OXYGENHUB

Changes up to # e6949d87205b · 162

See as swimlanes (independent work side by side)

Pin oxygen: certificates for short-lived keys
Andy McCall via Claude Code agent ·
✔ 8a6ae1e1c739
pipeline.kdl: priority lowers a job's place in the queue, never raises it v0.2.0v0.3.0v0.3.1
Andy McCall via Claude Code agent ·
✔ e87c1c138187
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ d65cad6bdeb5
Pin oxygen: cloud stores remember a missing key for 30 s
Andy McCall via Claude Code agent ·
✔ 8f2752bfaa09
Pin oxygen: gc leaves a store that is already one full pack as it is
Andy McCall via Claude Code agent ·
✔ c59b9660678c
Pin oxygen: the log reads its changes in order, a clean diff loads no base
Andy McCall via Claude Code agent ·
✔ 1217af4847ad
Pin oxygen: SLSA receipt export, packed objects read without loose lookups
Andy McCall via Claude Code agent ·
✔ bb58970afb0c
Pin oxygen: strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 93feb1f3061a
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ 0a407108de18
Pin oxygen 24f95a3e: the caching store keeps ranges of large objects
Andy McCall via Claude Code agent ·
✔ 66a7e708b377
Pin oxygen a23729f0: shared cloud store clients
Andy McCall via Claude Code agent ·
✔ 92587de58cef
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Runner: lock fetches per repository, not the whole runner
Andy McCall via Claude Code agent ·
✔ ed4aef8b70ca
Pin oxygen at the approval index (oxygenhub#235)
Andy McCall via Claude Code agent ·
✔ 454b853a8f4a
Sealed approvals: approval { sealed } and the oxygen pin
Andy McCall via Claude Code agent ·
✔ 2be1fe4ad345
Environments: environment "prod" on a job
Andy McCall via Claude Code agent ·
✔ f4e51e63582d
Approval gates in the pipeline: approval { by; others-only; expires }
Andy McCall via Claude Code agent ·
✔ e20897216221
Artifacts between jobs: input { artifact "x" from "job"; path "/src/x" }
Andy McCall via Claude Code agent ·
✔ 46fe2c815cc3
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
Claims say when each build cache was last kept
Andy McCall ·
✔ 1e6b9fb1e73f
feat(cache): unchanged sources keep their times; claims list the caches held (closes #52, refs #51)
Andy McCall ·
✔ 82cf6e91d398
feat(runner): restarts cost no job (closes #49, closes #50)
Andy McCall ·
✔ 89171fca079c
A build cache: disk mounts that carry a build forward
Andy McCall ·
✔ d60aac6c3f8a
Pin oxygen with build_pin_change
Andy McCall ·
✔ b262a103bccd
Swarm: TLS between peers, pinned by the hub
Andy McCall ·
✔ ecce3719da80
Jetstream: runners share images peer to peer
Andy McCall ·
✔ b14aeaae683a
A job's finish carries its peak disk and memory newer-pipelinepush-uses-login
Andy McCall ·
✔ 8f211e20bea5
Runners send their facts with every claim: free disk, load, speed
Andy McCall ·
✔ 62829d15ef09
Images by hash: flow rootfs push and pull, and runners fetch what they lack
Andy McCall ·
✔ 4cf0c99a1486
jet: the Jetstream crate, starting with images by hash newer-pipelinepush-uses-login
Andy McCall ·
✔ 59078d2b8d46
Jetstream: the fleet as a service of its own (design)
Andy McCall ·
✔ 2814f4213e7c
Report outputs: a directory with report.toml, uploaded file by file with a manifest newer-pipelinepush-uses-login
Andy McCall ·
✔ 6d53fb7d00ec
Pin oxygen with gc_keeping newer-pipelinepush-uses-login
Andy McCall ·
✔ 39dba8493cb0
Pin oxygen at 0.4.3 (240c72a6)
Andy McCall ·
✔ ba8fb1bbcc0a
Cargo.lock: oxygen's crates at 0.4.2, as the new pin has them
Andy McCall ·
✔ 8f81a19252b1
Pin oxygen at 8e86d728: pushes in parts, lazy state index histories
Andy McCall ·
✔ de5cfe83a0eb
Artifacts: when "always" keeps a failing job's report
Andy McCall ·
✔ 9a6fac2b40a9
Build image: coverage tools; recipe copies any vendor/ newer-pipelinepush-uses-login
Andy McCall ·
✔ fad6152112b1
Pin oxygen: cloud stores inside a runtime
Andy McCall ·
✔ 658872998361
Pin oxygen with stores for repositories; pins checks out
Andy McCall ·
✔ cd008acc4eb2
Spec: runner tiers, declines and waiting reasons as built newer-pipelinepush-uses-login
Andy McCall ·
✔ 630ee66034b2
A runner declines a job it cannot run
Andy McCall ·
✔ b11e30f5031d
The syscall tier: jobs without KVM
Andy McCall ·
✔ ea56c56eaf90
A runner offers only the tiers it can run
Andy McCall ·
✔ c5b702e59c1f
A runner tries a fetch again after a network hiccup
Andy McCall ·
✔ f53e6d47b56a
Architecture awareness: image manifests, arch on a sandbox, archs on the claim
Andy McCall ·
✔ 1abadd4a2fa6
A job's identity: identity blocks name an audience and a mount path
Andy McCall ·
✔ 720eb8191059
Spec §11: runner capabilities and placement
Andy McCall ·
✔ fd2d4822f7f3
Secrets mount as files: secret blocks, the claim's secrets, flow-init writes them
Andy McCall ·
✔ e2c125610f43
A claim carries the hub's variables for the job
Andy McCall ·
✔ c58efc6a74db
newer older