OXYGENHUB

Changes up to # b63fc7a77fc6 · 473

See as swimlanes (independent work side by side)

A tag can be withdrawn, by a signed withdrawal (oxygenhub#301) identical-sidespush-notessubrepo-pin-statev0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ b63fc7a77fc6
Old clients are not sent tags only a certificate authorizes (closes #131)
Andy McCall via agent:claude@andymccall agent ·
◈ ee130dd9eef2
Keyless agents create release tags: receive and fetch authorize certified tag keys
Andy McCall via agent:claude@andymccall agent ·
◈ 1ec6fdbc6bcb
WIP #129: a tag's signer travels with the push (part 1 of 3) keyless-tags
Andy McCall via agent:claude@andymccall agent ·
◈ d8524a9f0117
oxy 0.5.0 keyless-tagsv0.5.0
Andy McCall via agent:claude@andymccall agent ·
◈ 6f06d9f912b4
Merge #116 (pack entries) into main: keep both Unreleased lines resolution
Andy McCall via agent:claude@andymccall agent ·
◈ 2b95bc24d7d6
Entries stay fresh in a long-lived handle: re-read after the pack listing's 30 s
Andy McCall via agent:claude@andymccall agent ·
◈ 771661aa50f4
Changelog: a server can refuse a push by what it adds (oxygenhub#268)
Andy McCall via agent:claude@andymccall agent ·
◈ 27825564bc16
Fold the older one-list keys on gc and stop reading them
Andy McCall via agent:claude@andymccall agent ·
◈ 8156967b882c
Signatures and index entries from a journal and entry lists, not a LIST per lookup
Andy McCall via agent:claude@andymccall agent ·
◈ ef7d4ea6f33b
oxy-server: a host may refuse a push by what it adds (Backend::vet_push) keyless-tagsv0.5.0
Andy McCall via agent:claude@andymccall agent ·
◈ 67a4fe1aa2d5
Spec §13.7: signatures and index entries in a journal and entry lists, read once per open
Andy McCall via agent:claude@andymccall agent ·
◈ 8b3c9b2ba502
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ e4595038502a
Fetch: carry attestation signers' identities; skip an unverifiable bookmark doctor-trust
Andy McCall ·
◈ d36ba2f79f95
Trusted time: judge a fetched attestation at its integrated time
Andy McCall via agent:claude@andymccall agent ·
◈ 028545dfa7a4
Readers never wait: one head per handle, retry on a miss, retire before deleting carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 767ac6cd0545
Opening a bucket store sends no request per pack (refs #116)
Andy McCall via agent:claude@andymccall agent ·
◈ 7e0e8e5ad882
Bucket stores count pack listings and kept listings apart carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 30644f1ecb7b
A repository kept in a bucket lists its packs once a while (closes #116)
Andy McCall via agent:claude@andymccall agent ·
◈ 87c948720343
Witnesses for the transparency log: cosignatures and the witness rule carried-not-removedmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ b0621c2f8cc4
A hub's new log key is a note, not a fork carried-not-removedmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ b333a19976e4
oxy tlog verify: audit a hub's whole transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ e59512f2f075
Spec: the transparency log in refs answers and what fetch checks
Andy McCall via agent:claude@andymccall agent ·
◈ 0ed150d62994
Fetch checks the host's transparency log (spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ 4b9d06778581
The transparency log as a library (tlog, spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ e5f8eb2a2006
Release 0.4.6: agents push as themselves carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-statv0.4.6
Andy McCall via agent:claude@andymccall agent ·
◈ 68dcf21fe055
Release 0.4.5: keyless agents v0.4.5
Andy McCall via Claude Code agent ·
✔ f05b84d1ad2d
Agents sign keyless: author.signer = keyless (keyless step 5c) v0.4.5
Andy McCall ·
✔ c895bc52e4e0
Grants let certified keys act for an author (keyless step 5a)
Andy McCall ·
✔ a2387d547373
The issuer countersigns when it accepted a certified update (keyless step 4c)
Andy McCall ·
✔ f53cbe7a204e
Certified keys may push under a subject grant (keyless step 4b)
Andy McCall via Claude Code agent ·
✔ f0a517d28237
Policies grant subjects an issuer certifies (keyless step 4a)
Andy McCall via Claude Code agent ·
✔ 3a6effc74835
Receipts signed by a certified short-lived key carry the certificate
Andy McCall via Claude Code agent ·
✔ c63fed2e0465
certify_challenge: what a fresh key signs to ask for its certificate
Andy McCall via Claude Code agent ·
✔ 098227d48b1a
Certificates for short-lived keys (keyless, step 1)
Andy McCall via Claude Code agent ·
✔ 02e691881a4e
oxy 0.4.4 v0.4.4
Andy McCall via Claude Code agent ·
✔ efad40f9ac8e
Cloud stores remember a missing key for 30 s, until this process writes it v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ 8b53b935dd03
gc leaves a store that is already one full pack as it is v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ a67914bced23
Read a packed object from its pack before asking for a loose copy v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ 092457020692
oxy receipt export --format slsa: SLSA provenance cosign can check v0.4.4
Andy McCall via Claude Code agent ·
✔ a39754d02c58
Strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 1e0fbb47ab90
Tags made before a key rotation verify again v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ e5d9b0513f3e
Strata: one client per cloud store, its requests side by side, and counts
Andy McCall via Claude Code agent ·
✔ 2ddd471651cd
Approvals are kept in the repository: indexed by state, kept by gc carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-statv0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ 3a4b3e018326
Sealed approvals: the approval attestation and oxy seal --flow v0.4.4
Andy McCall via Claude Code agent ·
✔ b582948f1912
Fall back to a parent's token when a stored one is refused; send the signer's identity with a bookmark move v0.4.4
Andy McCall ·
✔ 68a924846379
A hosted change can move a subrepo's pin only-help-103v0.4.4v0.4.5v0.4.6
Andy McCall ·
✔ f2f91ceb0e9f
Merge main into bare-hashes bare-hashesonly-help-103 resolution
Andy McCall ·
✔ c86270b7c670
Merge main into switch-says switch-says resolution
Andy McCall ·
✔ 4294602ee66f
Merge main into switch-says resolution
Andy McCall ·
✔ ebb9210bad0c
older