OXYGENHUB

Changes up to # 4be5e4cd0af6 · 131

See as swimlanes (independent work side by side)

A runner's own metrics (refs #35) head
Andy McCall via agent:claude@andymccall agent ·
◈ 4be5e4cd0af6
Pin oxygen 0.5.1
Andy McCall via agent:claude@andymccall agent ·
◈ 8bf49b95b09e
Pin oxygen: old clients are not sent tags only a certificate authorizes (oxygen#131)
Andy McCall via agent:claude@andymccall agent ·
◈ 33d8ada65f6a
Pin oxygen: keyless agents' release tags (oxygen#129)
Andy McCall via agent:claude@andymccall agent ·
◈ d59bf2389914
Prune build caches before they are kept
Andy McCall via agent:claude@andymccall agent ·
◈ 077a65242359
OxygenFlow 0.2.0, its first tagged release v0.2.0
Andy McCall via agent:claude@andymccall agent ·
◈ da72c3b192c3
Pin oxygen e7cb3acb: bucket stores read signatures and index entries from a journal and entry lists (oxygen#116)
Andy McCall via agent:claude@andymccall agent ·
◈ c2430ac3b728
Pin oxygen ec1dc9bd: Backend::vet_push for hosts (oxygenhub#268)
Andy McCall via agent:claude@andymccall agent ·
◈ 3b1e6c8448ca
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ da5118d25db2
Pin oxygen 06746594: attestation signers computed once per operation head
Andy McCall via agent:claude@andymccall agent ·
◈ eaad903bb266
Build caches for the syscall tier
Andy McCall via agent:claude@andymccall agent ·
◈ 2594278f49b2
Pin oxygen ee497ab1: fetches carry attestation signers' identities
Andy McCall via agent:claude@andymccall agent ·
◈ 749d6e7168b8
Pin oxygen fd97f4c8: trusted time, identical adds unify, marker-like text
Andy McCall via agent:claude@andymccall agent ·
◈ 0f2b8eca36b8
Pin oxygen 89ffcd8d: readers never wait (oxygenhub#249)
Andy McCall via agent:claude@andymccall agent ·
◈ 85998eeba77e
Pin oxygen: no request per pack on open
Andy McCall via agent:claude@andymccall agent ·
◈ 7cbe4369d492
Pin oxygen: listing counters
Andy McCall via agent:claude@andymccall agent ·
◈ c5a3fed29cee
Pin oxygen: pack listings kept a moment
Andy McCall via agent:claude@andymccall agent ·
◈ 35cd8ccb29ea
Pin oxygen with transparency-log witnesses
Andy McCall via agent:claude@andymccall agent ·
◈ af8cf879d4fb
Pin oxygen: a new log key is a note
Andy McCall via agent:claude@andymccall agent ·
◈ 97b9cfeb7d66
Pin oxygen with oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 027cb8979b8a
Pin oxygen: fetch checks the host's transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ f1d14bb6ec2b
Pin oxygen with the transparency log library
Andy McCall via agent:claude@andymccall agent ·
◈ 8efb7e14532b
Pin oxygen: grant tokens reach hubs
Andy McCall via agent:claude@andymccall agent ·
✔ 32fbe8980585
Pin oxygen with keyless step 5 (grants, keyless signer)
Andy McCall ·
✔ fc2a6d1817c0
Pin oxygen with keyless step 4c (accepted updates)
Andy McCall ·
✔ ec394f0c115e
Pin oxygen: subject grants and certified pushes
Andy McCall via Claude Code agent ·
✔ af7902eab78a
Keyless step 3, runner: sign receipts with a key the hub certifies per job
Andy McCall via Claude Code agent ·
✔ 35f7a849bcc5
Pin oxygen: receipts may carry a certificate
Andy McCall via Claude Code agent ·
✔ 01ab9ae7e764
Pin oxygen: certificates for short-lived keys
Andy McCall via Claude Code agent ·
✔ 8a6ae1e1c739
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ d65cad6bdeb5
Pin oxygen: cloud stores remember a missing key for 30 s
Andy McCall via Claude Code agent ·
✔ 8f2752bfaa09
Pin oxygen: gc leaves a store that is already one full pack as it is
Andy McCall via Claude Code agent ·
✔ c59b9660678c
Pin oxygen: the log reads its changes in order, a clean diff loads no base
Andy McCall via Claude Code agent ·
✔ 1217af4847ad
Pin oxygen: SLSA receipt export, packed objects read without loose lookups
Andy McCall via Claude Code agent ·
✔ bb58970afb0c
Pin oxygen: strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 93feb1f3061a
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ 0a407108de18
Pin oxygen 24f95a3e: the caching store keeps ranges of large objects
Andy McCall via Claude Code agent ·
✔ 66a7e708b377
Pin oxygen a23729f0: shared cloud store clients
Andy McCall via Claude Code agent ·
✔ 92587de58cef
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Runner: lock fetches per repository, not the whole runner
Andy McCall via Claude Code agent ·
✔ ed4aef8b70ca
Pin oxygen at the approval index (oxygenhub#235)
Andy McCall via Claude Code agent ·
✔ 454b853a8f4a
Sealed approvals: approval { sealed } and the oxygen pin
Andy McCall via Claude Code agent ·
✔ 2be1fe4ad345
Environments: environment "prod" on a job
Andy McCall via Claude Code agent ·
✔ f4e51e63582d
Approval gates in the pipeline: approval { by; others-only; expires }
Andy McCall via Claude Code agent ·
✔ e20897216221
Artifacts between jobs: input { artifact "x" from "job"; path "/src/x" }
Andy McCall via Claude Code agent ·
✔ 46fe2c815cc3
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
Claims say when each build cache was last kept
Andy McCall ·
✔ 1e6b9fb1e73f
feat(cache): unchanged sources keep their times; claims list the caches held (closes #52, refs #51)
Andy McCall ·
✔ 82cf6e91d398
feat(runner): restarts cost no job (closes #49, closes #50)
Andy McCall ·
✔ 89171fca079c
A build cache: disk mounts that carry a build forward
Andy McCall ·
✔ d60aac6c3f8a
older