OXYGENHUB

Changes up to # 0ee5c3fb32eb touching docs/spec.md · 151

See as swimlanes (independent work side by side)

Push protection: refuse a push that adds what looks like a secret v0.6.0 head
Andy McCall via agent:claude@andymccall agent ·
◈ 0ee5c3fb32eb
Newest run wins: a proposal's new run supersedes its older ones
Andy McCall via agent:claude@andymccall agent ·
◈ a9f1c0bf403a
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Alerts: a failed run tells its pusher and watchers; an erroring runner is drained
Andy McCall ·
✔ 4a4400c5812d
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Of two runners holding a job's build cache, the fresher copy wins v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ c2be148cfe83
Diffusion lands a bump itself where a repository chose it
Andy McCall ·
✔ f4d6ef418a96
The hub reads what each image is for, and learns the rest from passes
Andy McCall ·
✔ 93501da2a162
feat: keyless GCS backups, and TEST (closes #169)
Andy McCall ·
✔ 35fea4237cc9
feat: backups for users and organisations, to a directory, with restore (refs #169)
Andy McCall ·
✔ d7d182467382
docs: backups per site, organisation, user and repository, designed (refs #169)
Andy McCall ·
✔ 6dbd999ad794
feat(flow): jobs go where their build cache is (refs andymccall/oxygenflow#51)
Andy McCall ·
✔ 4fa0da126b70
feat(api): GET /repos/{o}/{n}/diffusion, both directions with their pills (closes #153)
Andy McCall ·
✔ eb2a3502601d
When a proposal's target moves, its new projected state is run
Andy McCall ·
✔ d943160dafeb
Issues close from changes landing on the default bookmark, however they arrive
Andy McCall ·
✔ acc85ac0f70b
Diffusion: a two-half pill, upstream and downstream
Andy McCall ·
✔ 73ef9f767132
Diffusion: a bump's run reads the upstream it bumps
Andy McCall ·
✔ 180dc43ad0e0
Diffusion: see it, and landing refreshes the pin index
Andy McCall ·
✔ 757195ad7a5d
Diffusion: flag upstream changes that touch what a game watches close-proposal-140
Andy McCall ·
✔ c4e432da4bc9
Close and reopen a proposal through the API and oh close-proposal-140
Andy McCall ·
✔ 71e65fcf95ab
Diffusion: an upstream without checks is amber, not green
Andy McCall ·
✔ 9aaa88b2d9c8
Diffusion: keep a pin's own changes when moving it
Andy McCall ·
✔ 7a14bdaeb857
Diffusion: turning it on catches a consumer up
Andy McCall ·
✔ 3776b70d9b17
Diffusion: the proposal and its trigger
Andy McCall ·
✔ a7e6e8e6094c
Diffusion: the bump
Andy McCall ·
✔ 1d634f698ecd
Diffusion: turning it on
Andy McCall ·
✔ e71583501b1d
Diffusion: the reverse pin index, Used by, and how far behind
Andy McCall ·
✔ f677d6270298
Admin › Runners › Images: what images are where
Andy McCall ·
✔ 6ca0b971ff07
Keep bookmark briefs across restarts, and log slow requests
Andy McCall ·
✔ 39442b000e6b
Swarm: the tracker passes on each peer's certificate fingerprint
Andy McCall ·
✔ 6adcd68b90b1
Jetstream: the swarm's tracker and peer tickets
Andy McCall ·
✔ a46d15e72101
Flow: a pipeline pinning an image nobody holds fails a check image-check
Andy McCall ·
✔ 1c8276b90314
Placement ranks runners and says why a job ran where it did
Andy McCall ·
✔ 501d8b268dd4
Requirements learned from each job's past runs
Andy McCall ·
✔ 44a3d2ebaddd
Runners' facts kept from their claims and shown
Andy McCall ·
✔ 2fb70d019851
Coverage from a workstation: oh coverage upload, shown as uploaded v0.4.2
Andy McCall ·
✔ 40dd3f86379a
Images by hash on the hub: chunks, verified manifests, and placement for runners that fetch
Andy McCall ·
✔ 92a797b20912
Flow: say why a queued job waits, in oh and its check job-waitswiki-says-so
Andy McCall ·
✔ 67040b158ae2
older