58 commits

Author	SHA1	Message	Date
rcourtman	0f747781fb	Support private Pro archive installs	2026-05-07 09:28:38 +01:00
rcourtman	d6e96ebeca	Fix v6 demo release signing key deployment	2026-05-05 21:40:14 +01:00
rcourtman	96c2e160c9	Fix RC4 release validation blockers	2026-05-05 15:59:23 +01:00
rcourtman	ce7b459aa7	Harden runtime Proxmox token ACLs	2026-05-05 14:42:05 +01:00
rcourtman	cf103ca9fe	Harden root agent service defaults	2026-05-05 13:03:13 +01:00
rcourtman	fe30ecc81e	Fix TrueNAS CORE agent supervisor restart ... Refs #1457	2026-05-05 09:13:03 +01:00
rcourtman	1a9fa936ee	Fix release key helper module path	2026-05-04 09:44:41 +01:00
rcourtman	c27814d190	Fix stable installer prerelease selection ... Refs #1435	2026-05-03 15:20:18 +01:00
rcourtman	9ba0c3fa96	Retry release asset uploads	2026-05-03 10:26:51 +01:00
rcourtman	54378a14e5	Fix release validation draft metadata preservation	2026-05-02 02:01:57 +01:00
rcourtman	011d288cb4	Fix release asset validation workflow gates	2026-05-02 00:36:54 +01:00
rcourtman	c8e24f06d7	Fix clean VCS metadata for release builds	2026-05-01 23:12:41 +01:00
rcourtman	87aba32540	Port installer disk preflight from v5	2026-05-01 20:28:11 +01:00
rcourtman	411e8daa4d	Port installer bundle fallback fix from v5	2026-05-01 20:28:11 +01:00
rcourtman	af8a5f0740	Port RC3 maintenance fixes from v5 ... Refs #1440, #1444, #1451	2026-05-01 20:28:11 +01:00
rcourtman	a2c101379a	Guard stable updater from prerelease tags ... Refuse prerelease-shaped tags and explicit GitHub prerelease responses in the unattended stable updater before installer invocation. Add installability tests and proof routing for the auto-update prerelease refusal guard.	2026-04-25 23:49:27 +01:00
rcourtman	fb6b53268a	Harden release Docker key embedding cache	2026-04-24 17:21:04 +01:00
rcourtman	3ffdf785f1	Split hosted runtime image build contract	2026-04-24 11:33:20 +01:00
rcourtman	c4f1e8d7cb	Avoid tenant runtime image copy-up	2026-04-24 09:21:42 +01:00
rcourtman	c51708000f	Tighten unified agent hardening proof	2026-04-23 23:37:25 +01:00
rcourtman	9bada35337	Harden unified agent runtime and installer	2026-04-23 23:04:18 +01:00
rcourtman	f58840e8a8	Guard forward release signing against trust-root drift	2026-04-22 19:59:18 +01:00
rcourtman	c0f48b27ba	Grant release validation workflow required permissions	2026-04-22 17:47:13 +01:00
rcourtman	9c2e3d5ffb	Add historical backfill mode to create-release workflow	2026-04-22 17:43:37 +01:00
rcourtman	16ad67a9b5	Add historical release asset backfill workflow	2026-04-22 17:25:58 +01:00
rcourtman	f96abc5ee0	Publish signed release-packet SBOM assets	2026-04-22 16:49:29 +01:00
rcourtman	21dde76c6f	Validate signed release sidecar assets	2026-04-22 16:30:01 +01:00
rcourtman	a60fa03d7f	Route operator updates through the local signed helper	2026-04-22 16:18:16 +01:00
rcourtman	ce95ef1fc6	Require signed server installer updates	2026-04-22 15:41:54 +01:00
rcourtman	ca26ed2f44	Pin Dockerfile base images by digest	2026-04-22 11:22:46 +01:00
rcourtman	21950c6e4c	Restore QNAP agent boot and update continuity ... Refs #1420 Refs #1422	2026-04-22 10:48:43 +01:00
rcourtman	74df03c78c	Pin workflow actions and CI image versions	2026-04-22 10:12:15 +01:00
rcourtman	1841c032f6	Pin deployment defaults and verify Helm docs downloads	2026-04-22 06:05:06 +01:00
rcourtman	4720807ae5	Require signed installer downloads and local release sidecars	2026-04-22 03:51:46 +01:00
rcourtman	96034f5e10	Attest release artifacts and harden image provenance	2026-04-22 03:22:29 +01:00
rcourtman	7be844f23a	Require signed unified agent release assets	2026-04-22 02:00:29 +01:00
rcourtman	4711d11163	Fix fresh Proxmox LXC installs defaulting to RC	2026-04-20 23:11:46 +01:00
rcourtman	4bd023fe1c	infra: align agent-led add landing with Proxmox auto-detect	2026-04-20 22:48:34 +01:00
rcourtman	18f4580e03	Harden demo public browser smoke readiness	2026-04-12 17:07:50 +01:00
rcourtman	ef288b250b	Reconcile draft release retries	2026-04-12 10:52:19 +01:00
rcourtman	a48fb63cb3	Preserve draft release validation state	2026-04-11 17:35:14 +01:00
rcourtman	be2b987cf0	Add public browser smoke proof to demo workflows	2026-04-11 13:50:00 +01:00
rcourtman	3a992a4fae	Route demo updates over governed Tailscale path	2026-04-11 13:35:37 +01:00
rcourtman	a462b730ec	Verify demo host identity before deploy	2026-04-11 12:46:18 +01:00
rcourtman	5b2005a645	Parse demo entry script for parity proof	2026-04-11 11:09:14 +01:00
rcourtman	c9cd8cf14b	Fix preview frontend parity asset detection	2026-04-11 10:59:06 +01:00
rcourtman	6e2b58d555	Harden preview demo deployment verification	2026-04-11 00:39:07 +01:00
rcourtman	e512bb62dc	Add explicit auto-update disable install mode	2026-04-10 11:34:58 +01:00
rcourtman	58ad221d47	Add governed v6 preview demo targets	2026-04-10 10:53:17 +01:00
rcourtman	d7d757bddd	fix(installer): support local release archives on v6	2026-04-09 11:55:03 +01:00