OXYGENHUB

Changes up to # fa963b1b7eb6 · 147

See as swimlanes (independent work side by side)

The x86_64 seccomp block builds for Android too (refs oxygenhub-android#8) mainv0.4.0v0.5.0v0.5.1v0.5.2v0.5.3 head
Andy McCall via agent:claude@andymccall agent ·
◈ fa963b1b7eb6
The runner as a library, with the WASM tier in process, for the phone (refs oxygenhub-android#8)
Andy McCall via agent:claude@andymccall agent ·
◈ 5cf1e8aefbb6
The WASM tier: WASI modules run by wasmtime on any runner (closes #75)
Andy McCall via agent:claude@andymccall agent ·
◈ 28cc603f737d
Handover: jobs that outlive their runner (design; refs #75 #76 #77 #78 #79 #80)
Andy McCall via agent:claude@andymccall agent ·
◈ 39e737fbc7a9
OxygenFlow 0.3.1: pins oxy 0.6.0 v0.3.1
Andy McCall via agent:claude@andymccall agent ·
◈ 1408324d5d55
Pin oxygen with tag withdrawal and grants that survive a rotation (oxygenhub#301, oxygen#135)
Andy McCall via agent:claude@andymccall agent ·
◈ 42c8e2f4219f
Pin oxygen with keyless agents' grant signers carried (oxygen#134)
Andy McCall via agent:claude@andymccall agent ·
◈ 9ff1fb9f2865
OxygenFlow 0.3.0 v0.3.0
Andy McCall via agent:claude@andymccall agent ·
◈ 6a2d31568cf2
A runner's own metrics (refs #35)
Andy McCall via agent:claude@andymccall agent ·
◈ 4be5e4cd0af6
Pin oxygen 0.5.1
Andy McCall via agent:claude@andymccall agent ·
◈ 8bf49b95b09e
Pin oxygen: old clients are not sent tags only a certificate authorizes (oxygen#131)
Andy McCall via agent:claude@andymccall agent ·
◈ 33d8ada65f6a
Pin oxygen: keyless agents' release tags (oxygen#129)
Andy McCall via agent:claude@andymccall agent ·
◈ d59bf2389914
Prune build caches before they are kept
Andy McCall via agent:claude@andymccall agent ·
◈ 077a65242359
OxygenFlow 0.2.0, its first tagged release v0.2.0
Andy McCall via agent:claude@andymccall agent ·
◈ da72c3b192c3
Pin oxygen e7cb3acb: bucket stores read signatures and index entries from a journal and entry lists (oxygen#116)
Andy McCall via agent:claude@andymccall agent ·
◈ c2430ac3b728
Pin oxygen ec1dc9bd: Backend::vet_push for hosts (oxygenhub#268)
Andy McCall via agent:claude@andymccall agent ·
◈ 3b1e6c8448ca
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ da5118d25db2
Pin oxygen 06746594: attestation signers computed once per operation head
Andy McCall via agent:claude@andymccall agent ·
◈ eaad903bb266
Build caches for the syscall tier
Andy McCall via agent:claude@andymccall agent ·
◈ 2594278f49b2
Pin oxygen ee497ab1: fetches carry attestation signers' identities
Andy McCall via agent:claude@andymccall agent ·
◈ 749d6e7168b8
Pin oxygen fd97f4c8: trusted time, identical adds unify, marker-like text
Andy McCall via agent:claude@andymccall agent ·
◈ 0f2b8eca36b8
Pin oxygen 89ffcd8d: readers never wait (oxygenhub#249)
Andy McCall via agent:claude@andymccall agent ·
◈ 85998eeba77e
Pin oxygen: no request per pack on open
Andy McCall via agent:claude@andymccall agent ·
◈ 7cbe4369d492
Pin oxygen: listing counters
Andy McCall via agent:claude@andymccall agent ·
◈ c5a3fed29cee
Pin oxygen: pack listings kept a moment
Andy McCall via agent:claude@andymccall agent ·
◈ 35cd8ccb29ea
Pin oxygen with transparency-log witnesses
Andy McCall via agent:claude@andymccall agent ·
◈ af8cf879d4fb
Pin oxygen: a new log key is a note
Andy McCall via agent:claude@andymccall agent ·
◈ 97b9cfeb7d66
Pin oxygen with oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 027cb8979b8a
Pin oxygen: fetch checks the host's transparency log
Andy McCall via agent:claude@andymccall agent ·
◈ f1d14bb6ec2b
Pin oxygen with the transparency log library
Andy McCall via agent:claude@andymccall agent ·
◈ 8efb7e14532b
Pin oxygen: grant tokens reach hubs
Andy McCall via agent:claude@andymccall agent ·
✔ 32fbe8980585
Pin oxygen with keyless step 5 (grants, keyless signer)
Andy McCall ·
✔ fc2a6d1817c0
Pin oxygen with keyless step 4c (accepted updates)
Andy McCall ·
✔ ec394f0c115e
Pin oxygen: subject grants and certified pushes
Andy McCall via Claude Code agent ·
✔ af7902eab78a
Keyless step 3, runner: sign receipts with a key the hub certifies per job
Andy McCall via Claude Code agent ·
✔ 35f7a849bcc5
Pin oxygen: receipts may carry a certificate
Andy McCall via Claude Code agent ·
✔ 01ab9ae7e764
Pin oxygen: certificates for short-lived keys
Andy McCall via Claude Code agent ·
✔ 8a6ae1e1c739
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ d65cad6bdeb5
Pin oxygen: cloud stores remember a missing key for 30 s
Andy McCall via Claude Code agent ·
✔ 8f2752bfaa09
Pin oxygen: gc leaves a store that is already one full pack as it is
Andy McCall via Claude Code agent ·
✔ c59b9660678c
Pin oxygen: the log reads its changes in order, a clean diff loads no base
Andy McCall via Claude Code agent ·
✔ 1217af4847ad
Pin oxygen: SLSA receipt export, packed objects read without loose lookups
Andy McCall via Claude Code agent ·
✔ bb58970afb0c
Pin oxygen: strata counts its requests by kind
Andy McCall via Claude Code agent ·
✔ 93feb1f3061a
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ 0a407108de18
Pin oxygen 24f95a3e: the caching store keeps ranges of large objects
Andy McCall via Claude Code agent ·
✔ 66a7e708b377
Pin oxygen a23729f0: shared cloud store clients
Andy McCall via Claude Code agent ·
✔ 92587de58cef
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Runner: lock fetches per repository, not the whole runner
Andy McCall via Claude Code agent ·
✔ ed4aef8b70ca
Pin oxygen at the approval index (oxygenhub#235)
Andy McCall via Claude Code agent ·
✔ 454b853a8f4a
Sealed approvals: approval { sealed } and the oxygen pin
Andy McCall via Claude Code agent ·
✔ 2be1fe4ad345
older