting for node observation
2026-10-16 18:11:50 +08:00
Kronecker
2cae75920d
fix(release): honor factory preparation startup deadline
2026-10-16 13:38:49 +08:00
Kronecker
e159576340
fix(delivery): align readiness with local database authority
2026-10-16 00:35:04 +08:00
Kronecker
721c293382
fix(delivery): fit bounded health probes into startup budgets
2026-10-15 21:50:57 +08:00
Kronecker
04e5fac311
perf(release): isolate read-only helper startup dependencies
2026-10-15 18:44:47 +08:00
Kronecker
1bd1746ef2
fix: allow bounded Erlang JIT file mappings in broker checks
2026-10-15 06:54:32 +08:00
Kronecker
72828c06e6
fix: budget health checks for bounded interpreter startup
2026-10-15 06:33:13 +08:00
Kronecker
b1e2c5a948
refactor: isolate read-only operator projections
2026-10-15 03:34:12 +08:00
Kronecker
cd9f2e17f7
fix: identify failed broker metadata queries
2026-10-15 02:05:09 +08:00
Kronecker
41d0e3d195
fix: close readiness before querying unavailable services
2026-10-14 22:02:31 +08:00
Kronecker
2023ca5de9
ci: run trusted engineering checks on GitHub
2026-10-14 21:07:13 +08:00
Kronecker
d3ef4f03aa
fix(proxy): preserve security headers across cache locations
2026-10-14 15:02:55 +08:00
Kronecker
f269a39bbe
fix(proxy): use a valid local syslog tag
2026-10-14 13:04:13 +08:00
Kronecker
c7b260adc2
fix(proxy): send bounded access records through namespace syslog
2026-10-14 10:21:39 +08:00
Kronecker
e742c3543d
docs(release): organize installation and operator guides by task
2026-10-14 10:14:35 +08:00
Kronecker
16bcce3f04
perf(release): bind proxy startup without loading judging policy
2026-10-14 09:23:15 +08:00
Kronecker
83d3bf8309
fix(release): confine all proxy temporary paths to bounded storage
2026-10-14 08:21:52 +08:00
Kronecker
ef0ea71d0a
perf(release): bound proxy startup to protected live configuration
2026-10-14 07:30:51 +08:00
Kronecker
f39a051d9f
fix(release): bind external postgres identity mapping file
2026-10-14 04:28:58 +08:00
Kronecker
5ff88047ff
fix(release): validate service-only systemd credential ACLs
2026-10-14 03:54:07 +08:00
Kronecker