rcourtman 879de51e28 Accept release-dispatch refs as post-merge snapshot dispatches ...

Release secrets are repository-wide today, so any workflow on any branch can
read them. The plan is to move them into a `release` environment that admits
only `main` and post-merge dispatch refs. Today's dispatch refs cannot serve:
`release-candidate/*` also names unmerged release PR heads.

The snapshot check now also accepts `release-dispatch/<packet>`. It must name
a merged PR whose head is `release-candidate/<packet>` at the dispatched
commit, with the same source-line and ancestry checks as before. The
existing `release-candidate/*` dispatch keeps working, so the host dispatcher
can switch over later. Every snapshot cut after this lands carries the check.

This change validates identity only. Restricting who can create or move
`release-dispatch/*` refs is a separate repository ruleset, and the contract
says the namespace carries no extra trust until that ruleset is active.

2026-10-25 22:00:28 +00:00

..

dev

…

eval

…

installtests

Keep manual channel proof on the HTTPS transport envelope

2026-10-25 16:56:36 +00:00

intelligence_lab

Restore Patrol's Safe auto-fix and Autopilot modes

2026-10-12 14:13:47 +01:00

lib

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

lint-fixer

…

memory

ci: compare memory with the latest stable release every day

2026-10-21 14:16:15 +01:00

release_control

Accept release-dispatch refs as post-merge snapshot dispatches

2026-10-25 22:00:28 +00:00

tests

Fail closed when local pre-push source reads fail

2026-10-25 19:47:30 +00:00

.go-version

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

audit-private-boundary.sh

Ratchet private boundary audit debt

2026-07-29 20:09:23 +01:00

backfill-release-assets.sh

…

BENCHMARK_EVIDENCE.md

fix: measure workload chart generation in performance guards

2026-10-18 17:32:34 +01:00

browser_os_packages.py

Cache browser OS packages so slow apt mirrors stop E2E

2026-10-23 18:02:39 +01:00

build-pve-backup-reconciliation.mjs

Retain PVE recovery history across incomplete backup scans

2026-10-23 20:46:39 +01:00

build-release-binaries.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

build-release.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

build-secure-runtime-qualification.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

bundle.manifest

…

bundle.sh

…

capture-release-note-visuals.sh

Improve release highlights and reusable screenshot evidence

2026-10-15 11:42:25 +01:00

check_docs_mirror.py

Keep the docs guard out of the branch-tip link scan

2026-09-01 12:17:00 +01:00

check_notification_runtime.py

Respect deployment telemetry lock in notification CI journey

2026-10-11 05:18:21 +01:00

check_public_docs.py

Align TrueNAS guidance with JSON-RPC runtime

2026-09-01 18:32:39 +01:00

check_telemetry_schema_parity.py

Harden Patrol activation telemetry

2026-08-28 11:35:41 +01:00

check_workflow_trust.py

fix(ci): qualify the Actions patch and minor refresh

2026-10-14 17:38:18 +01:00

check-alert-diagnosis-ordering.mjs

fix(alerts): ignore superseded delivery diagnosis responses

2026-09-06 17:17:36 +01:00

check-alert-dispatch-copy.mjs

fix(alerts): distinguish dispatch from notification receipt

2026-09-06 15:12:07 +01:00

check-backup-app-refresh.mjs

Repair the remaining drawer and storage history browser proofs

2026-10-14 11:27:57 +01:00

check-backup-browser-polling.mjs

Preserve backup coverage row focus across polling snapshots

2026-09-05 01:33:47 +01:00

check-bench-regression.sh

Interpret byte-throughput benchmark changes in the right direction

2026-10-25 11:25:52 +00:00

check-browser-lifecycle-control.mjs

test(web): retain failing browser suspension control diagnostic

2026-09-08 07:00:33 +01:00

check-browser-single-session-control.mjs

test(web): cover production incident refresh after tab suspension

2026-09-08 08:42:45 +01:00

check-delivery-health-ordering.mjs

Merge current main and verify diagnostic workflows

2026-09-06 04:22:09 +01:00

check-delivery-log-ordering.mjs

fix(web): retain current delivery evidence across overlapping reads

2026-09-06 10:19:46 +01:00

check-delivery-server-error-copy.mjs

fix(web): identify notification destination server failures

2026-09-08 12:54:21 +01:00

check-docs-fragment-navigation.cjs

Document maintenance API and repair documentation section links

2026-09-21 07:23:24 +01:00

check-drawer-tab-retention.cjs

Chart history on Overview in Docker host and resource drawers

2026-10-13 23:30:46 +01:00

check-frontend-serialization.mjs

Reject stale Solid serialization overrides before frontend installation

2026-10-14 01:53:13 +01:00

check-github-release-immutability.sh

Gate release publication on immutable setting

2026-08-29 22:41:04 +01:00

check-host-disk-patrol.mjs

fix(patrol): resolve disk alerts through canonical resource owners

2026-10-08 17:22:29 +01:00

check-incident-request-ownership.mjs

fix(alerts): discard pending history reads after clearing

2026-09-10 06:44:37 +01:00

check-navigation-admission-race.mjs

test(web): qualify superseded admission and diagnose narrow table access

2026-09-05 17:57:42 +01:00

check-overview-health-refresh.mjs

Merge current main and verify diagnostic workflows

2026-09-06 04:22:09 +01:00

check-patrol-assistant-journey.mjs

Stop sending the ignored autonomous_mode chat field

2026-10-08 00:17:08 +01:00

check-pbs-host-history-correlation.cjs

Repair the PBS drawer browser fixture and its two proofs

2026-10-14 09:02:31 +01:00

check-pve-backup-reconciliation.cjs

Match the full workload identity in the PVE browser journey

2026-10-23 21:03:01 +01:00

check-recovery-feedback.mjs

test(web): verify recovery preserves real settings-parent edits

2026-09-07 16:39:11 +01:00

check-update-access-copy.mjs

fix(web): avoid prescribing permissions from update access failures

2026-09-08 21:59:40 +01:00

check-webhook-test-save-parity.mjs

fix(web): align webhook test custom fields with saved configuration

2026-09-08 23:29:31 +01:00

check-workflow-dispatch-inputs.py

…

ci_browser_proof_only.py

Avoid runtime CI fan-out for browser-receipt-only tree changes

2026-10-14 04:13:00 +01:00

ci_triage_only.py

Keep isolated issue-triage changes on their dedicated CI path

2026-10-25 09:04:08 +00:00

clean-mock-alerts.sh

…

cleanup.sh

…

cloud-backup.sh

…

collect_e2e_container_logs.py

Retain E2E container diagnostics without flooding Actions logs

2026-10-10 19:00:17 +01:00

com.pulse.hot-dev.plist.template

…

compile-go-tests.sh

Reject incompatible Go test fixtures before backend CI fan-out

2026-10-06 19:54:22 +01:00

conformance-smoke.sh

…

demo_public_browser_smoke.cjs

Prove demo auto sign-in in the public browser smoke

2026-10-24 14:31:21 +01:00

dependency_advisory_watch.py

Audit main without directing dependency repairs to retired lines

2026-10-10 23:43:37 +01:00

dev-check.sh

…

dev-deploy-agent.sh

…

dev-launchd-setup.sh

fix(dev): preserve executable launchd wrapper mode

2026-08-27 17:54:10 +01:00

dev-launchd-wrapper.sh

…

dev-prepush.sh

Fail closed when local pre-push source reads fail

2026-10-25 19:47:30 +00:00

diagnose-root-pair.py

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

diagnose-uuid-layout.py

ci: add fixed UUID layout diagnostic without release gate waiver

2026-09-06 22:11:03 +01:00

docker-build.sh

…

e2e_test_images.py

Build Core E2E test images once per exact workflow run

2026-10-09 22:25:34 +01:00

ensure_test_assets.sh

…

exclusive-lock.mjs

…

generate-pulse-intelligence-docs.go

backend and governance: MCP contract, agent capabilities, API, and release-control

2026-06-23 17:26:15 +01:00

generate-release-notes.sh

Keep a real change out of the Highlights example

2026-10-24 20:43:52 +01:00

generate-self-hosted-feature-catalog.go

Format generated self-hosted feature catalog with prettier in the generator

2026-07-27 11:58:05 +01:00

generate-types.go

Retire the Assistant chat window; alert Investigate runs Patrol

2026-10-23 00:15:04 +01:00

go-mod-download.sh

Keep a kill backstop on the bounded module download

2026-10-07 15:46:01 +01:00

go-test-compile-required.sh

Reject incompatible Go test fixtures before backend CI fan-out

2026-10-06 19:54:22 +01:00

history-clear-browser-fixture.mjs

fix(alerts): discard pending history reads after clearing

2026-09-10 06:44:37 +01:00

hot-dev-bg.sh

Point dev:verify at the Proxmox backups layout spec

2026-10-08 09:56:53 +01:00

hot-dev.sh

Keep hot-dev build temp on the configured Go temp volume

2026-08-31 22:11:38 +01:00

incident-browser-checks.md

test(alerts): distinguish staged recovery edits from saved intent

2026-09-08 10:32:49 +01:00

incident-browser-fixture.mjs

test(web): verify incident convergence after native tab suspension

2026-09-08 08:23:44 +01:00

incident-convergence-server.mjs

test(web): verify incident convergence after native tab suspension

2026-09-08 08:23:44 +01:00

install-container-agent.sh

Restore Docker agents to Hosts inventory

2026-07-23 22:06:56 +01:00

install-docker.sh

Prepare v6.6.0

2026-10-25 08:39:03 +00:00

install-go-toolchain.sh

build: move to Go 1.26.10 and Vite 6.4.5 for October advisories

2026-10-21 15:19:02 +01:00

install-mcp.ps1

Fail closed when installing MCP binaries

2026-08-30 05:11:55 +01:00

install-mcp.sh

fix(installer): verify checksums on FreeBSD without coreutils

2026-09-20 02:43:57 +01:00

install.ps1

Refuse Windows agent mutation until service removal is confirmed

2026-10-08 06:09:08 +01:00

install.sh

Keep the system hostname when migrating to the safe profile

2026-10-25 09:43:39 +00:00

npm_audit_process.py

Own audit subprocess cleanup through completion and cancellation

2026-10-13 05:34:03 +01:00

npm-audit-retry.sh

Preserve literal Bash audit invocation inside the owned group

2026-10-13 05:39:13 +01:00

package-helm-chart.sh

…

patrol_e2e_matrix.sh

…

playwright-apt.conf

Scope browser OS acquisition to the runner's signed Ubuntu sources

2026-10-25 04:00:03 +00:00

prepare-release-container-context.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

pulse-auto-update.sh

Refuse incomplete updater manager observations

2026-10-14 11:58:09 +01:00

readme_entrypoints_test.py

Make getting-started installs fail closed and plans current

2026-10-02 02:53:31 +01:00

release_asset_common.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

release_browser_packet.py

fix(release): admit real archive sizes and enforce workflow trust

2026-10-04 03:00:30 +01:00

release_browser_tailnet.py

Bind release browser qualification to the narrow CI identity

2026-10-04 04:57:17 +01:00

release_build_targets.sh

Separate agent remediation runtime

2026-08-29 23:48:28 +01:00

release_candidate_manifest.py

Enforce exact release visual assets

2026-08-29 02:59:47 +01:00

release_ldflags.sh

…

release_lifecycle_rehearsal_versions.py

Add shadow release lifecycle rehearsal workflow

2026-10-01 09:11:15 +01:00

release_lifecycle_rehearsal.sh

Stop release browser access at every authenticated refusal

2026-10-04 03:44:51 +01:00

release_update_key.go

Wire secure runtime RC qualification

2026-08-31 01:50:48 +01:00

release-go-test-events.py

fix(release): mark store-history SLO measurement windows

2026-09-09 01:34:22 +01:00

release-preflight-worker.sh

fix(release): give the rehearsal backend an explicit package timeout

2026-09-19 21:24:38 +01:00

release-resource-snapshot.py

chore(release): retain bounded backend resource evidence

2026-09-07 16:47:55 +01:00

remerge-parallel.sh

…

render_installers.go

…

repo-boundary-paid-surface.allowlist

Declare the shared reporting telemetry adapter boundary

2026-10-17 21:24:54 +01:00

repo-boundary-private-implementation.baseline

Ratchet private boundary audit debt

2026-07-29 20:09:23 +01:00

repo-boundary-regression.py

Declare the shared reporting telemetry adapter boundary

2026-10-17 21:24:54 +01:00

require-safe-gh-attestation.sh

Bind release activation to trusted provenance

2026-08-30 01:51:58 +01:00

run_cloud_public_signup_smoke.sh

…

run_demo_public_browser_smoke.sh

…

run_hosted_staging_smoke.sh

…

run-ci-benchmarks.sh

Keep paired PR benchmarks inside their time budget

2026-10-05 22:39:51 +01:00

run-native-pve-action-qualification.sh

Add native PVE action qualification harness

2026-09-01 10:43:35 +01:00

run-release-backend-tests.sh

Warm the pulse-agent build before the pinned release API shards

2026-10-12 16:28:14 +01:00

run-release-preflight.sh

Accelerate release qualification with exact-SHA worker

2026-08-12 17:07:12 +01:00

run-secure-runtime-rootful-qualification.sh

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

run-secure-runtime-rootless-qualification.sh

Give rootless qualification hosts unique identities

2026-09-01 21:18:24 +01:00

scan-ci-secrets.sh

Scan delivered source history instead of an empty merge log

2026-10-14 05:15:15 +01:00

secure-runtime-rootful-runtime.sh

Tighten rootful runtime cleanup proof

2026-09-02 02:52:13 +01:00

security_review_auth_credentials.sh

Make security review baseline fail closed

2026-09-01 01:02:17 +01:00

session-handoff.sh

…

shard_go_tests.py

Harden release backend cold-run qualification

2026-08-28 03:36:33 +01:00

standalone.manifest

Require immutable attested releases

2026-08-29 19:59:04 +01:00

sync_chart_release_metadata.py

…

sync-production-config.sh

…

telemetry_adoption_report.py

Separate reporting generation days from successful repeat periods

2026-10-17 21:51:08 +01:00

test-vm-disk.sh

Bound the complete passive VM preflight read

2026-10-12 00:10:22 +01:00

toggle-mock.sh

Scale large-estate workload and Proxmox demo performance

2026-08-23 15:09:32 +01:00

trigger-release-dry-run.sh

Soak release candidates for 24 hours before stable

2026-09-28 16:42:46 +01:00

trigger-release.sh

Improve release highlights and reusable screenshot evidence

2026-10-15 11:42:25 +01:00

trigger-stable-patch.sh

Bind release dispatches to the admitted commit

2026-09-02 02:28:14 +01:00

uninstall-sensor-proxy.sh

Stop legacy sensor cleanup on unconfirmed service or container state

2026-10-07 22:07:07 +01:00

validate-published-release.sh

Authenticate every published installer

2026-08-31 04:55:15 +01:00

validate-release.sh

Keep Windows agent update signatures addressable

2026-09-01 16:11:04 +01:00

verify-github-release-integrity.sh

fix(release): reject ambiguous activation asset inventories

2026-09-05 15:43:23 +01:00

verify-release-container-images.sh

Retry registry reads when verifying release container images

2026-10-12 12:44:29 +01:00

verify-release-helm-chart.sh

Recover Helm Pages from attested OCI charts

2026-09-04 01:04:30 +01:00

verify-stable-container-aliases.sh

Continuously verify stable container aliases

2026-08-30 13:55:41 +01:00

write_github_output.py

Close runner output alias bypasses

2026-09-01 16:54:07 +01:00