2aece859a5
Harden safe rootless runtime recovery
2026-08-31 22:17:07 +01:00
6185cf3f88
Bound alert lifecycle replay with a durable projection watermark
...
Projection replay walked the entire alert event log on every boot, twice
(monitor start and the resource-store boundary), synchronously on the
serving path, and every replayed event queued a full incident-store JSON
rewrite. A 64k-event log made startup exceed the dev supervisor's
health-kill window, so the backend restarted forever and never served.
The event log now owns per-consumer projection watermarks in
alert_store_meta, WalkOldest takes an AfterID cursor, and the single
catch-up pass runs in the background at the canonical resource-store
boundary with periodic watermark checkpoints. The watermark only
advances when both the incident store and the canonical change recorder
are attached, so partial-surface passes repair without marking events
applied, and lowering the watermark forces a full repair replay.
Incident-store saves now coalesce: a burst of mutations queues one
whole-store serialization instead of one per event, live paths included.
Registers the alert-lifecycle-replay-startup-scalability coverage gap
and amends the alerts and monitoring subsystem contracts accordingly.
2026-08-31 21:57:58 +01:00
83cc5e5642
Give stable backend qualification full completion headroom
2026-08-31 19:05:32 +01:00
c8ee0ba74d
Make workload tag filters keyboard accessible
...
Change-source: pulse-maintainer
2026-08-31 18:21:45 +01:00
5754d924d7
Add rootful Docker secure-runtime qualification
2026-08-31 18:13:22 +01:00
ed6f429674
Make action runner authority state crash-safe
2026-08-31 17:34:30 +01:00
cf021bc9ce
Surface typed helper container degradation
2026-08-31 15:53:50 +01:00
cdfcac5756
Refresh v6.4.2 final cutoff
2026-08-31 13:46:43 +01:00
69cbe5f3b8
Enforce protected GitHub checkout baseline
2026-08-31 13:21:25 +01:00
d19398d82a
Surface typed helper degradation in Agent Doctor
2026-08-31 13:06:28 +01:00
ee881d4849
Refresh v6.4.2 release cutoff
2026-08-31 12:14:12 +01:00
2ddd12cb31
Repair v6.4.2 Helm provenance
2026-08-31 11:59:11 +01:00
d5945f824d
Preserve Pulse severity in systemd journal
2026-08-31 11:46:51 +01:00
f47ac1f020
Define beta and RC release maturity
2026-08-31 11:42:03 +01:00
70c1d0a178
Authenticate RC artifacts before qualification
2026-08-31 09:49:41 +01:00
da62890d82
Refresh v6.4.2 release packet
2026-08-31 09:45:27 +01:00
2ff027a743
Bind release candidate version explicitly
2026-08-31 09:37:28 +01:00
8c63984696
Clear stale PBS backup-running state
2026-08-31 07:03:43 +01:00
240adaa5e4
Authenticate every published installer
2026-08-31 04:55:15 +01:00
a190703fe5
Reject ambiguous release checksum manifests
2026-08-31 04:40:34 +01:00
445ebacf24
Restore delivery qualification trust
...
Harden release workflow input transport and make native lifecycle proof honor each platform security boundary. Refresh stale telemetry and delivery qualifications.
Contract-Neutral: Formatting-only catalog updates and browser-verified alert copy; release compiler and native lifecycle changes update their owning contracts.
2026-08-31 03:02:13 +01:00
7650fdaba3
Wire secure runtime RC qualification
2026-08-31 01:50:48 +01:00
fec48928ee
Record schema v6 secure runtime qualification
2026-08-31 01:12:15 +01:00
d3884d64db
Prepare v6.4.2 security patch
2026-08-31 01:03:09 +01:00
79967177ea
Enforce explicit SSO administrator grants
2026-08-31 00:43:42 +01:00
0f2d7ae055
Make notification delivery failures actionable
2026-08-31 00:39:53 +01:00
08f7c5f0d5
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
caa2f77d23
Add infrastructure-aware incident synthesis
2026-08-30 22:32:21 +01:00
a8bc2e044b
Qualify helper-backed agent update recovery
2026-08-30 21:54:46 +01:00
16a1574a18
Add multi-location service delivery evidence
2026-08-30 21:44:32 +01:00
e094a55b45
Integrate typed helper container summaries
2026-08-30 21:29:11 +01:00
d9e9bf3679
Prove production action runner credential lifecycle
2026-08-30 21:03:37 +01:00
cb079c9de0
Publish portable candidate build provenance
2026-08-30 20:34:04 +01:00
b0de28c7c4
Record schema-v4 secure runtime qualification
2026-08-30 19:38:34 +01:00
b0de67332f
Fix discovery proposal copy style
2026-08-30 19:35:59 +01:00
77afff4f60
Bind action runner to enrolled agent identity
2026-08-30 18:49:12 +01:00
6ee3b7e24e
Add discovery-led service assurance onboarding
2026-08-30 18:40:06 +01:00
98e8f86806
Harden secure runtime qualification provenance
2026-08-30 18:17:36 +01:00
770733fc92
Make action runner rotation activation-safe
2026-08-30 18:00:33 +01:00
c0b190bfa1
Add application response contracts to availability checks
2026-08-30 17:38:59 +01:00
34849268e5
Enforce collector credential scope allowlists
2026-08-30 17:18:38 +01:00
a1a5c53f48
Make modal backgrounds genuinely inert
2026-08-30 16:11:40 +01:00
712f1a3bfe
Add availability history and fleet view
2026-08-30 15:38:34 +01:00
87a37e8d2f
Publish secure runtime qualification matrix
2026-08-30 15:15:36 +01:00
a0dfdadc5e
Close workflow trust policy gaps
2026-08-30 15:06:00 +01:00
1fbcaa04a4
Record hardened secure runtime qualification
2026-08-30 14:56:10 +01:00
2468c92664
Canonicalize workload history controls
2026-08-30 14:32:07 +01:00
7e92ac8118
Harden secure runtime separation boundaries
2026-08-30 14:26:01 +01:00
12ec6a0c48
Plan infrastructure-aware service assurance
2026-08-30 14:18:43 +01:00
161e322ee0
Add workload history discovery lens
2026-08-30 13:49:58 +01:00
rcourtman