OXYGENHUB

Changes up to # 18e381ea88c2 +7 · 452

See as swimlanes (independent work side by side)

18e381ea88c294f19fcb8b14534e79555c91d2145018a7ed15b7a5787aa92f2d+439ecd8708a13ffd255537fab186ab2b3f49ef9f6a8684d55b0b294d434d6ab7+456f4197ade3c7be8561d727ed3ce28b309815ebe4a94765062ee3a9fb7575b2+8bb7baeb4557754a8602cf6a0b0ef3e4335ff5a0703e417a53c2e61aaf825036+93be9ce4653e32704c445475b3b3df34b72e8ca28723cb602770522bb7f71bf6+a7e6e8e6094c0a836ddde37499e7b44d64db9db4a3404d871eaa92682aea12c6+b5668108487f12dd7f03ba9c52f7b95f82e8aab92c8c14f75cb949e7398a68c2+e1ec9fbf538eea2cedb1c7ae7b4cb6f4f7a83d1d5b9e310a061892892295f330 has 8 heads. The graph shows their union; heads are marked.
Land Drops (#279) beside the settings pages (#278) resolution
Andy McCall via agent:claude@andymccall agent ·
◈ d366306dae7d
Hub: old clients are not sent tags only a certificate authorizes (refs oxygen#131)
Andy McCall via agent:claude@andymccall agent ·
◈ a0a1601eb5a5
Drops: per-user gists, each a small hidden Oxygen repository (#279)
Andy McCall via agent:claude@andymccall agent ·
◈ 166f6e9bf4f1
Repository settings: one page per setting under a grouped sidebar (#278)
Andy McCall via agent:claude@andymccall agent ·
◈ c7067c7bda56
Land keyless release tags (oxygen#129) and the history scan (#277); pin oxygenflow 84077bcd resolution
Andy McCall via agent:claude@andymccall agent ·
◈ ea55fb62f919
Secret scanning: scan existing history, remove an allowed fingerprint
Andy McCall via agent:claude@andymccall agent ·
◈ cb7b3cd45dc0
Keyless agents' release tags: log and serve a tag's acceptance and log place
Andy McCall via agent:claude@andymccall agent ·
◈ b5c199bd6b1a
Proposal lists without rendering every diff; each file's lines computed once
Andy McCall via agent:claude@andymccall agent ·
◈ 3571c519ada6
OxygenHub and oh 0.6.0 v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 9c04c779f032
Carry events between the hub's processes on an event bus
Andy McCall via agent:claude@andymccall agent ·
◈ 33d98147511b
Run the hub as web and worker processes, singletons under a leader lock
Andy McCall via agent:claude@andymccall agent ·
◈ e57765dee61a
Pin oxygenflow 90a3782c (oxygen e7cb3acb): bucket repositories read entries from a journal (oxygen#116)
Andy McCall via agent:claude@andymccall agent ·
◈ 1c4ad601ef9d
Pin oxygenflow 21114cf3 (oxygen ec1dc9bd: vet_push); push protection in the changelog
Andy McCall via agent:claude@andymccall agent ·
◈ c30444e35f2e
Push protection: refuse a push that adds what looks like a secret v0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 0ee5c3fb32eb
Roles: how one binary runs as several processes (design)
Andy McCall via agent:claude@andymccall agent ·
◈ 6b195ed3b637
Changelog per change: a check in the gate, and Unreleased caught up
Andy McCall via agent:claude@andymccall agent ·
◈ b9eb70fb9509
Pin oxygenflow 355bf9a9 (oxygen 06746594): attestation signers once per operation head
Andy McCall via agent:claude@andymccall agent ·
◈ 0f1727376823
Pin oxygenflow 2b009250 (oxygen ee497ab1): fetches carry attestation signers' identities
Andy McCall via agent:claude@andymccall agent ·
◈ 76fdeedccf44
Newest run wins: a proposal's new run supersedes its older ones
Andy McCall via agent:claude@andymccall agent ·
◈ a9f1c0bf403a
Cancel a landed proposal's runs that have not started cancel-landed-runsv0.6.0v0.6.1
Andy McCall via agent:claude@andymccall agent ·
◈ 2abea30809dd
Trusted time on the hub: serve when witnesses first saw an entry cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 13b27cb2200c
Say why a job waits when the runners that could take it are full cancel-landed-runsv0.6.0v0.6.1v0.7.0
Andy McCall via agent:claude@andymccall agent ·
◈ 58cbf42447bc
Agent tokens decide approval gates only where the repository allows it cancel-landed-runs
Andy McCall via agent:claude@andymccall agent ·
◈ 4a68f1064b08
Land when checks pass
Andy McCall via agent:claude@andymccall agent ·
◈ 86a69b53aff0
Land now, over the checks
Andy McCall via agent:claude@andymccall agent ·
◈ 2a8b621676b4
Readers never wait for a push or gc oh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 7c06f5b28ade
Metrics token and Grafana URL from the environment cancel-landed-runsoh-comment-body-file
Andy McCall via agent:claude@andymccall agent ·
◈ 0843f23ec51c
Insights: OxygenFlow's standard charts, for the site, an owner and a repository
Andy McCall via agent:claude@andymccall agent ·
◈ e97500b70f9a
A filter row's controls: spaced, aligned and wrapping
Andy McCall via agent:claude@andymccall agent ·
◈ 4866be1c9040
Terraform state: list, download and restore kept versions
Andy McCall via agent:claude@andymccall agent ·
◈ 67523e06ed86
Terraform state: reading one needs the write role
Andy McCall via agent:claude@andymccall agent ·
◈ bb018142cca7
Repository bar: an Artifacts menu and a More menu
Andy McCall via agent:claude@andymccall agent ·
◈ 16ee5d19d220
Metrics: the bytes pushes and fetches carry cancel-landed-runsoh-comment-body-filev0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 85ec74fd82d8
Metrics: OxygenFlow runs and runners' heartbeats, and mail
Andy McCall via agent:claude@andymccall agent ·
◈ 2c47eecfeab6
/metrics: database pool, pushes and backups (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ a6d824c5ebf5
/metrics: HTTP requests by route class with latency histograms (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ b9b74d997cec
Live L5: the issue page, the overview and Diffusion (closes #207)
Andy McCall via agent:claude@andymccall agent ·
◈ a10446c68043
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
The hub keeps Terraform and OpenTofu state (closes #252)
Andy McCall via agent:claude@andymccall agent ·
◈ 8dcaeeb848c6
Pin oxygen: bucket-backed repositories list their packs once a while
Andy McCall via agent:claude@andymccall agent ·
◈ a2a96bf21455
No inline code in pages, so the CSP can be enforced (#227) cancel-landed-runsoh-comment-body-filev0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ a7aa76ac52d7
Approvals through an agent token say so (closes #229)
Andy McCall via agent:claude@andymccall agent ·
◈ 05f1a85a2842
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
Pin oxygen: a new log key is a note, and oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 7dbb41b09a99
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Release trust counts receipts by keys this hub certified
Andy McCall via Claude Code agent ·
✔ 244724133fed
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
The hub countersigns updates by keys it certified (keyless step 4c)
Andy McCall ·
✔ 3eb491e9489b
newer older