Commit graph

999 commits

Author SHA1 Message Date
rcourtman
e6b0d47bd6 Gate Docker mutations on authz-plugin posture 2026-04-18 10:45:25 +01:00
rcourtman
5ebb3d9952 Harden session and setup token auth flows 2026-04-18 00:06:50 +01:00
rcourtman
f2d5892aa5 Skip onboarding overflow bonus on uncapped plans
The free-tier onboarding overflow adds +1 to MaxMonitoredSystems for 14
days after initial setup. Once rc.2 made self-hosted core monitoring
uncapped (MaxMonitoredSystems = 0 on Free), the bonus math silently
converted "unlimited" into a hard cap of 1 — the UI then surfaced
"Over plan by N. N monitored, 1 included." on healthy installs.

Guard the addition on limit > 0 at all three call sites (ledger path,
commercial entitlement payload, runtime capabilities payload) so the
bonus only extends plans that actually have a cap.

Refs #1429
2026-04-17 12:16:03 +01:00
rcourtman
1bc08f3bc1 Canonicalize self-hosted purchase handoff intent
Refs #1409
2026-04-16 10:17:37 +01:00
rcourtman
5914a4127d Make self-hosted core monitoring uncapped
Refs #1409
2026-04-16 01:21:57 +01:00
rcourtman
d573d3a85f Preserve standalone host continuity across restart
Refs #1402
2026-04-15 16:23:42 +01:00
rcourtman
bd8b2efd1b Add monitored-system admission extension hook 2026-04-15 14:04:21 +01:00
rcourtman
3596acfeb2 Trim stale SAML rebinding coverage 2026-04-15 13:57:40 +01:00
rcourtman
27367da17f Isolate internal/api tests from system data dir 2026-04-15 13:40:24 +01:00
rcourtman
8d703f2371 Explain monitored-system over-plan legitimacy 2026-04-15 13:38:57 +01:00
rcourtman
a33983175b Port v5 SAML public URL rebinding 2026-04-15 13:17:01 +01:00
rcourtman
6c1364ef54 Clarify monitored-system admission freeze posture 2026-04-15 13:15:10 +01:00
rcourtman
429f12decd Recover unavailable Pulse Account handoffs 2026-04-15 10:09:00 +01:00
rcourtman
f3c4d4d83d Grandfather active v5 Pro customers as uncapped 2026-04-15 00:35:24 +01:00
rcourtman
b84e4067e8 Uncap grandfathered lifetime entitlements 2026-04-14 23:34:37 +01:00
rcourtman
7cac04e2ff Track v6 install version through licensing runtime 2026-04-14 11:44:59 +01:00
rcourtman
58e67c7b19 Canonicalize usage-data telemetry reporting 2026-04-14 11:05:10 +01:00
rcourtman
2d8385c1d8 Fix same-host websocket proxy origin checks 2026-04-13 12:04:29 +01:00
rcourtman
51b494b137 Stabilize RC backend test contracts 2026-04-12 09:02:56 +01:00
rcourtman
05fa111ca1 Stabilize backend race tests for v6 RC publish 2026-04-11 22:46:34 +01:00
rcourtman
5a3affbfd9 Rebaseline API chart CI SLOs 2026-04-11 19:43:18 +01:00
rcourtman
b33cc3ac60 Hide admin operations from public demo 2026-04-11 17:20:58 +01:00
rcourtman
1e28a03b57 Stabilize rc1 mock mode and metrics history 2026-04-11 16:47:37 +01:00
rcourtman
1caa34536b Use mock unified state for demo infrastructure charts 2026-04-11 15:35:05 +01:00
rcourtman
347a013e79 Stabilize RC release proof contracts 2026-04-11 14:51:10 +01:00
rcourtman
b64782c083 Align mock state resources with canonical contract 2026-04-11 13:40:01 +01:00
rcourtman
f1713b5fee Stabilize demo resource ordering 2026-04-11 00:24:03 +01:00
rcourtman
efb218958a Fix Kubernetes demo chart history coverage 2026-04-10 23:40:13 +01:00
rcourtman
05b132b110 Fix Kubernetes pod demo history contracts 2026-04-10 23:04:35 +01:00
rcourtman
4ca488101e Optimize compact storage summary chart path 2026-04-10 19:09:12 +01:00
rcourtman
cceca653dc Compact dashboard demo hot path 2026-04-10 18:30:39 +01:00
rcourtman
8d97bc3995 Tighten dashboard summary hot paths 2026-04-10 17:32:30 +01:00
rcourtman
b643d6d255 Unify dashboard storage trend loading 2026-04-10 14:53:00 +01:00
rcourtman
3100ad1b3d Prove IPv6 trusted proxy websocket continuity 2026-04-10 12:54:12 +01:00
rcourtman
b846d66fd0 Gate release mock fixtures behind demo entitlement 2026-04-10 12:33:57 +01:00
rcourtman
4a8c901a29 Calibrate resources load floor for GitHub runners 2026-04-10 00:35:35 +01:00
rcourtman
a831f7252a Calibrate remaining API RC dry-run proofs 2026-04-09 23:28:39 +01:00
rcourtman
b4199a4b96 Fix remaining RC backend proof drift 2026-04-09 23:06:49 +01:00
rcourtman
a6ba806af9 Stabilize remaining RC dry-run proofs 2026-04-09 22:43:09 +01:00
rcourtman
826358eefc Stabilize remaining RC backend proofs 2026-04-09 22:13:02 +01:00
rcourtman
0ec2dec65e Calibrate RC CI SLO envelopes 2026-04-09 21:27:03 +01:00
rcourtman
81fef82bdd Restore RC backend proof regressions 2026-04-09 20:15:17 +01:00
rcourtman
a4a223a7c6 Exclude disabled platform connections from monitored-system counts 2026-04-09 16:35:38 +01:00
rcourtman
441e45e74a Fail closed platform saves on unavailable usage 2026-04-09 15:48:28 +01:00
rcourtman
537cf2713e Guard monitored-system admission limits 2026-04-09 11:17:59 +01:00
rcourtman
46a262f19d Require canonical monitored-system usage availability 2026-04-09 11:15:56 +01:00
rcourtman
9c498b55c6 Prove demo commercial API preview redaction
Add backend regression coverage for the public-demo commercial route policy so monitored-system ledger reads, ledger preview/explain requests, and provider preview probes are hidden with the same generic 404 while adjacent platform list/add/test routes remain outside the commercial policy.
2026-04-09 09:55:54 +01:00
rcourtman
f998aa91cb Align demo commercial route inventory proof 2026-04-09 09:51:54 +01:00
rcourtman
f7a6a0f83e Normalize configured platform replacement selectors 2026-04-09 08:25:26 +01:00
rcourtman
5567fd1b80 Stabilize commercial activation continuity ownership 2026-04-09 08:07:34 +01:00