1e805afc4b
Avoid full-estate settings hydration
2026-08-30 10:03:34 +01:00
5be6706428
Verify secure runtime qualification provenance
2026-08-30 09:46:29 +01:00
2fca8c957b
Authenticate published release sidecars
2026-08-30 09:38:23 +01:00
87fda2a235
Scope provider inventory hydration by route
2026-08-30 09:32:35 +01:00
36dd5b9119
Bind secure runtime proof to committed main
2026-08-30 09:27:45 +01:00
cb843e37e8
Qualify separate action runner lifecycle
2026-08-30 09:07:27 +01:00
f70da05467
Bind Helm delivery to release provenance
2026-08-30 07:34:56 +01:00
0d32dac16e
Keep release toolchains within support
2026-08-30 06:40:25 +01:00
366fe3f293
Inherit runtime availability history limits
2026-08-30 05:49:15 +01:00
ca238e97ac
Define availability history product contract
2026-08-30 05:47:43 +01:00
e66f6a26f7
Fail closed when installing MCP binaries
...
Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry.
Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.
2026-08-30 05:11:55 +01:00
95a7191ca9
Enforce native private state permissions
2026-08-30 03:31:00 +01:00
f1ddfce083
Improve TrueNAS storage disk scannability
2026-08-30 02:27:41 +01:00
184b3cbfa6
Restore Windows native agent verification
2026-08-30 02:05:30 +01:00
b001ad8ef1
Classify Proxmox guest lifecycle transport
2026-08-30 01:51:58 +01:00
ac2a2fe020
Complete release and helper download safeguards
2026-08-30 01:51:58 +01:00
718de25b2b
Bind release activation to trusted provenance
2026-08-30 01:51:58 +01:00
d06ffc233d
Harden secure agent runtime transitions
2026-08-30 01:41:57 +01:00
5d3571dbe8
Scope remaining provider inventory hydration
2026-08-30 00:42:18 +01:00
5b2e377843
Expose secure agent runtime posture
2026-08-30 00:38:44 +01:00
471c607e38
Optimize provider inventory hydration
2026-08-30 00:12:29 +01:00
d607d5cf46
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
1720fd635b
Harden CodeQL-scanned input boundaries
2026-08-29 23:42:23 +01:00
a628fc3063
Merge remote-tracking branch 'origin/main' into HEAD
2026-08-29 23:40:07 +01:00
69f4cbeb74
Fix vSphere workload first paint
2026-08-29 23:36:27 +01:00
e67e4a7c5f
Bind container promotion to attested digests
2026-08-29 22:56:12 +01:00
6d4ee48000
Add typed agent privilege helper
2026-08-29 22:51:58 +01:00
3099085475
Correct release subsystem registry numbering
2026-08-29 22:42:21 +01:00
7e7fb53911
Gate release publication on immutable setting
2026-08-29 22:41:04 +01:00
4d60d679f0
Bind activation marker to release attestation
2026-08-29 22:23:54 +01:00
a966264bb1
Contain agent command authority
2026-08-29 22:12:41 +01:00
6453593b4b
Plan secure agent runtime separation
2026-08-29 21:34:58 +01:00
d8f8f78c2c
Document integrated update and navigation contracts
2026-08-29 21:31:37 +01:00
1d170de364
Require immutable attested releases
2026-08-29 19:59:04 +01:00
3e66f042a5
Document shipped availability probe coverage
...
Change-source: pulse-maintainer
2026-08-29 18:21:50 +01:00
6db3cc8616
fix(alerts): correlate linked outage signals
2026-08-29 18:19:00 +01:00
d671f05408
fix(alerts): stabilize noisy lifecycle signals
2026-08-29 17:32:17 +01:00
a506cdde8b
Separate notification server errors from rejections
2026-08-29 16:57:44 +01:00
938f0d1063
chore(release-control): release SMART alert evidence claim
2026-08-29 16:56:18 +01:00
9c914ff6ae
fix(alerts): hold SMART incidents on unknown evidence
2026-08-29 16:54:18 +01:00
ed5de5d144
fix(frontend): align desktop drawer detail cards
2026-08-29 16:40:17 +01:00
3de3cd320d
Deliver alerts from first startup reports
...
Wire outbound alert callbacks before a monitor is published so immediately reconnecting agents cannot create active warnings in the constructor-to-Start gap. Add a pre-Start custom-sensor regression and bind the ordering in monitoring and agent lifecycle contracts.
Change-source: pulse-maintainer
2026-08-29 16:20:20 +01:00
f29e7397b1
Complete schema 14 privacy disclosure
...
Name every outbound alert-quality field in both operator-facing privacy documents, lock the current schema value in verification, and align the alert-manager adoption test with the telemetry contract.
Change-source: pulse-maintainer
2026-08-29 15:23:28 +01:00
0df9747bd7
Add privacy-safe alert quality telemetry
2026-08-29 14:00:28 +01:00
88da3e05c9
Document persistent agent log level control
...
Change-source: pulse-maintainer
2026-08-29 13:55:32 +01:00
75a240ad1c
Classify offline Proxmox node failures accurately
...
Treat node-scoped HTTP 595 responses as debug-level resource unavailability instead of repeated authentication warnings. Preserve warnings and returned errors for real credential failures.
Refs #1794 .
Contract-Neutral: corrects internal log severity without changing API, resource, or extension contracts
Change-source: pulse-maintainer
2026-08-29 13:16:21 +01:00
6cb5d3046b
Preserve secondary issue feedback
...
Contract-Neutral: issue-triage intake only; no product, deployment, or release contract change
Change-source: pulse-maintainer
2026-08-29 12:24:03 +01:00
b75a5aeec2
Add release service health telemetry
2026-08-29 11:24:53 +01:00
db7e26deac
Document TrueNAS parsing in v6.4.1
2026-08-29 11:22:24 +01:00
fb4291131f
Harden TrueNAS SMART percentage parsing
2026-08-29 11:17:14 +01:00
Richard Courtman