OXYGENHUB

Changes up to # 50354f576ea6 +4 · 169

See as swimlanes (independent work side by side)

50354f576ea675bc2cb06b6da14c4ea3bb3d87494d549ee8c1fd575da87d99ac+a63d3dcd2aef17c39abbf51f2692a4b4c16a8b737a4e18149cc52afd178b7657+c3db750ed96ee23293fcab12bdc9f768f85a79df5841cdb0b82106e1a07f0729+e0918b887850318bed4bbbc69e984e037b20bdff738ad75435012e75be400c40+eb5c4db673e5480f4d5069e905fc1bb1f8cbd722af230f826fdb52bc3418c520 has 5 heads. The graph shows their union; heads are marked.
Pin oxygen with the transparency log library
Andy McCall via agent:claude@andymccall agent ·
◈ 8efb7e14532b
Pin oxygen: grant tokens reach hubs
Andy McCall via agent:claude@andymccall agent ·
✔ 32fbe8980585
Pin oxygen with keyless step 5 (grants, keyless signer)
Andy McCall ·
✔ fc2a6d1817c0
Pin oxygen with keyless step 4c (accepted updates)
Andy McCall ·
✔ ec394f0c115e
Pin oxygen: subject grants and certified pushes
Andy McCall via Claude Code agent ·
✔ af7902eab78a
Keyless step 3, runner: sign receipts with a key the hub certifies per job
Andy McCall via Claude Code agent ·
✔ 35f7a849bcc5
Pin oxygen: receipts may carry a certificate
Andy McCall via Claude Code agent ·
✔ 01ab9ae7e764
Pin oxygen: certificates for short-lived keys
Andy McCall via Claude Code agent ·
✔ 8a6ae1e1c739
pipeline.kdl: priority lowers a job's place in the queue, never raises it v0.2.0v0.3.0v0.3.1
Andy McCall via Claude Code agent ·
✔ e87c1c138187
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ d65cad6bdeb5
Pin oxygen: cloud stores remember a missing key for 30 s
Andy McCall via Claude Code agent ·
✔ 8f2752bfaa09
Pin oxygen: gc leaves a store that is already one full pack as it is
Andy McCall via Claude Code agent ·
✔ c59b9660678c
Pin oxygen: the log reads its changes in order, a clean diff loads no base
Andy McCall via Claude Code agent ·
✔ 1217af4847ad
Pin oxygen: SLSA receipt export, packed objects read without loose lookups
Andy McCall via Claude Code agent ·
✔ bb58970afb0c
Pin oxygen: strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 93feb1f3061a
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ 0a407108de18
Pin oxygen 24f95a3e: the caching store keeps ranges of large objects
Andy McCall via Claude Code agent ·
✔ 66a7e708b377
Pin oxygen a23729f0: shared cloud store clients
Andy McCall via Claude Code agent ·
✔ 92587de58cef
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Runner: lock fetches per repository, not the whole runner
Andy McCall via Claude Code agent ·
✔ ed4aef8b70ca
Pin oxygen at the approval index (oxygenhub#235)
Andy McCall via Claude Code agent ·
✔ 454b853a8f4a
Sealed approvals: approval { sealed } and the oxygen pin
Andy McCall via Claude Code agent ·
✔ 2be1fe4ad345
Environments: environment "prod" on a job
Andy McCall via Claude Code agent ·
✔ f4e51e63582d
Approval gates in the pipeline: approval { by; others-only; expires }
Andy McCall via Claude Code agent ·
✔ e20897216221
Artifacts between jobs: input { artifact "x" from "job"; path "/src/x" }
Andy McCall via Claude Code agent ·
✔ 46fe2c815cc3
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
Claims say when each build cache was last kept
Andy McCall ·
✔ 1e6b9fb1e73f
feat(cache): unchanged sources keep their times; claims list the caches held (closes #52, refs #51)
Andy McCall ·
✔ 82cf6e91d398
feat(runner): restarts cost no job (closes #49, closes #50)
Andy McCall ·
✔ 89171fca079c
A build cache: disk mounts that carry a build forward
Andy McCall ·
✔ d60aac6c3f8a
Pin oxygen with build_pin_change
Andy McCall ·
✔ b262a103bccd
Swarm: TLS between peers, pinned by the hub
Andy McCall ·
✔ ecce3719da80
Jetstream: runners share images peer to peer
Andy McCall ·
✔ b14aeaae683a
A job's finish carries its peak disk and memory newer-pipelinepush-uses-login
Andy McCall ·
✔ 8f211e20bea5
Runners send their facts with every claim: free disk, load, speed
Andy McCall ·
✔ 62829d15ef09
Images by hash: flow rootfs push and pull, and runners fetch what they lack
Andy McCall ·
✔ 4cf0c99a1486
jet: the Jetstream crate, starting with images by hash newer-pipelinepush-uses-login
Andy McCall ·
✔ 59078d2b8d46
Jetstream: the fleet as a service of its own (design)
Andy McCall ·
✔ 2814f4213e7c
Report outputs: a directory with report.toml, uploaded file by file with a manifest newer-pipelinepush-uses-login
Andy McCall ·
✔ 6d53fb7d00ec
Pin oxygen with gc_keeping newer-pipelinepush-uses-login
Andy McCall ·
✔ 39dba8493cb0
Pin oxygen at 0.4.3 (240c72a6)
Andy McCall ·
✔ ba8fb1bbcc0a
Cargo.lock: oxygen's crates at 0.4.2, as the new pin has them
Andy McCall ·
✔ 8f81a19252b1
Pin oxygen at 8e86d728: pushes in parts, lazy state index histories
Andy McCall ·
✔ de5cfe83a0eb
Artifacts: when "always" keeps a failing job's report
Andy McCall ·
✔ 9a6fac2b40a9
Build image: coverage tools; recipe copies any vendor/ newer-pipelinepush-uses-login
Andy McCall ·
✔ fad6152112b1
Pin oxygen: cloud stores inside a runtime
Andy McCall ·
✔ 658872998361
Pin oxygen with stores for repositories; pins checks out
Andy McCall ·
✔ cd008acc4eb2
Spec: runner tiers, declines and waiting reasons as built newer-pipelinepush-uses-login
Andy McCall ·
✔ 630ee66034b2
A runner declines a job it cannot run
Andy McCall ·
✔ b11e30f5031d
The syscall tier: jobs without KVM
Andy McCall ·
✔ ea56c56eaf90
newer older