1ef5618190
Verify exact release activation bytes
...
Change-source: pulse-maintainer
2026-09-01 13:29:06 +01:00
dc4639460a
Bind continuity checks to activation asset bytes
...
Change-source: pulse-maintainer
2026-09-01 12:47:16 +01:00
af2fcabe7a
Merge remote-tracking branch 'origin/main'
...
Change-source: pulse-maintainer
2026-09-01 12:47:15 +01:00
11aadbfb1b
Add rootless runtime qualification harness
2026-09-01 12:29:44 +01:00
168f52972a
Expose complete stable release continuity failures
...
Change-source: pulse-maintainer
2026-09-01 12:26:46 +01:00
a34f3c752b
Keep convergence evidence off sealed releases
...
Change-source: pulse-maintainer
2026-09-01 11:38:55 +01:00
f313882a7b
Pin container provenance workflow revision
...
Change-source: pulse-maintainer
2026-09-01 09:56:14 +01:00
fc691c3a05
Require hosted provenance for release containers
...
Change-source: pulse-maintainer
2026-09-01 09:36:24 +01:00
e1bce8b77f
Build release payloads on ephemeral runners
...
Change-source: pulse-maintainer
2026-09-01 01:41:09 +01:00
bd146586e8
Make release continuity failures actionable
...
Change-source: pulse-maintainer
2026-08-31 21:20:30 +01:00
5754d924d7
Add rootful Docker secure-runtime qualification
2026-08-31 18:13:22 +01:00
da36bcd482
Keep subsystem lookup tests checkout-independent
...
Change-source: pulse-maintainer
2026-08-31 16:00:47 +01:00
cdfcac5756
Refresh v6.4.2 final cutoff
2026-08-31 13:46:43 +01:00
164b747e83
Make contract audit tests checkout-independent
2026-08-31 12:26:33 +01:00
f47ac1f020
Define beta and RC release maturity
2026-08-31 11:42:03 +01:00
70c1d0a178
Authenticate RC artifacts before qualification
2026-08-31 09:49:41 +01:00
7650fdaba3
Wire secure runtime RC qualification
2026-08-31 01:50:48 +01:00
d3884d64db
Prepare v6.4.2 security patch
2026-08-31 01:03:09 +01:00
eb0d17c282
Restore trustworthy governance signals
2026-08-31 00:55:44 +01:00
08f7c5f0d5
Harden secure agent runtime boundaries
2026-08-31 00:06:24 +01:00
a8bc2e044b
Qualify helper-backed agent update recovery
2026-08-30 21:54:46 +01:00
e094a55b45
Integrate typed helper container summaries
2026-08-30 21:29:11 +01:00
cb079c9de0
Publish portable candidate build provenance
2026-08-30 20:34:04 +01:00
b369dc5410
Accept canonical schema-v4 runtime evidence
2026-08-30 18:58:49 +01:00
77afff4f60
Bind action runner to enrolled agent identity
2026-08-30 18:49:12 +01:00
65bec55229
Exercise pending runner activation in systemd lab
2026-08-30 18:24:29 +01:00
98e8f86806
Harden secure runtime qualification provenance
2026-08-30 18:17:36 +01:00
d732b5a9e8
Restore scoped governance audit signal
2026-08-30 17:01:44 +01:00
7e92ac8118
Harden secure runtime separation boundaries
2026-08-30 14:26:01 +01:00
7d9e77ff32
Continuously verify stable container aliases
2026-08-30 13:55:41 +01:00
9393b710da
Preflight immutable release publication
2026-08-30 12:55:51 +01:00
5be6706428
Verify secure runtime qualification provenance
2026-08-30 09:46:29 +01:00
2fca8c957b
Authenticate published release sidecars
2026-08-30 09:38:23 +01:00
f70da05467
Bind Helm delivery to release provenance
2026-08-30 07:34:56 +01:00
e66f6a26f7
Fail closed when installing MCP binaries
...
Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry.
Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.
2026-08-30 05:11:55 +01:00
d8986c139a
Enforce workflow data trust boundaries
...
Contract-Neutral: Moves workflow expressions into environment data flow without changing deployment interfaces or behavior.
2026-08-30 04:56:34 +01:00
ac2a2fe020
Complete release and helper download safeguards
2026-08-30 01:51:58 +01:00
718de25b2b
Bind release activation to trusted provenance
2026-08-30 01:51:58 +01:00
d607d5cf46
Separate agent remediation runtime
2026-08-29 23:48:28 +01:00
e67e4a7c5f
Bind container promotion to attested digests
2026-08-29 22:56:12 +01:00
6d4ee48000
Add typed agent privilege helper
2026-08-29 22:51:58 +01:00
7e7fb53911
Gate release publication on immutable setting
2026-08-29 22:41:04 +01:00
4d60d679f0
Bind activation marker to release attestation
2026-08-29 22:23:54 +01:00
5926b4dc38
Align release integrity proof fixture
2026-08-29 20:03:39 +01:00
1d170de364
Require immutable attested releases
2026-08-29 19:59:04 +01:00
3e66f042a5
Document shipped availability probe coverage
...
Change-source: pulse-maintainer
2026-08-29 18:21:50 +01:00
523bb3f705
Synchronize monitoring governance fixture
...
Include the newly accepted reload proof in the canonical guard's exact monitoring-runtime expectation.
Change-source: pulse-maintainer
2026-08-29 15:03:25 +01:00
88da3e05c9
Document persistent agent log level control
...
Change-source: pulse-maintainer
2026-08-29 13:55:32 +01:00
ba73a5474e
Keep published release validation non-destructive
2026-08-29 10:27:08 +01:00
505dcd571f
Keep server rollback guidance executable
2026-08-29 10:15:45 +01:00
pulse-triage[bot]