Commit Graph

  • dcf9286f16 ci: make Windy Git CI permanent for the private repos Grant Whitmer 2026-09-23 02:18:04 -04:00
  • 1b09b9b0d3 ci: sync windy-chat + windy-mail, bridge PR CI verdicts back to GitHub Grant Whitmer 2026-09-23 02:13:21 -04:00
  • 390c1e7479 ops: move tunnel metrics to 2001, sync windy-git into itself Grant Whitmer 2026-09-23 01:29:57 -04:00
  • 2b30b0ac99 docs: record the runner bump, the act cache flake, and the remaining reds Grant Whitmer 2026-08-14 19:09:26 -04:00
  • cd7dd9b7ae ci: bump act_runner 0.2.11 -> 0.6.1 for node24 action support Grant Whitmer 2026-08-14 19:00:07 -04:00
  • 9fc27eabd6 docs: record the real CI root cause — setup-uv resolves uv via the forge API Grant Whitmer 2026-08-14 17:57:04 -04:00
  • db055a1922 docs: refresh the turnover prompt for the actual next task Grant Whitmer 2026-08-14 17:31:23 -04:00
  • 86326ca6a7 docs: record three-repo CI fix results — 1 of 3 verified Grant Whitmer 2026-08-14 17:30:44 -04:00
  • e0d5d118be docs: turnover for a fresh session Grant Whitmer 2026-08-14 15:00:28 -04:00
  • 01e36155a3 ci: remove the service-networking probe; scope the python-pin test Grant Whitmer 2026-08-14 14:41:14 -04:00
  • fe8f84bbdf ci: probe how service containers are addressed on this runner Grant Whitmer 2026-08-14 13:14:24 -04:00
  • eae1bff50b G2.3: Windy Git branding — and get it out of one host's disk into the repo Grant Whitmer 2026-08-14 09:08:48 -04:00
  • e7dee39151 throttle: stop claiming to limit pushes we cannot see Grant Whitmer 2026-08-13 23:33:30 -04:00
  • 25368547cb docs: runbook — never pull -q, never force-push a deployed branch Grant Whitmer 2026-08-13 23:28:57 -04:00
  • c60bfb2b89 I-12: fail the build when COMMIT_SHA is empty Grant Whitmer 2026-08-13 23:27:38 -04:00
  • a0ed4a5ec0 SECURITY: make EPT routing independent of signature well-formedness Grant Whitmer 2026-08-13 23:23:50 -04:00
  • 830ca48705 docs: mark revocation finding resolved — it was critical, not low Grant Whitmer 2026-08-13 23:20:46 -04:00
  • deb3a8fafc test: prove the revocation wiring end-to-end (resolve_passport -> decide_trust) Grant Whitmer 2026-08-13 23:20:44 -04:00
  • 587fb05265 SECURITY: enforce passport status — revocation now takes effect live Grant Whitmer 2026-08-13 23:18:16 -04:00
  • c96d1d3102 canary: guard both forgery shapes now that real verification is live Grant Whitmer 2026-08-13 23:13:44 -04:00
  • 79dcea4d3e G3.2/G3.4: real EPT verification + wire the throttle, reopening agent auth Grant Whitmer 2026-08-13 23:08:40 -04:00
  • c257cc55c6 docs: second-auditor review (Fable) — 1 critical fixed live, 4 open Grant Whitmer 2026-08-13 22:54:15 -04:00
  • 85fa65a52b canary: continuously verify the forged-token bypass stays closed Grant Whitmer 2026-08-13 22:52:56 -04:00
  • d8deffe4db SECURITY: close the agent-auth bypass — trust is not authentication Grant Whitmer 2026-08-13 22:49:45 -04:00
  • 83047def94 docs: whole account on Windy Git — 143 repos, 1.58 GB, two tiers Grant Whitmer 2026-08-12 22:49:48 -04:00
  • 711c47d8c9 fix: the --all-as-mirrors flag itself was never added Grant Whitmer 2026-08-12 22:43:22 -04:00
  • ae6ca8b9d2 G11.3: bulk DR copy — every repo as a read-only mirror Grant Whitmer 2026-08-12 22:40:52 -04:00
  • 89723c6ebd safety: disable deploy workflows on Windy Git before they can fire Grant Whitmer 2026-08-12 22:30:56 -04:00
  • b2f00821d7 docs: replace the cutover plan with the phased one that matches reality Grant Whitmer 2026-08-12 22:14:21 -04:00
  • 51acf9f86e URGENT FIX: reverse the sync — GitHub is the source of truth, not Windy Git Grant Whitmer 2026-08-12 22:11:34 -04:00
  • 7711adcb97 docs: cutover — Windy Git is the daily driver Grant Whitmer 2026-08-12 21:54:47 -04:00
  • 2c292c501c G0.9: nightly timer + the first rehearsed restore in the ecosystem Grant Whitmer 2026-08-12 21:49:11 -04:00
  • ffce529344 G0.9: nightly backup — the prerequisite for becoming the daily driver Grant Whitmer 2026-08-12 21:47:46 -04:00
  • db31e786e0 G7.4: default to writable repos — mirrors cannot run CI (measured) Grant Whitmer 2026-08-12 19:58:15 -04:00
  • 14fb43b959 G7.4: advertise the fleet's runner labels, and correct my own doctrine Grant Whitmer 2026-08-12 19:53:44 -04:00
  • e3677dddd9 docs: measure WHY login takes 18s — it is not 468 call sites Grant Whitmer 2026-08-12 19:05:25 -04:00
  • ef3450d87b G7.6: never let bookkeeping kill the monitor Grant Whitmer 2026-08-12 15:42:58 -04:00
  • a094960da3 G3.5: accept platform.test_ping unverified — unverifiable by construction Grant Whitmer 2026-08-12 15:36:03 -04:00
  • 5dd914b8a6 G3.5: answer the reachability probe honestly instead of skipping validation Grant Whitmer 2026-08-12 15:33:56 -04:00
  • 339ec70853 G3.5: Eternitas revocation receiver — fail-closed, both signature traps avoided Grant Whitmer 2026-08-12 15:32:27 -04:00
  • fc1937560c G7.6: fix the alert path — urllib UA was rejected 403 by Resend Grant Whitmer 2026-08-12 13:44:00 -04:00
  • 9a7030351b G7.6: fleet canary — probes what a user does, not what is cheap Grant Whitmer 2026-08-12 13:41:37 -04:00
  • 211a48187f docs: incident RESOLVED — roster backoff deployed, agent chat back Grant Whitmer 2026-08-12 13:19:58 -04:00
  • 3926726309 docs: incident record — account-server login outage 2026-08-12 Grant Whitmer 2026-08-12 13:00:54 -04:00
  • b6a7045907 G7.4/G11.3: import tool — GitHub upstream, Windy Git downstream, CI here Grant Whitmer 2026-08-12 12:12:02 -04:00
  • 44756091b0 G7 COMPLETE: CI is green on our own hardware Grant Whitmer 2026-08-12 11:38:31 -04:00
  • 358c9bdaa7 G7: clean CI run on a stable runner Grant Whitmer 2026-08-12 11:35:14 -04:00
  • 6b96087554 G7: per-job networks — fixes service DNS and tightens isolation Grant Whitmer 2026-08-12 11:18:51 -04:00
  • 8c4bdd2bc2 G7.3: setup-python on the act image, not a python image Grant Whitmer 2026-08-12 11:16:00 -04:00
  • 980fc2dddd G7.3: pin Python 3.12 in CI and cap job runtime Grant Whitmer 2026-08-12 11:13:39 -04:00
  • ed71102e49 G7: trigger a CI run after the routing fix Grant Whitmer 2026-08-12 10:53:57 -04:00
  • 53dea84ab1 G7: route CI jobs via the public surface, not the forge network Grant Whitmer 2026-08-12 10:51:00 -04:00
  • 5f717ef74b G7: CI runners with real isolation, and the gate as a workflow Grant Whitmer 2026-08-12 10:39:05 -04:00
  • b274392e96 G3.1: OIDC live — sign in to Windy Git with a Windy account Grant Whitmer 2026-08-12 10:27:14 -04:00
  • d684cfc2e1 G4.2: record Grant's ruling — use an existing fleet CF token Grant Whitmer 2026-08-11 16:34:10 -04:00
  • a2430de94d I-4: distinguish a mirror that never ran from one that is behind Grant Whitmer 2026-08-11 16:16:05 -04:00
  • da257652c2 G11 / I-4: continuous off-site mirror, and a namespace bug fixed Grant Whitmer 2026-08-11 16:11:45 -04:00
  • 066de34489 G5: fix version-count copy; record the u-system namespace finding Grant Whitmer 2026-08-11 15:59:41 -04:00
  • 3a9259a0da G5: generate an unusable password on Gitea user create Grant Whitmer 2026-08-11 15:55:11 -04:00
  • f621e49770 G0.4: add psycopg2-binary so migrations run inside the image Grant Whitmer 2026-08-11 15:47:14 -04:00
  • 099e4be9b1 G5: the shelter — repos, grants and version history Grant Whitmer 2026-08-11 15:45:22 -04:00
  • 82044933ed G2/G4 complete: Gitea live, LFS landing in R2, four traps pinned Grant Whitmer 2026-08-11 15:13:58 -04:00
  • 647d414ec1 G4.3: fix Gitea crash loop — [lfs] STORAGE_TYPE breaks inheritance Grant Whitmer 2026-08-11 15:00:11 -04:00
  • 301aa47b52 G4.3: enable the LFS server (storage type alone does not) Grant Whitmer 2026-08-11 14:58:05 -04:00
  • ef75ee5a9c G4: R2 buckets live, Gitea storage wired, checksum trap pinned Grant Whitmer 2026-08-11 14:49:26 -04:00
  • eec087ac50 G2: Gitea auto-install, own DB role, SSH deferred, Actions on Grant Whitmer 2026-08-11 14:44:13 -04:00
  • ce54d488f2 G1: stop probing the tunnel from inside a container Grant Whitmer 2026-08-11 14:37:53 -04:00
  • a68261a563 G1: Veron 1 host live behind Cloudflare Tunnel Grant Whitmer 2026-08-11 14:34:18 -04:00
  • 67753497f8 G1: bind services to loopback, make host ports configurable Grant Whitmer 2026-08-11 14:30:06 -04:00
  • 255b2d1a44 G1: fix Dockerfile scripts COPY clobbering workdir Grant Whitmer 2026-08-11 14:27:12 -04:00
  • 659991b2bd G0: cell substrate — invariants made executable Grant Whitmer 2026-08-11 14:19:28 -04:00
  • 24708914c9 GENESIS: windy-git DNA Strand Master Plan v0.1.0 Grant Whitmer 2026-08-11 13:45:12 -04:00