OXYGENHUB

Changes on keyless-tags · 576

See as swimlanes (independent work side by side)

keyless-tags has 67 heads. The graph shows their union; heads are marked.
WIP #129: a tag's signer travels with the push (part 1 of 3) keyless-tags head
Andy McCall via agent:claude@andymccall agent ·
◈ d8524a9f0117
oxy 0.5.0 keyless-tagsv0.5.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 6f06d9f912b4
Merge #116 (pack entries) into main: keep both Unreleased lines resolution
Andy McCall via agent:claude@andymccall agent ·
◈ 2b95bc24d7d6
Entries stay fresh in a long-lived handle: re-read after the pack listing's 30 s
Andy McCall via agent:claude@andymccall agent ·
◈ 771661aa50f4
Changelog: a server can refuse a push by what it adds (oxygenhub#268)
Andy McCall via agent:claude@andymccall agent ·
◈ 27825564bc16
Fold the older one-list keys on gc and stop reading them
Andy McCall via agent:claude@andymccall agent ·
◈ 8156967b882c
Signatures and index entries from a journal and entry lists, not a LIST per lookup
Andy McCall via agent:claude@andymccall agent ·
◈ ef7d4ea6f33b
oxy-server: a host may refuse a push by what it adds (Backend::vet_push) keyless-tagsv0.5.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 67a4fe1aa2d5
Spec §13.7: signatures and index entries in a journal and entry lists, read once per open
Andy McCall via agent:claude@andymccall agent ·
◈ 8b3c9b2ba502
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ e4595038502a
Fetch: compute the attestation signers once per operation head identical-sideskeyless-tagsmainpush-notessubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ e10ba80000e1
riscv64 check: init before the identity, and cache the target directory identical-sideskeyless-tagsmainpush-notessubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ f5bd79d06f5c
oxy doctor checks the trust policy doctor-trustidentical-sideskeyless-tagsmainpush-notessubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ ad2496f7e608
A native RISC-V check on narvi-1: oxy built and used on riscv64 doctor-trust
Andy McCall via agent:claude@andymccall agent ·
◈ 8d6cf1f23694
Fetch: carry attestation signers' identities; skip an unverifiable bookmark doctor-trust
Andy McCall ·
◈ d36ba2f79f95
Trusted time: judge a fetched attestation at its integrated time
Andy McCall via agent:claude@andymccall agent ·
◈ 028545dfa7a4
Merge main into #125: keep both synopsis lines doctor-trustkeyless-tagspaths-for-resolutions-and-amendv0.5.0v0.5.1v0.6.0 resolution head
Andy McCall via agent:claude@andymccall agent ·
◈ 87322662f607
Marker-like text no longer blocks a conflict resolution doctor-trustkeyless-tagsv0.5.0v0.5.1v0.6.0v0.7.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 3652104ae7d3
The same file added on both sides, identically, is one file doctor-trustidentical-sideskeyless-tagsmainpaths-for-resolutions-and-amendpush-notessubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ c2e1d09047db
Commit a resolution by paths, and amend only some paths
Andy McCall via agent:claude@andymccall agent ·
◈ 69953b507188
oxy show --stat: the files a change touched, with lines added and removed show-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 0299076f09a2
A carried switch no longer says carried files were removed carried-not-removeddoctor-trustkeyless-tagspaths-for-resolutions-and-amendv0.5.0v0.5.1v0.6.0v0.7.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 44f1ebe7aa5b
oxy merge takes a remote's bookmark doctor-trustidentical-sideskeyless-tagsmainmerge-remote-bookmarkpaths-for-resolutions-and-amendpush-notessubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 733ea16a9701
Readers never wait: one head per handle, retry on a miss, retire before deleting carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 767ac6cd0545
Opening a bucket store sends no request per pack (refs #116)
Andy McCall via agent:claude@andymccall agent ·
◈ 7e0e8e5ad882
Bucket stores count pack listings and kept listings apart carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ 30644f1ecb7b
A repository kept in a bucket lists its packs once a while (closes #116)
Andy McCall via agent:claude@andymccall agent ·
◈ 87c948720343
oxy witness serve: a transparency-log witness anyone can run carried-not-removeddoctor-trustidentical-sideskeyless-tagsmainmerge-remote-bookmarkpaths-for-resolutions-and-amendpush-notesshow-statsubrepo-pin-statev0.10.0v0.11.0v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 51d4862a16d8
Witnesses for the transparency log: cosignatures and the witness rule carried-not-removedmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ b0621c2f8cc4
A hub's new log key is a note, not a fork carried-not-removedmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-stat
Andy McCall via agent:claude@andymccall agent ·
◈ b333a19976e4
oxy tlog verify: audit a hub's whole transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ e59512f2f075
Spec: the transparency log in refs answers and what fetch checks
Andy McCall via agent:claude@andymccall agent ·
◈ 0ed150d62994
Fetch checks the host's transparency log (spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ 4b9d06778581
The transparency log as a library (tlog, spec §14.8)
Andy McCall via agent:claude@andymccall agent ·
◈ e5f8eb2a2006
Release 0.4.6: agents push as themselves carried-not-removeddoctor-trustmerge-remote-bookmarkpaths-for-resolutions-and-amendshow-statv0.4.6
Andy McCall via agent:claude@andymccall agent ·
◈ 68dcf21fe055
Grant tokens reach hubs; unsetting core.sign works carried-not-removeddoctor-trustidentical-sideskeyless-tagsmainmerge-remote-bookmarkpaths-for-resolutions-and-amendpush-notesshow-statsubrepo-pin-statev0.10.0v0.11.0v0.4.6v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via agent:claude@andymccall agent ·
✔ c96354484bd9
Release 0.4.5: keyless agents v0.4.5
Andy McCall via Claude Code agent ·
✔ f05b84d1ad2d
Agents sign keyless: author.signer = keyless (keyless step 5c) v0.4.5
Andy McCall ·
✔ c895bc52e4e0
Grants let certified keys act for an author (keyless step 5a)
Andy McCall ·
✔ a2387d547373
The issuer countersigns when it accepted a certified update (keyless step 4c)
Andy McCall ·
✔ f53cbe7a204e
Certified keys may push under a subject grant (keyless step 4b)
Andy McCall via Claude Code agent ·
✔ f0a517d28237
Policies grant subjects an issuer certifies (keyless step 4a)
Andy McCall via Claude Code agent ·
✔ 3a6effc74835
Receipts signed by a certified short-lived key carry the certificate
Andy McCall via Claude Code agent ·
✔ c63fed2e0465
certify_challenge: what a fresh key signs to ask for its certificate
Andy McCall via Claude Code agent ·
✔ 098227d48b1a
Certificates for short-lived keys (keyless, step 1)
Andy McCall via Claude Code agent ·
✔ 02e691881a4e
cosign commands say --insecure-ignore-tlog carried-not-removeddoctor-trustidentical-sideskeyless-tagsmainmerge-remote-bookmarkpaths-for-resolutions-and-amendpush-notesshow-statsubrepo-pin-statev0.10.0v0.11.0v0.4.5v0.4.6v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via Claude Code agent ·
✔ 5f661562b3a4
oxy 0.4.4 v0.4.4
Andy McCall via Claude Code agent ·
✔ efad40f9ac8e
A credential helper that does not read its input is no error carried-not-removeddoctor-trustidentical-sideskeyless-tagsmainmerge-remote-bookmarkpaths-for-resolutions-and-amendpush-notesshow-statsubrepo-pin-statev0.10.0v0.11.0v0.4.4v0.4.5v0.4.6v0.5.0v0.5.1v0.6.0v0.7.0v0.8.0v0.9.0 head
Andy McCall via Claude Code agent ·
✔ e5f8920bc8d0
Cloud stores remember a missing key for 30 s, until this process writes it v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ 8b53b935dd03
gc leaves a store that is already one full pack as it is v0.4.4v0.4.5v0.4.6
Andy McCall via Claude Code agent ·
✔ a67914bced23
older