08f7c5f0d5
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
caa2f77d23
Add infrastructure-aware incident synthesis
2026-08-30 22:32:21 +01:00
47c1cee895
Enforce least-privilege job tokens
2026-08-30 22:11:40 +01:00
1d9e66b24c
fix(mock): keep provider fixtures fresh on slow demo ticks
...
The public demo runs PULSE_MOCK_UPDATE_INTERVAL=60s, which stretches the
10-cohort supplemental rotation to 600s while the unified registry still
marks TrueNAS/VMware/availability sources stale after 120s. Every row those
sources own spent ~80% of each rotation flagged as a degraded stale source,
so the TrueNAS Storage tab read Healthy 0 / Attention 21 (and the vSphere
page all-Attention) despite healthy fixture data.
Rebase provider-backed fixtures every tick once the rotation would outlive
the 120s freshness budget (at slow ticks that is cheaper per wall-clock
second than the default 2s config's once-per-20s cadence), and derive mock
supplemental stale thresholds from the actual refresh cadence the same way
PVE/PBS/PMG thresholds already derive from their polling intervals. Split
the supplemental uptime step so per-tick refreshes do not advance PBS
uptime by the rotation-scaled step.
2026-08-30 22:10:49 +01:00
a8bc2e044b
Qualify helper-backed agent update recovery
2026-08-30 21:54:46 +01:00
16a1574a18
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
e094a55b45
Integrate typed helper container summaries
2026-08-30 21:29:11 +01:00
d9e9bf3679
Prove production action runner credential lifecycle
2026-08-30 21:03:37 +01:00
cb079c9de0
Publish portable candidate build provenance
2026-08-30 20:34:04 +01:00
31a9bcebf5
Harden discovery assurance feedback
2026-08-30 20:11:39 +01:00
b0de28c7c4
Record schema-v4 secure runtime qualification
2026-08-30 19:38:34 +01:00
b0de67332f
Fix discovery proposal copy style
2026-08-30 19:35:59 +01:00
defc24af83
Bind receipt completion to final evidence event
2026-08-30 19:06:37 +01:00
b369dc5410
Accept canonical schema-v4 runtime evidence
2026-08-30 18:58:49 +01:00
77afff4f60
Bind action runner to enrolled agent identity
2026-08-30 18:49:12 +01:00
6ee3b7e24e
Add discovery-led service assurance onboarding
2026-08-30 18:40:06 +01:00
65bec55229
Exercise pending runner activation in systemd lab
2026-08-30 18:24:29 +01:00
98e8f86806
Harden secure runtime qualification provenance
2026-08-30 18:17:36 +01:00
770733fc92
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
c0b190bfa1
Add application response contracts to availability checks
2026-08-30 17:38:59 +01:00
34849268e5
Enforce collector credential scope allowlists
2026-08-30 17:18:38 +01:00
d732b5a9e8
Restore scoped governance audit signal
2026-08-30 17:01:44 +01:00
323da54067
Support agent retargeting after server moves
2026-08-30 16:17:15 +01:00
c3faa48973
Watch stable release locks continuously
2026-08-30 16:17:15 +01:00
a1a5c53f48
Make modal backgrounds genuinely inert
2026-08-30 16:11:40 +01:00
712f1a3bfe
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
a7f1a5e25f
Clarify safe profile host privilege requirements
2026-08-30 15:16:56 +01:00
87a37e8d2f
Publish secure runtime qualification matrix
2026-08-30 15:15:36 +01:00
a0dfdadc5e
Close workflow trust policy gaps
2026-08-30 15:06:00 +01:00
21007a8662
Isolate private governance from pull requests
2026-08-30 15:02:41 +01:00
1fbcaa04a4
Record hardened secure runtime qualification
2026-08-30 14:56:10 +01:00
b2543c5c6e
Distinguish receipt paths from credentials
2026-08-30 14:50:39 +01:00
9a9c03c1b1
Prepare pristine apt cache fixture
2026-08-30 14:45:13 +01:00
2468c92664
Canonicalize workload history controls
2026-08-30 14:32:07 +01:00
7e92ac8118
Harden secure runtime separation boundaries
2026-08-30 14:26:01 +01:00
12ec6a0c48
Plan infrastructure-aware service assurance
2026-08-30 14:18:43 +01:00
7d9e77ff32
Continuously verify stable container aliases
2026-08-30 13:55:41 +01:00
161e322ee0
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
8724f6b9e5
Continuously verify stable release delivery
2026-08-30 13:10:22 +01:00
9393b710da
Preflight immutable release publication
2026-08-30 12:55:51 +01:00
68887f7114
Bound chart response cache retention
2026-08-30 12:55:50 +01:00
21367b655d
Make Patrol finding outcomes discoverable
2026-08-30 11:25:06 +01:00
1e805afc4b
Avoid full-estate settings hydration
2026-08-30 10:03:34 +01:00
5be6706428
Verify secure runtime qualification provenance
2026-08-30 09:46:29 +01:00
2fca8c957b
Authenticate published release sidecars
2026-08-30 09:38:23 +01:00
87fda2a235
Scope provider inventory hydration by route
2026-08-30 09:32:35 +01:00
36dd5b9119
Bind secure runtime proof to committed main
2026-08-30 09:27:45 +01:00
cb843e37e8
Qualify separate action runner lifecycle
2026-08-30 09:07:27 +01:00
74cf2c1283
Require authority for infrastructure actions
2026-08-30 08:36:31 +01:00
f70da05467
Bind Helm delivery to release provenance
2026-08-30 07:34:56 +01:00
Richard Courtman