 Kronecker
|
72828c06e6
|
fix: budget health checks for bounded interpreter startup
|
2026-10-15 06:33:13 +08:00 |
|
|
Kronecker
|
cd9f2e17f7
|
fix: identify failed broker metadata queries
|
2026-10-15 02:05:09 +08:00 |
|
|
Kronecker
|
41d0e3d195
|
fix: close readiness before querying unavailable services
|
2026-10-14 22:02:31 +08:00 |
|
|
Kronecker
|
d3ef4f03aa
|
fix(proxy): preserve security headers across cache locations
|
2026-10-14 15:02:55 +08:00 |
|
|
Kronecker
|
f269a39bbe
|
fix(proxy): use a valid local syslog tag
|
2026-10-14 13:04:13 +08:00 |
|
|
Kronecker
|
c7b260adc2
|
fix(proxy): send bounded access records through namespace syslog
|
2026-10-14 10:21:39 +08:00 |
|
|
Kronecker
|
e742c3543d
|
docs(release): organize installation and operator guides by task
|
2026-10-14 10:14:35 +08:00 |
|
|
Kronecker
|
16bcce3f04
|
perf(release): bind proxy startup without loading judging policy
|
2026-10-14 09:23:15 +08:00 |
|
|
Kronecker
|
83d3bf8309
|
fix(release): confine all proxy temporary paths to bounded storage
|
2026-10-14 08:21:52 +08:00 |
|
|
Kronecker
|
ef0ea71d0a
|
perf(release): bound proxy startup to protected live configuration
|
2026-10-14 07:30:51 +08:00 |
|
|
Kronecker
|
f39a051d9f
|
fix(release): bind external postgres identity mapping file
|
2026-10-14 04:28:58 +08:00 |
|
|
Kronecker
|
5ff88047ff
|
fix(release): validate service-only systemd credential ACLs
|
2026-10-14 03:54:07 +08:00 |
|
|
Kronecker
|
be22dd9c12
|
fix(release): preserve initializer failure after verified cleanup
|
2026-10-14 02:58:22 +08:00 |
|
|
Kronecker
|
11a2b6643e
|
perf(release): verify selected service receipt once
|
2026-10-14 02:16:58 +08:00 |
|
|
Kronecker
|
d5cb46278d
|
fix(release): set new file permissions before durable sync
|
2026-10-14 01:16:19 +08:00 |
|
|
Kronecker
|
81c674a17e
|
perf(release): hash frozen bytes at complete destination readback
|
2026-10-14 00:10:41 +08:00 |
|
|
Kronecker
|
dbacbddf64
|
perf(release): reuse verified activation binding
|
2026-10-13 22:39:03 +08:00 |
|
|
Kronecker
|
11bfb3ff6f
|
perf(release): verify copied trees once per batch
|
2026-10-13 20:48:59 +08:00 |
|
|
Kronecker
|
a9b59e127f
|
fix(release): require a reachable system message bus
|
2026-10-13 20:12:07 +08:00 |
|
|
Kronecker
|
e95a25892f
|
perf(release): avoid redundant installation hashing
|
2026-10-13 19:31:43 +08:00 |
|
|
Kronecker
|
52adb7eab9
|
fix(release): honor layout modes under private umask
|
2026-10-13 16:53:05 +08:00 |
|
|
Kronecker
|
70f4c78905
|
feat(ops): add bounded owner and kernel observations
|
2026-10-13 11:32:57 +08:00 |
|
|
Kronecker
|
2e201ed7fb
|
feat(recovery): rotate database identities before reopening admission
|
2026-10-13 10:08:58 +08:00 |
|
|
Kronecker
|
13c548454b
|
feat(recovery): restore cold data with fresh runtime identities
|
2026-10-13 09:33:21 +08:00 |
|
|
Kronecker
|
b575462c95
|
fix(maintenance): continue confirmed drain before stopping dependencies
|
2026-10-13 08:49:23 +08:00 |
|
|
Kronecker
|
110a4952a8
|
feat(backup): enforce explicit expiry pruning and bounded verification
|
2026-10-13 08:45:55 +08:00 |
|
|
Kronecker
|
4f2513c93f
|
feat(backup): capture private cold snapshots with reference verification
|
2026-10-13 08:39:45 +08:00 |
|
|
Kronecker
|
9b3e49c909
|
fix(proxy): expose bounded process liveness for TLS readiness
|
2026-10-13 07:11:29 +08:00 |
|
|
Kronecker
|
8e6133a8d0
|
feat(release): install and supervise the bounded HTTPS entry
|
2026-10-13 06:36:14 +08:00 |
|
|
Kronecker
|
83e235567f
|
feat(release): bind services to isolated journal readiness
|
2026-10-13 06:09:49 +08:00 |
|
|
Kronecker
|
57f5819dfd
|
fix(release): close admission when maintenance confirmation fails
|
2026-10-13 05:56:12 +08:00 |
|
|
Kronecker
|
bb14f2616b
|
fix(logging): redact production diagnostics and disable API access logs
|
2026-10-13 05:36:59 +08:00 |
|
|
Kronecker
|
ad7eebee54
|
feat(release): add isolated journal profile installation
|
2026-10-13 05:25:10 +08:00 |
|
|
Kronecker
|
325ed08ed2
|
feat(release): add fail-closed admission and bounded service draining
|
2026-10-13 05:06:24 +08:00 |
|
|
Kronecker
|
71918399c9
|
feat(delivery): observe bounded node readiness and owner state
|
2026-10-13 04:11:58 +08:00 |
|
|
Kronecker
|
e94b6fc8ef
|
feat(delivery): initialize PostgreSQL in a bounded ordinary unit
|
2026-10-13 03:15:17 +08:00 |
|
|
Kronecker
|
fd1ad64692
|
feat(delivery): install bounded dependency configuration snapshots
|
2026-10-13 03:04:01 +08:00 |
|
|
Kronecker
|
480db0e74f
|
feat(delivery): compose bounded local database and broker services
|
2026-10-13 02:49:19 +08:00 |
|
|
Kronecker
|
40b9a69e5a
|
feat(delivery): install protected factory service snapshots
|
2026-10-13 02:33:43 +08:00 |
|
|
Kronecker
|
3a9d5e47d4
|
feat(sandbox): prepare protected single-node factory delegation
|
2026-10-13 02:10:11 +08:00 |
|
|
Kronecker
|
a55de23fd6
|
feat(delivery): install versioned ordinary service units
|
2026-10-13 00:47:22 +08:00 |
|
|
Kronecker
|
743d6ef429
|
fix(delivery): verify ordinary service launch boundaries
|
2026-10-13 00:18:47 +08:00 |
|
|
Kronecker
|
5c7146d245
|
feat: compose bounded ordinary service units with private credentials
|
2026-10-12 23:56:59 +08:00 |
|
|
Kronecker
|
09af862957
|
fix: inherit scoped function ownership for Alembic migrations
|
2026-10-12 23:06:38 +08:00 |
|
|
Kronecker
|
5061084d4c
|
feat: preserve immutable configuration batches for controlled rotation
|
2026-10-12 22:45:21 +08:00 |
|
|
Kronecker
|
fdc4446206
|
feat: add bounded HTTPS proxy composition interface
|
2026-10-12 22:30:09 +08:00 |
|
|
Kronecker
|
68b5f36c9b
|
fix(delivery): share one node budget across services and tasks
|
2026-10-12 21:50:10 +08:00 |
|
|
Kronecker
|
474406702f
|
fix(delivery): apply role membership options explicitly
|
2026-10-12 21:31:19 +08:00 |
|
|
Kronecker
|
7145fb3fa4
|
fix(delivery): derive installation reserve from verified inventory
|
2026-10-12 20:50:11 +08:00 |
|
|
Kronecker
|
3cde198358
|
feat(delivery): add guarded offline installation and node configuration
|
2026-10-12 20:44:40 +08:00 |
|