Grant Whitmer

windyadmin pushed to main at windyadmin/windy-git

2026-09-23 05:30:08 +00:00

390c1e7479 ops: move tunnel metrics to 2001, sync windy-git into itself

2b30b0ac99 docs: record the runner bump, the act cache flake, and the remaining reds

cd7dd9b7ae ci: bump act_runner 0.2.11 -> 0.6.1 for node24 action support

9fc27eabd6 docs: record the real CI root cause — setup-uv resolves uv via the forge API

Compare 4 commits »

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 21:31:27 +00:00

db055a1922 docs: refresh the turnover prompt for the actual next task

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 21:30:47 +00:00

86326ca6a7 docs: record three-repo CI fix results — 1 of 3 verified

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 19:00:32 +00:00

e0d5d118be docs: turnover for a fresh session

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 18:41:18 +00:00

01e36155a3 ci: remove the service-networking probe; scope the python-pin test

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 17:14:29 +00:00

fe8f84bbdf ci: probe how service containers are addressed on this runner

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 13:08:52 +00:00

eae1bff50b G2.3: Windy Git branding — and get it out of one host's disk into the repo

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:33:33 +00:00

e7dee39151 throttle: stop claiming to limit pushes we cannot see

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:29:00 +00:00

25368547cb docs: runbook — never pull -q, never force-push a deployed branch

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:27:43 +00:00

c60bfb2b89 I-12: fail the build when COMMIT_SHA is empty

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:23:53 +00:00

a0ed4a5ec0 SECURITY: make EPT routing independent of signature well-formedness

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:20:48 +00:00

830ca48705 docs: mark revocation finding resolved — it was critical, not low

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:20:48 +00:00

deb3a8fafc test: prove the revocation wiring end-to-end (resolve_passport -> decide_trust)

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:18:19 +00:00

587fb05265 SECURITY: enforce passport status — revocation now takes effect live

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:13:47 +00:00

c96d1d3102 canary: guard both forgery shapes now that real verification is live

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:09:50 +00:00

79dcea4d3e G3.2/G3.4: real EPT verification + wire the throttle, reopening agent auth

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 03:08:43 +00:00

a598c931ef G3.2/G3.4: real EPT verification + wire the throttle, reopening agent auth

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 02:54:20 +00:00

c257cc55c6 docs: second-auditor review (Fable) — 1 critical fixed live, 4 open

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 02:53:00 +00:00

85fa65a52b canary: continuously verify the forged-token bypass stays closed

windyadmin pushed to main at windyadmin/windy-git

2026-08-14 02:49:51 +00:00

d8deffe4db SECURITY: close the agent-auth bypass — trust is not authentication

83047def94 docs: whole account on Windy Git — 143 repos, 1.58 GB, two tiers

711c47d8c9 fix: the --all-as-mirrors flag itself was never added

ae6ca8b9d2 G11.3: bulk DR copy — every repo as a read-only mirror

89723c6ebd safety: disable deploy workflows on Windy Git before they can fire

Compare 7 commits »