OXYGENHUB

Changes up to # 42c8e2f4219f +7 · 134

See as swimlanes (independent work side by side)

42c8e2f4219f132df0776b4e53fa34de3055f3ca2b9d9933a0c1524ff1880894+59078d2b8d46ac771ab994acfee19435d59761da77c9738138e8f996d3299370+6a2d31568cf2217c7cd40bd5bb97ecb469cd311e485a5ffe3f85d98d477a0661+8bf49b95b09e44880ae317bf6ad6de2c3c4166698a18a93fd53b7520c48bcc5a+c3db750ed96ee23293fcab12bdc9f768f85a79df5841cdb0b82106e1a07f0729+e0918b887850318bed4bbbc69e984e037b20bdff738ad75435012e75be400c40+f849c7889471a035af5b44825022b68168df394a3944521071ae7b0feadf1aed+fe128fa67a06401b7c2d469178bcfe1e047e29c97fe5b9acba0bc8dd9ac84b2a has 8 heads. The graph shows their union; heads are marked.
Pin oxygen with tag withdrawal and grants that survive a rotation (oxygenhub#301, oxygen#135) head
Andy McCall via agent:claude@andymccall agent ·
◈ 42c8e2f4219f
Pin oxygen with keyless agents' grant signers carried (oxygen#134)
Andy McCall via agent:claude@andymccall agent ·
◈ 9ff1fb9f2865
OxygenFlow 0.3.0 v0.3.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 6a2d31568cf2
A runner's own metrics (refs #35)
Andy McCall via agent:claude@andymccall agent ·
◈ 4be5e4cd0af6
Pin oxygen 0.5.1
Andy McCall via agent:claude@andymccall agent ·
◈ 8bf49b95b09e
Pin oxygen: old clients are not sent tags only a certificate authorizes (oxygen#131)
Andy McCall via agent:claude@andymccall agent ·
◈ 33d8ada65f6a
Pin oxygen: keyless agents' release tags (oxygen#129)
Andy McCall via agent:claude@andymccall agent ·
◈ d59bf2389914
Prune build caches before they are kept
Andy McCall via agent:claude@andymccall agent ·
◈ 077a65242359
OxygenFlow 0.2.0, its first tagged release v0.2.0
Andy McCall via agent:claude@andymccall agent ·
◈ da72c3b192c3
Pin oxygen e7cb3acb: bucket stores read signatures and index entries from a journal and entry lists (oxygen#116)
Andy McCall via agent:claude@andymccall agent ·
◈ c2430ac3b728
Pin oxygen ec1dc9bd: Backend::vet_push for hosts (oxygenhub#268)
Andy McCall via agent:claude@andymccall agent ·
◈ 3b1e6c8448ca
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ da5118d25db2
Pin oxygen 06746594: attestation signers computed once per operation head
Andy McCall via agent:claude@andymccall agent ·
◈ eaad903bb266
Build caches for the syscall tier
Andy McCall via agent:claude@andymccall agent ·
◈ 2594278f49b2
Pin oxygen ee497ab1: fetches carry attestation signers' identities
Andy McCall via agent:claude@andymccall agent ·
◈ 749d6e7168b8
Pin oxygen fd97f4c8: trusted time, identical adds unify, marker-like text
Andy McCall via agent:claude@andymccall agent ·
◈ 0f2b8eca36b8
Pin oxygen 89ffcd8d: readers never wait (oxygenhub#249)
Andy McCall via agent:claude@andymccall agent ·
◈ 85998eeba77e
Pin oxygen: no request per pack on open
Andy McCall via agent:claude@andymccall agent ·
◈ 7cbe4369d492
Pin oxygen: listing counters
Andy McCall via agent:claude@andymccall agent ·
◈ c5a3fed29cee
Pin oxygen: pack listings kept a moment
Andy McCall via agent:claude@andymccall agent ·
◈ 35cd8ccb29ea
Pin oxygen with transparency-log witnesses
Andy McCall via agent:claude@andymccall agent ·
◈ af8cf879d4fb
Pin oxygen: a new log key is a note
Andy McCall via agent:claude@andymccall agent ·
◈ 97b9cfeb7d66
Pin oxygen with oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 027cb8979b8a
Pin oxygen: fetch checks the host's transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ f1d14bb6ec2b
Pin oxygen with the transparency log library
Andy McCall via agent:claude@andymccall agent ·
◈ 8efb7e14532b
Pin oxygen: grant tokens reach hubs
Andy McCall via agent:claude@andymccall agent ·
✔ 32fbe8980585
Pin oxygen with keyless step 5 (grants, keyless signer)
Andy McCall ·
✔ fc2a6d1817c0
Pin oxygen with keyless step 4c (accepted updates)
Andy McCall ·
✔ ec394f0c115e
Pin oxygen: subject grants and certified pushes
Andy McCall via Claude Code agent ·
✔ af7902eab78a
Keyless step 3, runner: sign receipts with a key the hub certifies per job
Andy McCall via Claude Code agent ·
✔ 35f7a849bcc5
Pin oxygen: receipts may carry a certificate
Andy McCall via Claude Code agent ·
✔ 01ab9ae7e764
Pin oxygen: certificates for short-lived keys
Andy McCall via Claude Code agent ·
✔ 8a6ae1e1c739
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ d65cad6bdeb5
Pin oxygen: cloud stores remember a missing key for 30 s
Andy McCall via Claude Code agent ·
✔ 8f2752bfaa09
Pin oxygen: gc leaves a store that is already one full pack as it is
Andy McCall via Claude Code agent ·
✔ c59b9660678c
Pin oxygen: the log reads its changes in order, a clean diff loads no base
Andy McCall via Claude Code agent ·
✔ 1217af4847ad
Pin oxygen: SLSA receipt export, packed objects read without loose lookups
Andy McCall via Claude Code agent ·
✔ bb58970afb0c
Pin oxygen: strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 93feb1f3061a
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ 0a407108de18
Pin oxygen 24f95a3e: the caching store keeps ranges of large objects
Andy McCall via Claude Code agent ·
✔ 66a7e708b377
Pin oxygen a23729f0: shared cloud store clients
Andy McCall via Claude Code agent ·
✔ 92587de58cef
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Runner: lock fetches per repository, not the whole runner
Andy McCall via Claude Code agent ·
✔ ed4aef8b70ca
Pin oxygen at the approval index (oxygenhub#235)
Andy McCall via Claude Code agent ·
✔ 454b853a8f4a
Sealed approvals: approval { sealed } and the oxygen pin
Andy McCall via Claude Code agent ·
✔ 2be1fe4ad345
Environments: environment "prod" on a job
Andy McCall via Claude Code agent ·
✔ f4e51e63582d
Approval gates in the pipeline: approval { by; others-only; expires }
Andy McCall via Claude Code agent ·
✔ e20897216221
Artifacts between jobs: input { artifact "x" from "job"; path "/src/x" }
Andy McCall via Claude Code agent ·
✔ 46fe2c815cc3
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
Claims say when each build cache was last kept
Andy McCall ·
✔ 1e6b9fb1e73f
older