Kronecker
f5f99c9cae
fix(api): bound transient dependency failure responses
2026-10-13 12:01:30 +08:00
Kronecker
70f4c78905
feat(ops): add bounded owner and kernel observations
2026-10-13 11:32:57 +08:00
Kronecker
2e201ed7fb
feat(recovery): rotate database identities before reopening admission
2026-10-13 10:08:58 +08:00
Kronecker
13c548454b
feat(recovery): restore cold data with fresh runtime identities
2026-10-13 09:33:21 +08:00
Kronecker
b575462c95
fix(maintenance): continue confirmed drain before stopping dependencies
2026-10-13 08:49:23 +08:00
Kronecker
110a4952a8
feat(backup): enforce explicit expiry pruning and bounded verification
2026-10-13 08:45:55 +08:00
Kronecker
4f2513c93f
feat(backup): capture private cold snapshots with reference verification
2026-10-13 08:39:45 +08:00
Kronecker
9b3e49c909
fix(proxy): expose bounded process liveness for TLS readiness
2026-10-13 07:11:29 +08:00
Kronecker
8e6133a8d0
feat(release): install and supervise the bounded HTTPS entry
2026-10-13 06:36:14 +08:00
Kronecker
83e235567f
feat(release): bind services to isolated journal readiness
2026-10-13 06:09:49 +08:00
Kronecker
57f5819dfd
fix(release): close admission when maintenance confirmation fails
2026-10-13 05:56:12 +08:00
Kronecker
bb14f2616b
fix(logging): redact production diagnostics and disable API access logs
2026-10-13 05:36:59 +08:00
Kronecker
ad7eebee54
feat(release): add isolated journal profile installation
2026-10-13 05:25:10 +08:00
Kronecker
325ed08ed2
feat(release): add fail-closed admission and bounded service draining
2026-10-13 05:06:24 +08:00
Kronecker
71918399c9
feat(delivery): observe bounded node readiness and owner state
2026-10-13 04:11:58 +08:00
Kronecker
e94b6fc8ef
feat(delivery): initialize PostgreSQL in a bounded ordinary unit
2026-10-13 03:15:17 +08:00
Kronecker
fd1ad64692
feat(delivery): install bounded dependency configuration snapshots
2026-10-13 03:04:01 +08:00
Kronecker
480db0e74f
feat(delivery): compose bounded local database and broker services
2026-10-13 02:49:19 +08:00
Kronecker
40b9a69e5a
feat(delivery): install protected factory service snapshots
2026-10-13 02:33:43 +08:00
Kronecker
3a9d5e47d4
feat(sandbox): prepare protected single-node factory delegation
2026-10-13 02:10:11 +08:00
Kronecker
033d31d420
feat(sandbox): retain replay records across explicit factory cycles
2026-10-13 01:36:36 +08:00
Kronecker
a55de23fd6
feat(delivery): install versioned ordinary service units
2026-10-13 00:47:22 +08:00
Kronecker
743d6ef429
fix(delivery): verify ordinary service launch boundaries
2026-10-13 00:18:47 +08:00
Kronecker
5c7146d245
feat: compose bounded ordinary service units with private credentials
2026-10-12 23:56:59 +08:00
Kronecker
09af862957
fix: inherit scoped function ownership for Alembic migrations
2026-10-12 23:06:38 +08:00
Kronecker
5061084d4c
feat: preserve immutable configuration batches for controlled rotation
2026-10-12 22:45:21 +08:00
Kronecker
fdc4446206
feat: add bounded HTTPS proxy composition interface
2026-10-12 22:30:09 +08:00
Kronecker
68b5f36c9b
fix(delivery): share one node budget across services and tasks
2026-10-12 21:50:10 +08:00
Kronecker
474406702f
fix(delivery): apply role membership options explicitly
2026-10-12 21:31:19 +08:00
Kronecker
7145fb3fa4
fix(delivery): derive installation reserve from verified inventory
2026-10-12 20:50:11 +08:00
Kronecker
3cde198358
feat(delivery): add guarded offline installation and node configuration
2026-10-12 20:44:40 +08:00
Kronecker
5d127ad4db
fix(delivery): exclude wheel development header records
2026-10-12 16:05:15 +08:00
Kronecker
53f9e55fd8
fix(delivery): bind dependency records to shipped files
2026-10-12 16:01:41 +08:00
Kronecker
eef732e2ad
fix(delivery): keep server-only plugins outside application runtime
2026-10-12 15:47:03 +08:00
Kronecker
e34ad78329
fix(delivery): include verified base runtime library closure
2026-10-12 15:39:36 +08:00
Kronecker
4b02cb2c84
fix(delivery): resolve verified library aliases inside guest inputs
2026-10-12 15:31:35 +08:00
Kronecker
41c3334568
fix(delivery): resolve build workspace paths before invoking tools
2026-10-12 15:19:09 +08:00
Kronecker
6733d4e435
feat(delivery): add bounded offline release tooling
2026-10-12 15:15:00 +08:00
Kronecker
f576756359
test(admin): isolate import recovery acceptance from candidate checks
2026-10-12 05:05:00 +08:00
Kronecker
445affb63d
test(admin): verify cross-process import admission and recovery
2026-10-12 04:01:51 +08:00
Kronecker
3536ef1fbb
test(admin): preserve baseline data through maintenance migrations
2026-10-12 03:48:26 +08:00
Kronecker
676781223d
test(admin): verify bounded archive and private storage refusals
2026-10-12 03:28:41 +08:00
Kronecker
2f860a17c9
docs(admin): document bounded problem maintenance operations
2026-10-12 03:15:51 +08:00
Kronecker
835df6b7e7
feat(admin): connect authenticated problem maintenance console
2026-10-12 02:33:15 +08:00
Kronecker
5366418881
feat(problems): publish immutable candidates with audited maintenance
2026-10-11 23:29:21 +08:00
Kronecker
3152d59056
feat(problems): add bounded administrator package imports
...
Use live maintenance sessions, durable capacity reservations and streamed SHA-bound ZIP uploads. An ordinary capped import worker validates stored/deflated v1/v2 packages, persists immutable unpublished candidates and finite audit events, and recovers or releases capacity after interruption and expiry.
Validate actual PG/HTTP/worker/storage fault paths in an isolated capped VM (2 passed, 0 skipped), reuse unchanged actual migration roundtrip evidence, and pass affected backend/architecture checks plus the prior full engineering checks.
2026-10-11 22:19:38 +08:00
Kronecker
234ab23155
feat(identity): protect administrator bootstrap and recovery
2026-10-11 19:22:55 +08:00
Kronecker
a7b2324a3e
feat(identity): expose live maintenance capabilities and transaction authorization
2026-10-11 12:31:08 +08:00
Kronecker
3ed5b72459
feat(identity): persist administrator authority with scoped database roles
2026-10-11 12:20:10 +08:00
Kronecker
8143a7f665
fix(frontend): adapt submission summaries to workbench width
2026-10-11 11:17:06 +08:00
Kronecker
08f2db616f
fix(frontend): separate submission time and version link
2026-10-11 11:10:46 +08:00
Kronecker
c8cac766c7
test(submissions): verify exact performance cohort boundaries
2026-10-11 07:45:56 +08:00
Kronecker
bc5cd12056
feat(frontend): share real submission details and performance in workbench
2026-10-11 03:55:23 +08:00
Kronecker
218fa38f8e
feat(submissions): query bounded anonymous performance snapshots
2026-10-11 03:51:33 +08:00
Kronecker
fce7522267
feat(submissions): bind final performance to trusted measurement epochs
2026-10-11 03:46:16 +08:00
Kronecker
3cc90e4573
feat(submissions): define bounded performance and scoped history contracts
2026-10-11 03:35:12 +08:00
Kronecker
5df3c370aa
docs(frontend): document managed language submission
2026-10-10 04:09:41 +08:00
Kronecker
029585739c
fix(worker): bound configurable control request deadlines
2026-10-10 02:15:52 +08:00
Kronecker
47f535ea79
docs(frontend): clarify connected judging services
2026-10-10 00:24:08 +08:00
Kronecker
67c3bc55ba
chore(judge): document explicit managed runtime rollout
2026-10-09 23:29:23 +08:00
Kronecker
d20721313e
test(judge): verify managed worker faults and sealed programs
2026-10-09 22:49:57 +08:00
Kronecker
9d960c2a9b
feat(frontend): enable problem-scoped Python and Java submissions
2026-10-09 22:32:38 +08:00
Kronecker
507b15b64a
test(coordinator): fence stale managed reports and bound retries
2026-10-09 21:57:40 +08:00
Kronecker
643a8d342e
fix(judge): bind managed inputs and confirm artifact cleanup
2026-10-09 21:45:21 +08:00
Kronecker
802e019699
feat(worker): judge versioned sealed runtime programs
2026-10-09 20:15:17 +08:00
Kronecker
2f1166954a
feat(sandbox): route pinned runtimes through one bounded factory
2026-10-09 18:50:10 +08:00
Kronecker
38ee332a3e
test(sandbox): verify managed file quotas and live wall deadlines
2026-10-09 18:12:37 +08:00
Kronecker
9394a914f8
feat(sandbox): bind managed requests to pinned runtime identities
2026-10-09 17:49:30 +08:00
Kronecker
1dd6d1f971
feat(sandbox): add immutable Python and Java execution profiles
2026-10-09 17:02:27 +08:00
Kronecker
53caafc157
feat(coordinator): dispatch versioned runtime leases and reports
2026-10-09 15:18:08 +08:00
Kronecker
4b8f255180
feat(judging): persist immutable per-language problem configurations
2026-10-09 14:53:09 +08:00
Kronecker
a5a7e40308
feat(contracts): add versioned multi-runtime judging contracts
2026-10-09 14:15:24 +08:00
Kronecker
81f8dc3204
docs(platform): describe controlled judging startup and recovery
2026-10-09 10:06:17 +08:00
Kronecker
3e44779578
fix(frontend): ignore expired responses from prior sessions
2026-10-09 09:55:11 +08:00
Kronecker
fb1b161c0d
feat(platform): connect owned submissions and real browser flows
2026-10-09 09:30:12 +08:00
Kronecker
19a071573b
feat(worker): consume durable jobs with fenced execution and recovery
2026-10-09 08:38:20 +08:00
Kronecker
76b565cce8
fix(contracts): reject unfulfillable output capture budgets
2026-10-09 08:25:39 +08:00
Kronecker
b7e9111254
fix(messaging): suppress credential-bearing transport logs
2026-10-09 07:55:15 +08:00
Kronecker
f838008c71
feat(coordinator): persist fenced execution authority and atomic results
2026-10-09 07:15:24 +08:00
Kronecker
38738122b3
feat(messaging): deliver durable outbox events with publisher confirms
2026-10-09 06:59:13 +08:00
Kronecker
75d74908e0
feat(submissions): create durable queued evaluations idempotently
2026-10-09 06:31:15 +08:00
Kronecker
8a01081cc9
feat(judge): compile once and run isolated points through helper factory
2026-10-09 04:12:22 +08:00
Kronecker
93fb41c608
feat(engine): judge immutable submissions through bounded execution ports
2026-10-09 03:34:04 +08:00
Kronecker
996dbc5144
feat(problems): publish immutable versions and fence artifact access
2026-10-09 01:51:13 +08:00
Kronecker
ff60136f8d
feat(identity): add bounded login and revocable sessions
2026-10-09 01:20:37 +08:00
Kronecker
f4bf218081
feat(database): add judging schema and separate write roles
2026-10-09 01:09:34 +08:00
Kronecker
df52446dac
feat(contracts): validate fenced judging jobs and bounded results
2026-10-09 00:43:17 +08:00
Kronecker
ea0bc2b578
feat(worker): inject engine port for authenticated sandbox execution
2026-10-08 17:28:26 +08:00
Kronecker
ee6371f269
feat(sandbox): enable verified ordinary execution entry
2026-10-08 17:00:13 +08:00
Kronecker
fc61e9d053
test(sandbox): verify repeated restart and failed capture lifecycle
2026-10-08 13:52:01 +08:00
Kronecker
32d94f3a66
feat(sandbox): recover service-owned tasks after supervisor restart
2026-10-08 13:46:02 +08:00
Kronecker
22cc427da9
test(sandbox): validate full isolation against live peer tasks
2026-10-08 10:27:32 +08:00
Kronecker
ddf1e0ca68
test(sandbox): verify complete user filesystem and descriptor boundaries
2026-10-08 10:12:49 +08:00
Kronecker
b5db44ba16
feat(sandbox): enforce trusted process event budgets and verify resource limits
2026-10-08 07:19:01 +08:00
Kronecker
057c02f39d
test(sandbox): verify complete native and compiler task workflows
2026-10-08 07:12:11 +08:00
Kronecker
f9789ea4c4
fix(sandbox): unwind every prepared owner before releasing resources
2026-10-08 04:49:02 +08:00
Kronecker
2e4d9d4ea2
feat(sandbox): supervise bounded root execution and final teardown
2026-10-08 04:38:08 +08:00
Kronecker
62b08fea5b
feat(sandbox): apply finite inherited resource limits before identity
2026-10-08 01:37:06 +08:00
Kronecker
4c7adda719
feat(sandbox): supervise aggregate CPU and monotonic wall budgets
2026-10-08 01:24:56 +08:00
Kronecker
cc6ee1bfa7
feat(sandbox): transport bounded stdio and close inherited user descriptors
2026-10-07 22:49:25 +08:00
Kronecker