OXYGENHUB

Changes up to # 041a945f55f8 +4 touching deps/oxygenflow · 108

See as swimlanes (independent work side by side)

041a945f55f82634df6a9c5f2c75e604185da16f01eb5369b4a2b25b047b8956+08e221b776581dd09db3b37c9d3360be6bf420dc197b878a3581dde4d661b63d+101740454617cd6966001ebd9d7f9f8bc566ca6766325e2f9137f3a9d19220dd+206c1fc1b06a90b3388b36ad52ef832b9ba9e24ab182773e44022baf4c7c27bb+b5668108487f12dd7f03ba9c52f7b95f82e8aab92c8c14f75cb949e7398a68c2 has 5 heads. The graph shows their union; heads are marked.
Phone alerts: a phone registers its Cloud Messaging token and key (PUT /api/v1/user/push), and each notification its account is told goes to it sealed to that key, sent keyless as the VM's service account; pins OxygenFlow main (refs oxygenhub-android#16)
Andy McCall via agent:claude@andymccall agent ·
◈ aeed63c00ad7
Pin OxygenFlow 0.5.0 (oxy-core 0.8.0) v0.9.9
Andy McCall via agent:claude@andymccall agent ·
◈ 12325e1b1020
Enforce the Content Security Policy (closes #227); show where a job's time went (refs oxygenflow#35); a Diffusion test waits up to 30 s
Andy McCall via agent:claude@andymccall agent ·
◈ 0468394734e9
Peer-held images: the hub keeps runners' manifests of images it lacks and places their jobs where a peer in the site holds them (closes #342; pins OxygenFlow #94)
Andy McCall via agent:claude@andymccall agent ·
◈ 951aed50c2f5
A push to a landed proposal's bookmark says so; its page lists the changes since landing (closes #329); pin OxygenFlow main (oxygen's push_notes)
Andy McCall via agent:claude@andymccall agent ·
◈ 668b2ad7495c
Certificates name the grant owner's newest identity (refs andymccall/oxygen#82)
Andy McCall via agent:claude@andymccall agent ·
◈ 27babfa16580
A proposal whose only conflicts are union adjacent insertions lands with their resolution (closes andymccall/oxygen#145)
Andy McCall via agent:claude@andymccall agent ·
◈ dd0788b756f2
Runner updates: policy, test groups and the offer
Andy McCall ·
◈ 8501fd5815b9
Checkpoints, so a handed-back job resumes (refs andymccall/oxygenflow#77) v0.9.4v0.9.5
Andy McCall via agent:claude@andymccall agent ·
◈ e4203e141e90
Claims say how long a job is expected to take (refs andymccall/oxygenflow#76)
Andy McCall via agent:claude@andymccall agent ·
◈ 3b65065298b7
Pin OxygenFlow's main: pipelines may use the WASM tier (refs oxygenflow#75) draft-readyv0.9.1v0.9.2v0.9.3
Andy McCall via agent:claude@andymccall agent ·
◈ 80642fde09cc
OxygenHub 0.8.0: pins OxygenFlow 0.3.1 and oxy 0.6.0 v0.8.0
Andy McCall via agent:claude@andymccall agent ·
◈ 69e4f27c5633
Create and withdraw tags on the website (closes #295, closes #301)
Andy McCall via agent:claude@andymccall agent ·
◈ ba0a55bb5b3c
Send a keyless agent's grant signer with its certificate (oxygen#134)
Andy McCall via agent:claude@andymccall agent ·
◈ a66c05a6a881
OxygenHub 0.7.0 v0.7.0
Andy McCall via agent:claude@andymccall agent ·
◈ ab2d8b40f9f4
OxygenHub 0.6.1 v0.6.1
Andy McCall via agent:claude@andymccall agent ·
◈ a549ddd5941f
Old clients are not sent tags only a certificate authorizes (oxygen#131); pin oxygenflow dfc340b4 resolution
Andy McCall via agent:claude@andymccall agent ·
◈ 4c77a1c8aad8
Land keyless release tags (oxygen#129) and the history scan (#277); pin oxygenflow 84077bcd resolution
Andy McCall via agent:claude@andymccall agent ·
◈ ea55fb62f919
OxygenHub and oh 0.6.0 v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 9c04c779f032
Pin oxygenflow 90a3782c (oxygen e7cb3acb): bucket repositories read entries from a journal (oxygen#116)
Andy McCall via agent:claude@andymccall agent ·
◈ 1c4ad601ef9d
Pin oxygenflow 21114cf3 (oxygen ec1dc9bd: vet_push); push protection in the changelog
Andy McCall via agent:claude@andymccall agent ·
◈ c30444e35f2e
Pin oxygenflow 355bf9a9 (oxygen 06746594): attestation signers once per operation head
Andy McCall via agent:claude@andymccall agent ·
◈ 0f1727376823
Pin oxygenflow 2b009250 (oxygen ee497ab1): fetches carry attestation signers' identities
Andy McCall via agent:claude@andymccall agent ·
◈ 76fdeedccf44
Trusted time on the hub: serve when witnesses first saw an entry cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 13b27cb2200c
Readers never wait for a push or gc oh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 7c06f5b28ade
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
The hub keeps Terraform and OpenTofu state (closes #252)
Andy McCall via agent:claude@andymccall agent ·
◈ 8dcaeeb848c6
Pin oxygen: bucket-backed repositories list their packs once a while
Andy McCall via agent:claude@andymccall agent ·
◈ a2a96bf21455
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
Pin oxygen: a new log key is a note, and oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 7dbb41b09a99
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
The hub countersigns updates by keys it certified (keyless step 4c)
Andy McCall ·
✔ 3eb491e9489b
Pin oxygen: the hub accepts pushes by certified keys its policies grant
Andy McCall via Claude Code agent ·
✔ a74ba3cb4511
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ 4cc40ccc6034
Pin oxygen: a missing object in a bucket is not asked for again for 30 s
Andy McCall via Claude Code agent ·
✔ 7e51c8a2d23c
Pin oxygen: the nightly gc no longer rewrites a repository that is already one pack
Andy McCall via Claude Code agent ·
✔ 6aedcd6c0ad2
A stop no longer waits on blocking work past the drain
Andy McCall via Claude Code agent ·
✔ 529c703db24d
Pin oxygen: packed objects are read without asking for a loose copy first
Andy McCall via Claude Code agent ·
✔ 2bae995eb2f1
/health shows cloud store requests by kind
Andy McCall via Claude Code agent ·
✔ a268d4df52bf
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ c4027e038d25
Pin oxygenflow 72f171d0 (oxygen 24f95a3e): ranges of large packs cached
Andy McCall via Claude Code agent ·
✔ fb8aafc64f9c
Pin oxygenflow f299e457 (oxygen a23729f0): shared cloud store clients
Andy McCall via Claude Code agent ·
✔ ed3a36b6414c
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
older