-
dcf9286f16
ci: make Windy Git CI permanent for the private repos
Grant Whitmer
2026-09-23 02:18:04 -04:00
-
1b09b9b0d3
ci: sync windy-chat + windy-mail, bridge PR CI verdicts back to GitHub
Grant Whitmer
2026-09-23 02:13:21 -04:00
-
390c1e7479
ops: move tunnel metrics to 2001, sync windy-git into itself
Grant Whitmer
2026-09-23 01:29:57 -04:00
-
2b30b0ac99
docs: record the runner bump, the act cache flake, and the remaining reds
Grant Whitmer
2026-08-14 19:09:26 -04:00
-
cd7dd9b7ae
ci: bump act_runner 0.2.11 -> 0.6.1 for node24 action support
Grant Whitmer
2026-08-14 19:00:07 -04:00
-
9fc27eabd6
docs: record the real CI root cause — setup-uv resolves uv via the forge API
Grant Whitmer
2026-08-14 17:57:04 -04:00
-
db055a1922
docs: refresh the turnover prompt for the actual next task
Grant Whitmer
2026-08-14 17:31:23 -04:00
-
86326ca6a7
docs: record three-repo CI fix results — 1 of 3 verified
Grant Whitmer
2026-08-14 17:30:44 -04:00
-
e0d5d118be
docs: turnover for a fresh session
Grant Whitmer
2026-08-14 15:00:28 -04:00
-
01e36155a3
ci: remove the service-networking probe; scope the python-pin test
Grant Whitmer
2026-08-14 14:41:14 -04:00
-
fe8f84bbdf
ci: probe how service containers are addressed on this runner
Grant Whitmer
2026-08-14 13:14:24 -04:00
-
eae1bff50b
G2.3: Windy Git branding — and get it out of one host's disk into the repo
Grant Whitmer
2026-08-14 09:08:48 -04:00
-
e7dee39151
throttle: stop claiming to limit pushes we cannot see
Grant Whitmer
2026-08-13 23:33:30 -04:00
-
25368547cb
docs: runbook — never pull -q, never force-push a deployed branch
Grant Whitmer
2026-08-13 23:28:57 -04:00
-
c60bfb2b89
I-12: fail the build when COMMIT_SHA is empty
Grant Whitmer
2026-08-13 23:27:38 -04:00
-
a0ed4a5ec0
SECURITY: make EPT routing independent of signature well-formedness
Grant Whitmer
2026-08-13 23:23:50 -04:00
-
830ca48705
docs: mark revocation finding resolved — it was critical, not low
Grant Whitmer
2026-08-13 23:20:46 -04:00
-
deb3a8fafc
test: prove the revocation wiring end-to-end (resolve_passport -> decide_trust)
Grant Whitmer
2026-08-13 23:20:44 -04:00
-
587fb05265
SECURITY: enforce passport status — revocation now takes effect live
Grant Whitmer
2026-08-13 23:18:16 -04:00
-
c96d1d3102
canary: guard both forgery shapes now that real verification is live
Grant Whitmer
2026-08-13 23:13:44 -04:00
-
79dcea4d3e
G3.2/G3.4: real EPT verification + wire the throttle, reopening agent auth
Grant Whitmer
2026-08-13 23:08:40 -04:00
-
c257cc55c6
docs: second-auditor review (Fable) — 1 critical fixed live, 4 open
Grant Whitmer
2026-08-13 22:54:15 -04:00
-
85fa65a52b
canary: continuously verify the forged-token bypass stays closed
Grant Whitmer
2026-08-13 22:52:56 -04:00
-
d8deffe4db
SECURITY: close the agent-auth bypass — trust is not authentication
Grant Whitmer
2026-08-13 22:49:45 -04:00
-
83047def94
docs: whole account on Windy Git — 143 repos, 1.58 GB, two tiers
Grant Whitmer
2026-08-12 22:49:48 -04:00
-
711c47d8c9
fix: the --all-as-mirrors flag itself was never added
Grant Whitmer
2026-08-12 22:43:22 -04:00
-
ae6ca8b9d2
G11.3: bulk DR copy — every repo as a read-only mirror
Grant Whitmer
2026-08-12 22:40:52 -04:00
-
89723c6ebd
safety: disable deploy workflows on Windy Git before they can fire
Grant Whitmer
2026-08-12 22:30:56 -04:00
-
b2f00821d7
docs: replace the cutover plan with the phased one that matches reality
Grant Whitmer
2026-08-12 22:14:21 -04:00
-
51acf9f86e
URGENT FIX: reverse the sync — GitHub is the source of truth, not Windy Git
Grant Whitmer
2026-08-12 22:11:34 -04:00
-
7711adcb97
docs: cutover — Windy Git is the daily driver
Grant Whitmer
2026-08-12 21:54:47 -04:00
-
2c292c501c
G0.9: nightly timer + the first rehearsed restore in the ecosystem
Grant Whitmer
2026-08-12 21:49:11 -04:00
-
ffce529344
G0.9: nightly backup — the prerequisite for becoming the daily driver
Grant Whitmer
2026-08-12 21:47:46 -04:00
-
db31e786e0
G7.4: default to writable repos — mirrors cannot run CI (measured)
Grant Whitmer
2026-08-12 19:58:15 -04:00
-
14fb43b959
G7.4: advertise the fleet's runner labels, and correct my own doctrine
Grant Whitmer
2026-08-12 19:53:44 -04:00
-
e3677dddd9
docs: measure WHY login takes 18s — it is not 468 call sites
Grant Whitmer
2026-08-12 19:05:25 -04:00
-
ef3450d87b
G7.6: never let bookkeeping kill the monitor
Grant Whitmer
2026-08-12 15:42:58 -04:00
-
a094960da3
G3.5: accept platform.test_ping unverified — unverifiable by construction
Grant Whitmer
2026-08-12 15:36:03 -04:00
-
5dd914b8a6
G3.5: answer the reachability probe honestly instead of skipping validation
Grant Whitmer
2026-08-12 15:33:56 -04:00
-
339ec70853
G3.5: Eternitas revocation receiver — fail-closed, both signature traps avoided
Grant Whitmer
2026-08-12 15:32:27 -04:00
-
fc1937560c
G7.6: fix the alert path — urllib UA was rejected 403 by Resend
Grant Whitmer
2026-08-12 13:44:00 -04:00
-
9a7030351b
G7.6: fleet canary — probes what a user does, not what is cheap
Grant Whitmer
2026-08-12 13:41:37 -04:00
-
211a48187f
docs: incident RESOLVED — roster backoff deployed, agent chat back
Grant Whitmer
2026-08-12 13:19:58 -04:00
-
3926726309
docs: incident record — account-server login outage 2026-08-12
Grant Whitmer
2026-08-12 13:00:54 -04:00
-
b6a7045907
G7.4/G11.3: import tool — GitHub upstream, Windy Git downstream, CI here
Grant Whitmer
2026-08-12 12:12:02 -04:00
-
44756091b0
G7 COMPLETE: CI is green on our own hardware
Grant Whitmer
2026-08-12 11:38:31 -04:00
-
358c9bdaa7
G7: clean CI run on a stable runner
Grant Whitmer
2026-08-12 11:35:14 -04:00
-
6b96087554
G7: per-job networks — fixes service DNS and tightens isolation
Grant Whitmer
2026-08-12 11:18:51 -04:00
-
8c4bdd2bc2
G7.3: setup-python on the act image, not a python image
Grant Whitmer
2026-08-12 11:16:00 -04:00
-
980fc2dddd
G7.3: pin Python 3.12 in CI and cap job runtime
Grant Whitmer
2026-08-12 11:13:39 -04:00
-
ed71102e49
G7: trigger a CI run after the routing fix
Grant Whitmer
2026-08-12 10:53:57 -04:00
-
53dea84ab1
G7: route CI jobs via the public surface, not the forge network
Grant Whitmer
2026-08-12 10:51:00 -04:00
-
5f717ef74b
G7: CI runners with real isolation, and the gate as a workflow
Grant Whitmer
2026-08-12 10:39:05 -04:00
-
b274392e96
G3.1: OIDC live — sign in to Windy Git with a Windy account
Grant Whitmer
2026-08-12 10:27:14 -04:00
-
d684cfc2e1
G4.2: record Grant's ruling — use an existing fleet CF token
Grant Whitmer
2026-08-11 16:34:10 -04:00
-
a2430de94d
I-4: distinguish a mirror that never ran from one that is behind
Grant Whitmer
2026-08-11 16:16:05 -04:00
-
da257652c2
G11 / I-4: continuous off-site mirror, and a namespace bug fixed
Grant Whitmer
2026-08-11 16:11:45 -04:00
-
066de34489
G5: fix version-count copy; record the u-system namespace finding
Grant Whitmer
2026-08-11 15:59:41 -04:00
-
3a9259a0da
G5: generate an unusable password on Gitea user create
Grant Whitmer
2026-08-11 15:55:11 -04:00
-
f621e49770
G0.4: add psycopg2-binary so migrations run inside the image
Grant Whitmer
2026-08-11 15:47:14 -04:00
-
099e4be9b1
G5: the shelter — repos, grants and version history
Grant Whitmer
2026-08-11 15:45:22 -04:00
-
82044933ed
G2/G4 complete: Gitea live, LFS landing in R2, four traps pinned
Grant Whitmer
2026-08-11 15:13:58 -04:00
-
647d414ec1
G4.3: fix Gitea crash loop — [lfs] STORAGE_TYPE breaks inheritance
Grant Whitmer
2026-08-11 15:00:11 -04:00
-
301aa47b52
G4.3: enable the LFS server (storage type alone does not)
Grant Whitmer
2026-08-11 14:58:05 -04:00
-
ef75ee5a9c
G4: R2 buckets live, Gitea storage wired, checksum trap pinned
Grant Whitmer
2026-08-11 14:49:26 -04:00
-
eec087ac50
G2: Gitea auto-install, own DB role, SSH deferred, Actions on
Grant Whitmer
2026-08-11 14:44:13 -04:00
-
ce54d488f2
G1: stop probing the tunnel from inside a container
Grant Whitmer
2026-08-11 14:37:53 -04:00
-
a68261a563
G1: Veron 1 host live behind Cloudflare Tunnel
Grant Whitmer
2026-08-11 14:34:18 -04:00
-
67753497f8
G1: bind services to loopback, make host ports configurable
Grant Whitmer
2026-08-11 14:30:06 -04:00
-
255b2d1a44
G1: fix Dockerfile scripts COPY clobbering workdir
Grant Whitmer
2026-08-11 14:27:12 -04:00
-
659991b2bd
G0: cell substrate — invariants made executable
Grant Whitmer
2026-08-11 14:19:28 -04:00
-
24708914c9
GENESIS: windy-git DNA Strand Master Plan v0.1.0
Grant Whitmer
2026-08-11 13:45:12 -04:00