Commit Graph

392 Commits

Author SHA1 Message Date
Richard Courtman d3884d64db Prepare v6.4.2 security patch 2026-08-31 01:03:09 +01:00
pulse-triage[bot] eb0d17c282 Restore trustworthy governance signals 2026-08-31 00:55:44 +01:00
Richard Courtman 22fd662fb7 Match secure runtime revoke protocol 2026-08-31 00:33:49 +01:00
Richard Courtman b1028a23af Align secure runtime lifecycle fixture auth 2026-08-31 00:22:22 +01:00
Richard Courtman f87308fb63 Fix secure runtime qualification admission 2026-08-31 00:15:43 +01:00
Richard Courtman 08f7c5f0d5 Harden secure agent runtime boundaries 2026-08-31 00:06:24 +01:00
Richard Courtman a8bc2e044b Qualify helper-backed agent update recovery 2026-08-30 21:54:46 +01:00
pulse-triage[bot] e094a55b45 Integrate typed helper container summaries 2026-08-30 21:29:11 +01:00
pulse-triage[bot] cb079c9de0 Publish portable candidate build provenance 2026-08-30 20:34:04 +01:00
Richard Courtman defc24af83 Bind receipt completion to final evidence event 2026-08-30 19:06:37 +01:00
Richard Courtman b369dc5410 Accept canonical schema-v4 runtime evidence 2026-08-30 18:58:49 +01:00
Richard Courtman 77afff4f60 Bind action runner to enrolled agent identity 2026-08-30 18:49:12 +01:00
Richard Courtman 65bec55229 Exercise pending runner activation in systemd lab 2026-08-30 18:24:29 +01:00
Richard Courtman 98e8f86806 Harden secure runtime qualification provenance 2026-08-30 18:17:36 +01:00
Richard Courtman 770733fc92 Make action runner rotation activation-safe 2026-08-30 18:00:33 +01:00
pulse-triage[bot] 323da54067 Support agent retargeting after server moves 2026-08-30 16:17:15 +01:00
pulse-triage[bot] c3faa48973 Watch stable release locks continuously 2026-08-30 16:17:15 +01:00
Pulse Test 87a37e8d2f Publish secure runtime qualification matrix 2026-08-30 15:15:36 +01:00
Pulse Test b2543c5c6e Distinguish receipt paths from credentials 2026-08-30 14:50:39 +01:00
Pulse Test 9a9c03c1b1 Prepare pristine apt cache fixture 2026-08-30 14:45:13 +01:00
Pulse Test 7e92ac8118 Harden secure runtime separation boundaries 2026-08-30 14:26:01 +01:00
pulse-triage[bot] 7d9e77ff32 Continuously verify stable container aliases 2026-08-30 13:55:41 +01:00
pulse-triage[bot] 8724f6b9e5 Continuously verify stable release delivery 2026-08-30 13:10:22 +01:00
pulse-triage[bot] 9393b710da Preflight immutable release publication 2026-08-30 12:55:51 +01:00
pulse-triage[bot] 2fca8c957b Authenticate published release sidecars 2026-08-30 09:38:23 +01:00
Pulse Test cb843e37e8 Qualify separate action runner lifecycle 2026-08-30 09:07:27 +01:00
pulse-triage[bot] f70da05467 Bind Helm delivery to release provenance 2026-08-30 07:34:56 +01:00
pulse-triage[bot] 0d32dac16e Keep release toolchains within support 2026-08-30 06:40:25 +01:00
pulse-triage[bot] e66f6a26f7 Fail closed when installing MCP binaries
Verify the signed release checksum manifest against Pulse's pinned SSH key before either MCP installer accepts a downloaded binary. Remove the unsigned bypass and require one exact digest entry.

Include bare Unix MCP executables in release checksum/signature assembly, cover unavailable, invalid, ambiguous, mismatched, and successful evidence paths with executable regression tests, and enforce MCP installer pins against the configured release key.
2026-08-30 05:11:55 +01:00
pulse-triage[bot] f9ffbf701a Strengthen dependency maintenance contracts 2026-08-30 04:05:02 +01:00
pulse-triage[bot] 560c2de026 Automate dependency trust maintenance 2026-08-30 04:02:27 +01:00
Pulse Test d06ffc233d Harden secure agent runtime transitions 2026-08-30 01:41:57 +01:00
Pulse Test d607d5cf46 Separate agent remediation runtime 2026-08-29 23:48:28 +01:00
Pulse Test 6d4ee48000 Add typed agent privilege helper 2026-08-29 22:51:58 +01:00
Pulse Test a966264bb1 Contain agent command authority 2026-08-29 22:12:41 +01:00
pulse-triage[bot] d80a6a44b3 Prepare v6.4.1 stable patch 2026-08-29 11:06:26 +01:00
pulse-triage[bot] f83541061e Qualify embedded agent executable mode 2026-08-29 11:01:59 +01:00
pulse-triage[bot] ba73a5474e Keep published release validation non-destructive 2026-08-29 10:27:08 +01:00
pulse-triage[bot] 505dcd571f Keep server rollback guidance executable 2026-08-29 10:15:45 +01:00
pulse-triage[bot] 5981892dfe Bootstrap absent promotion lease ref 2026-08-29 04:15:50 +01:00
Richard Courtman 58e58553d7 Record v6.4.0 publication outcome 2026-08-29 04:06:03 +01:00
Richard Courtman db0145b2b9 Bound legacy demo history startup 2026-08-29 03:47:09 +01:00
pulse-triage[bot] 0d5b1202b5 Disable dev metrics backfill on stable demo 2026-08-29 03:41:44 +01:00
Richard Courtman c006b15871 Require proven large-demo startup 2026-08-29 03:28:50 +01:00
Richard Courtman cb0e55671f Enforce exact release visual assets 2026-08-29 02:59:47 +01:00
Richard Courtman 58b07ef36c Serialize Docker staging after draft recovery 2026-08-29 01:29:17 +01:00
pulse-triage[bot] 148b9a0e32 Fix stable release backend partition 2026-08-29 01:15:59 +01:00
Richard Courtman 41428f46a3 Prepare v6.4.0 stable release 2026-08-28 23:57:03 +01:00
pulse-triage[bot] 7ebda0e87a Migrate committed release visual evidence
Carry an explicit model-selection decision in every existing visual sidecar and enforce that invariant for future packets after the visual-plan schema became evidence-bearing.
2026-08-28 20:16:39 +01:00
Pulse Test 87674ec175 Merge remote-tracking branch 'origin/main' 2026-08-28 20:12:37 +01:00