OXYGENHUB

Changes up to # b63fc7a77fc6 touching docs/spec.md · 106

See as swimlanes (independent work side by side)

A tag can be withdrawn, by a signed withdrawal (oxygenhub#301) identical-sidespush-notessubrepo-pin-statev0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ b63fc7a77fc6
Keyless agents create release tags: receive and fetch authorize certified tag keys
Andy McCall via agent:claude@andymccall agent ·
◈ 1ec6fdbc6bcb
Entries stay fresh in a long-lived handle: re-read after the pack listing's 30 s
Andy McCall via agent:claude@andymccall agent ·
◈ 771661aa50f4
oxy-server: a host may refuse a push by what it adds (Backend::vet_push) keyless-tagsv0.5.0
Andy McCall via agent:claude@andymccall agent ·
◈ 67a4fe1aa2d5
Spec §13.7: signatures and index entries in a journal and entry lists, read once per open
Andy McCall via agent:claude@andymccall agent ·
◈ 8b3c9b2ba502
Fetch: carry attestation signers' identities; skip an unverifiable bookmark doctor-trust
Andy McCall ·
◈ d36ba2f79f95
Trusted time: judge a fetched attestation at its integrated time
Andy McCall via agent:claude@andymccall agent ·
◈ 028545dfa7a4
Readers never wait: one head per handle, retry on a miss, retire before deleting carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 767ac6cd0545
Witnesses for the transparency log: cosignatures and the witness rule carried-not-removedmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ b0621c2f8cc4
oxy tlog verify: audit a hub's whole transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ e59512f2f075
Spec: the transparency log in refs answers and what fetch checks
Andy McCall via agent:claude@andymccall agent ·
◈ 0ed150d62994
The transparency log as a library (tlog, spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ e5f8eb2a2006
Agents sign keyless: author.signer = keyless (keyless step 5c) v0.4.5
Andy McCall ·
✔ c895bc52e4e0
Grants let certified keys act for an author (keyless step 5a)
Andy McCall ·
✔ a2387d547373
The issuer countersigns when it accepted a certified update (keyless step 4c)
Andy McCall ·
✔ f53cbe7a204e
Certified keys may push under a subject grant (keyless step 4b)
Andy McCall via Claude Code agent ·
✔ f0a517d28237
Policies grant subjects an issuer certifies (keyless step 4a)
Andy McCall via Claude Code agent ·
✔ 3a6effc74835
Receipts signed by a certified short-lived key carry the certificate
Andy McCall via Claude Code agent ·
✔ c63fed2e0465
Certificates for short-lived keys (keyless, step 1)
Andy McCall via Claude Code agent ·
✔ 02e691881a4e
gc leaves a store that is already one full pack as it is v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ a67914bced23
oxy receipt export --format slsa: SLSA provenance cosign can check v0.4.4
Andy McCall via Claude Code agent ·
✔ a39754d02c58
Tags made before a key rotation verify again v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ e5d9b0513f3e
Sealed approvals: the approval attestation and oxy seal --flow v0.4.4
Andy McCall via Claude Code agent ·
✔ b582948f1912
Fall back to a parent's token when a stored one is refused; send the signer's identity with a bookmark move v0.4.4
Andy McCall ·
✔ 68a924846379
Snapshots: large new files left out and named; past working copies expire
Andy McCall ·
✔ b689779e9e74
undo: this workspace's last command, saying what it undid
Andy McCall ·
✔ 530a0fc650a2
git import and fetch --claim: author your own commits with your key v0.4.3
Andy McCall ·
✔ d6e0d5b8b339
Push a long history in parts
Andy McCall ·
✔ cb8b8082fa73
log --path and touches() without decoding all of history
Andy McCall ·
✔ 170bb436e1d5
author.signer: an agent signs its owner's changes with its own key
Andy McCall ·
✔ ff1a64f81c1c
Revsets: trust predicates, and -r on show, verify and abandon
Andy McCall ·
✔ 2c9ddac3c387
Scoped, expiring delegates, and revocation by the delegator
Andy McCall ·
✔ 7ba155f20aa0
Remote bookmarks work like local ones; a newer format names the oxy that cannot read it (closes #48, closes #49)
Andy McCall ·
✔ 14edbaaf5291
Sign in once per hub: oxy auth login, status and logout (closes #47)
Andy McCall ·
✔ ff1f62fee654
Projects coming from Git: .gitignore honoured, nested Git repositories named (closes #43, closes #44)
Andy McCall ·
✔ d4dbab97e948
Rebase: --into-working-copy resolves a conflicted rebase in the working copy (closes #42)
Andy McCall ·
✔ e266b7d4065c
Change format 3: text blobs hold the lines' bytes v0.1.0
Andy McCall ·
✔ 0f93f49ce059
gc repacks everything into one pack, compressed harder
Andy McCall ·
✔ da652d6392d8
Git import: one node per directory path, and no placement out of sight
Andy McCall ·
✔ a87c7b9d563a
Answer a clean status from the manifest alone
Andy McCall ·
✔ da868d5d2646
Never move a subrepo's bookmark backwards from its parent
Andy McCall ·
✔ 1a3b62032ed9
Refuse a bookmark at one head that leaves earlier work out
Andy McCall ·
✔ 4fe7d6045860
Hold the working-copy lock through every working-copy write
Andy McCall ·
✔ 6caacfff1d4f
Store large inserts as text blobs (change format 2)
Andy McCall ·
✔ 6f8aeb996558
Git import: shared graphs, deterministic node ids; quieter status
Andy McCall ·
✔ dfb23a3a8cfa
Execution receipts: the receipt object and attestation
Andy McCall ·
✔ fc1a466a1e66
The history of a range of lines: oxy log -L START,END:PATH
Andy McCall ·
✔ 83d61e803ccd
Replace conflicts are resolved by keeping a candidate
Andy McCall ·
✔ f7510b63cceb
submodule status and doctor before the first commit
Andy McCall ·
✔ e7ac6c2e84e4
oxy describe names builds; tags name changes; commit -F
Andy McCall ·
✔ 6a81dbab471d
older