Commit graph

4663 commits

Author SHA1 Message Date
Richard Courtman
08f7c5f0d5 Harden secure agent runtime boundaries 2026-08-31 00:06:24 +01:00
Pulse Test
caa2f77d23 Add infrastructure-aware incident synthesis 2026-08-30 22:32:21 +01:00
Richard Courtman
a8bc2e044b Qualify helper-backed agent update recovery 2026-08-30 21:54:46 +01:00
Pulse Test
16a1574a18 Add multi-location service delivery evidence 2026-08-30 21:44:32 +01:00
pulse-triage[bot]
e094a55b45 Integrate typed helper container summaries 2026-08-30 21:29:11 +01:00
Richard Courtman
d9e9bf3679 Prove production action runner credential lifecycle 2026-08-30 21:03:37 +01:00
pulse-triage[bot]
cb079c9de0 Publish portable candidate build provenance 2026-08-30 20:34:04 +01:00
Richard Courtman
b0de28c7c4 Record schema-v4 secure runtime qualification 2026-08-30 19:38:34 +01:00
Richard Courtman
b0de67332f Fix discovery proposal copy style 2026-08-30 19:35:59 +01:00
Richard Courtman
77afff4f60 Bind action runner to enrolled agent identity 2026-08-30 18:49:12 +01:00
Pulse Test
6ee3b7e24e Add discovery-led service assurance onboarding 2026-08-30 18:40:06 +01:00
Richard Courtman
98e8f86806 Harden secure runtime qualification provenance 2026-08-30 18:17:36 +01:00
Richard Courtman
770733fc92 Make action runner rotation activation-safe 2026-08-30 18:00:33 +01:00
Pulse Test
c0b190bfa1 Add application response contracts to availability checks 2026-08-30 17:38:59 +01:00
Richard Courtman
34849268e5 Enforce collector credential scope allowlists 2026-08-30 17:18:38 +01:00
pulse-triage[bot]
323da54067 Support agent retargeting after server moves 2026-08-30 16:17:15 +01:00
pulse-triage[bot]
a1a5c53f48 Make modal backgrounds genuinely inert 2026-08-30 16:11:40 +01:00
Pulse Test
712f1a3bfe Add availability history and fleet view 2026-08-30 15:38:34 +01:00
Pulse Test
a7f1a5e25f Clarify safe profile host privilege requirements 2026-08-30 15:16:56 +01:00
Pulse Test
87a37e8d2f Publish secure runtime qualification matrix 2026-08-30 15:15:36 +01:00
pulse-triage[bot]
a0dfdadc5e Close workflow trust policy gaps 2026-08-30 15:06:00 +01:00
Pulse Test
1fbcaa04a4 Record hardened secure runtime qualification 2026-08-30 14:56:10 +01:00
Pulse Test
2468c92664 Canonicalize workload history controls 2026-08-30 14:32:07 +01:00
Pulse Test
7e92ac8118 Harden secure runtime separation boundaries 2026-08-30 14:26:01 +01:00
Pulse Test
12ec6a0c48 Plan infrastructure-aware service assurance 2026-08-30 14:18:43 +01:00
Pulse Test
161e322ee0 Add workload history discovery lens 2026-08-30 13:49:58 +01:00
pulse-triage[bot]
9393b710da Preflight immutable release publication 2026-08-30 12:55:51 +01:00
pulse-triage[bot]
68887f7114 Bound chart response cache retention 2026-08-30 12:55:50 +01:00
Richard Courtman
1e805afc4b Avoid full-estate settings hydration 2026-08-30 10:03:34 +01:00
Pulse Test
5be6706428 Verify secure runtime qualification provenance 2026-08-30 09:46:29 +01:00
pulse-triage[bot]
2fca8c957b Authenticate published release sidecars 2026-08-30 09:38:23 +01:00
Richard Courtman
87fda2a235 Scope provider inventory hydration by route 2026-08-30 09:32:35 +01:00
Pulse Test
36dd5b9119 Bind secure runtime proof to committed main 2026-08-30 09:27:45 +01:00
Pulse Test
cb843e37e8 Qualify separate action runner lifecycle 2026-08-30 09:07:27 +01:00
pulse-triage[bot]
f70da05467 Bind Helm delivery to release provenance 2026-08-30 07:34:56 +01:00
pulse-triage[bot]
0d32dac16e Keep release toolchains within support 2026-08-30 06:40:25 +01:00
pulse-triage[bot]
366fe3f293 Inherit runtime availability history limits 2026-08-30 05:49:15 +01:00
pulse-triage[bot]
ca238e97ac Define availability history product contract 2026-08-30 05:47:43 +01:00
pulse-triage[bot]
e66f6a26f7 Fail closed when installing MCP binaries
Some checks failed
Build and Test / Secret Scan (push) Waiting to run
Build and Test / Detect changed areas (push) Waiting to run
Build and Test / Frontend (push) Blocked by required conditions
Build and Test / Backend tests (api) (push) Blocked by required conditions
Build and Test / Backend tests (rest-0) (push) Blocked by required conditions
Build and Test / Backend tests (rest-1) (push) Blocked by required conditions
Build and Test / Script smoke tests & backend build (push) Blocked by required conditions
Build and Test / Benchmarks (push) Blocked by required conditions
Canonical Governance / governance (push) Waiting to run
Helm CI / Lint and Render Chart (push) Waiting to run
Public docs / check (push) Waiting to run
Core E2E Tests / Validate E2E tier selection (push) Waiting to run
Core E2E Tests / Playwright Core E2E (shard 1/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 2/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 3/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 4/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 5/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 6/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 7/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 8/8) (push) Blocked by required conditions
Core E2E Tests / Agent registration lifecycle (push) Waiting to run
Core E2E Tests / E2E verdict (push) Blocked by required conditions
Unified Agent Native Verification / Linux ARM64 (push) Waiting to run
Unified Agent Native Verification / Linux x64 (push) Waiting to run
Unified Agent Native Verification / Windows x64 (push) Waiting to run
Unified Agent Native Verification / macOS ARM64 (push) Waiting to run
Unified Agent Native Verification / macOS Intel (push) Waiting to run
Unified Agent Native Verification / FreeBSD cross-build contract (push) Waiting to run
Patrol Qualification Regression / Catalog, scorer, and replay regression (push) Has been cancelled
Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry.

Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.
2026-08-30 05:11:55 +01:00
pulse-triage[bot]
95a7191ca9 Enforce native private state permissions 2026-08-30 03:31:00 +01:00
pulse-triage[bot]
f1ddfce083 Improve TrueNAS storage disk scannability 2026-08-30 02:27:41 +01:00
pulse-triage[bot]
184b3cbfa6 Restore Windows native agent verification 2026-08-30 02:05:30 +01:00
pulse-triage[bot]
b001ad8ef1 Classify Proxmox guest lifecycle transport 2026-08-30 01:51:58 +01:00
pulse-triage[bot]
ac2a2fe020 Complete release and helper download safeguards 2026-08-30 01:51:58 +01:00
pulse-triage[bot]
718de25b2b Bind release activation to trusted provenance 2026-08-30 01:51:58 +01:00
Pulse Test
d06ffc233d Harden secure agent runtime transitions 2026-08-30 01:41:57 +01:00
Pulse Test
5d3571dbe8 Scope remaining provider inventory hydration 2026-08-30 00:42:18 +01:00
Pulse Test
5b2e377843 Expose secure agent runtime posture 2026-08-30 00:38:44 +01:00
Pulse Test
471c607e38 Optimize provider inventory hydration 2026-08-30 00:12:29 +01:00
Pulse Test
d607d5cf46 Separate agent remediation runtime 2026-08-29 23:48:28 +01:00