5163 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
rcourtman	2932822b60	Fix infrastructure dialog scrolling	2026-04-22 19:11:40 +01:00
rcourtman	4d02f0769f	Refine infrastructure source-manager landing	2026-04-22 19:01:46 +01:00
rcourtman	c0f48b27ba	Grant release validation workflow required permissions	2026-04-22 17:47:13 +01:00
rcourtman	9c2e3d5ffb	Add historical backfill mode to create-release workflow	2026-04-22 17:43:37 +01:00
rcourtman	16ad67a9b5	Add historical release asset backfill workflow	2026-04-22 17:25:58 +01:00
rcourtman	3308bb733e	Fail closed on invalid agent CA bundles	2026-04-22 16:58:21 +01:00
rcourtman	f7d9b8252e	Adopt source-manager infrastructure settings flow	2026-04-22 16:54:17 +01:00
rcourtman	f96abc5ee0	Publish signed release-packet SBOM assets	2026-04-22 16:49:29 +01:00
rcourtman	6224066b00	Protect assistant layout on narrow viewports	2026-04-22 16:39:40 +01:00
rcourtman	21dde76c6f	Validate signed release sidecar assets	2026-04-22 16:30:01 +01:00
rcourtman	a442eb6bda	Normalize hot-dev auth defaults	2026-04-22 16:28:52 +01:00
rcourtman	a60fa03d7f	Route operator updates through the local signed helper	2026-04-22 16:18:16 +01:00
rcourtman	0f767b6439	Harden diagnostics onboarding export proof	2026-04-22 16:16:26 +01:00
rcourtman	f682ec475b	Add Playwright proof for onboarding diagnostics	2026-04-22 15:58:11 +01:00
rcourtman	ce95ef1fc6	Require signed server installer updates	2026-04-22 15:41:54 +01:00
rcourtman	74c2660f8d	Expose infrastructure onboarding diagnostics	2026-04-22 15:37:56 +01:00
rcourtman	b33e21e0e8	Add least-privilege SSH deploy mode	2026-04-22 15:23:02 +01:00
rcourtman	0dacde5066	Add Playwright proof for infrastructure onboarding	2026-04-22 15:21:45 +01:00
rcourtman	767a0dd5ba	Instrument infrastructure onboarding funnel and harden onboarding proof	2026-04-22 15:04:33 +01:00
rcourtman	dad0529a2f	Domain-separate relay channel HKDF derivation	2026-04-22 15:04:09 +01:00
rcourtman	e55013d14f	Bound Stripe webhook dedupe retention	2026-04-22 13:37:05 +01:00
rcourtman	2aecb44d31	Redesign infrastructure onboarding flow	2026-04-22 13:12:26 +01:00
rcourtman	a43476a696	Govern pulse-pro checkout return ownership	2026-04-22 11:57:10 +01:00
rcourtman	e8b93db1e1	Harden dev agent deploy SSH host verification	2026-04-22 11:41:50 +01:00
rcourtman	ca26ed2f44	Pin Dockerfile base images by digest	2026-04-22 11:22:46 +01:00
rcourtman	ba7b991c30	Rate limit relay proxy traffic per channel	2026-04-22 11:06:56 +01:00
rcourtman	8a42bb432e	Harden commercial callback and transport URL policy	2026-04-22 10:57:21 +01:00
rcourtman	c64f07eda0	Tighten GA RC feedback intake policy	2026-04-22 10:54:28 +01:00
rcourtman	21950c6e4c	Restore QNAP agent boot and update continuity ... Refs #1420 Refs #1422	2026-04-22 10:48:43 +01:00
rcourtman	7e4f1f474e	Add persistent TLS bypass warning banners	2026-04-22 10:30:35 +01:00
rcourtman	5aaa8d98b2	Record #1319 retest coverage on the RC3 candidate ... Refs #1319	2026-04-22 10:27:32 +01:00
rcourtman	f9be700f99	Restore shared Ceph storage overrides in alerts thresholds ... Refs #1341	2026-04-22 10:20:30 +01:00
rcourtman	74df03c78c	Pin workflow actions and CI image versions	2026-04-22 10:12:15 +01:00
rcourtman	9c8387be6f	Export restricted outbound HTTP security helpers	2026-04-22 10:05:57 +01:00
rcourtman	de99fcb1f0	Restrict purchase return HTTP callbacks to loopback	2026-04-22 09:49:36 +01:00
rcourtman	a5b2a037cb	Bound Stripe webhook dedupe retention	2026-04-22 09:46:33 +01:00
rcourtman	752f9a49ea	Require fresh browser session for ownership transfer	2026-04-22 09:41:30 +01:00
rcourtman	c6357c92a1	Harden self-hosted update runtime against low-disk drift ... Refs #1408	2026-04-22 09:40:49 +01:00
rcourtman	dd7912f5c2	Harden agent command policy for procfs reads	2026-04-22 09:27:54 +01:00
rcourtman	242c4b432d	Restore linked host-agent disk inventory for guest VMs ... Refs #1438	2026-04-22 09:22:46 +01:00
rcourtman	c0ac251316	Require target-organization approval for org shares	2026-04-22 09:16:40 +01:00
rcourtman	9879c3986a	Keep self-update preflight tokens out of argv	2026-04-22 08:12:35 +01:00
rcourtman	2806cc6c9e	Split audit log access into dedicated token scope	2026-04-22 07:59:12 +01:00
rcourtman	c1d0d34c16	Cap agent exec websocket connections per IP	2026-04-22 07:22:44 +01:00
rcourtman	ce9b89abee	Make hosted signup responses privacy-safe	2026-04-22 07:12:56 +01:00
rcourtman	e68bdc40e2	Require accepted Pulse Account invites before access binding	2026-04-22 07:03:28 +01:00
rcourtman	a44cde6b92	Gate licensing test helpers out of release builds	2026-04-22 06:18:40 +01:00
rcourtman	1841c032f6	Pin deployment defaults and verify Helm docs downloads	2026-04-22 06:05:06 +01:00
rcourtman	9c4bb4a90e	Fail closed on auth env hashing and TLS floors	2026-04-22 05:53:02 +01:00
rcourtman	583471b5ee	Harden API request and bootstrap state handling	2026-04-22 05:42:45 +01:00