OXYGENHUB

Changes up to # 93f445fa50d8 +1 touching crates/hub/tests/flow.rs · 174

See as swimlanes (independent work side by side)

93f445fa50d829625f9666e9f92b352e428b7105d5ce7944d3132902d7da49c8+99ca93d60bca1c23c79d5cdf35bdab6d4c6197831417f512ef58748e22ed87d2 has 2 heads. The graph shows their union; heads are marked.
The hub keeps Terraform and OpenTofu state (closes #252)
Andy McCall via agent:claude@andymccall agent ·
◈ 8dcaeeb848c6
Approvals through an agent token say so (closes #229)
Andy McCall via agent:claude@andymccall agent ·
◈ 05f1a85a2842
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
Pin oxygen: a new log key is a note, and oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 7dbb41b09a99
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Release trust counts receipts by keys this hub certified
Andy McCall via Claude Code agent ·
✔ 244724133fed
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
The hub countersigns updates by keys it certified (keyless step 4c)
Andy McCall ·
✔ 3eb491e9489b
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Flow priorities: an organisation's level, and a cap on expedited runs api-unknown-fieldscancel-landed-runsdiffusion-pin-bookmarkdraft-readyoh-comment-body-fileproposal-list-fastv0.6.0v0.6.1v0.7.0v0.8.0v0.9.0v0.9.1v0.9.2v0.9.3v0.9.4v0.9.5v0.9.6v0.9.7v0.9.8v0.9.9
Andy McCall via Claude Code agent ·
✔ 76f93eaefe45
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
Flow: repositories take turns on the runners (fair share)
Andy McCall via Claude Code agent ·
✔ 55673c650986
Runners: Connectivity and Status apart, a heartbeat, a filterable queue
Andy McCall via Claude Code agent ·
✔ e9b9619cd857
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
Live pages L2: GET /live?topics= and the hub.js client
Andy McCall via Claude Code agent ·
✔ 67be8ac00c24
Live pages L1: an event bus of topics, versions and a replay buffer
Andy McCall via Claude Code agent ·
✔ 7e01a7665aa5
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approvers are told; oh run approve and oh run reject
Andy McCall via Claude Code agent ·
✔ dc59d1b56c3d
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
Artifacts between jobs: the claim names each input's blob, runners fetch inputs
Andy McCall via Claude Code agent ·
✔ cd437c4f5f8d
Long hashes and state addresses in change titles are shown by their ends
Andy McCall via Claude Code agent ·
✔ 62cdf34daec1
Diffusion reconciler: every 10 minutes the pin index is checked and mended
Andy McCall via Claude Code agent ·
✔ 0e04dfc20211
Diffusion index writes log every failure and try once more
Andy McCall via Claude Code agent ·
✔ 5d54cf746e00
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Flow on your own runners
Andy McCall via Claude Code agent ·
✔ 1870e4fa9808
A landed proposal runs its target's pipeline oh-comment-body-filev0.5.1v0.5.2
Andy McCall ·
✔ f7bcee49bf24
Notifications that reach you, and 2FA without the password twice
Andy McCall ·
✔ bff9106edcba
Alerts: a failed run tells its pusher and watchers; an erroring runner is drained
Andy McCall ·
✔ 4a4400c5812d
Rerun one job of a run, with what depends on it
Andy McCall ·
✔ e8fa53694f68
Of two runners holding a job's build cache, the fresher copy wins v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ c2be148cfe83
Diffusion lands a bump itself where a repository chose it
Andy McCall ·
✔ f4d6ef418a96
The hub reads what each image is for, and learns the rest from passes
Andy McCall ·
✔ 93501da2a162
feat(web): the mark, ripples, the swarm and adrift (closes #167)
Andy McCall ·
✔ 6246d1e51f4f
feat(flow): jobs go where their build cache is (refs andymccall/oxygenflow#51)
Andy McCall ·
✔ 4fa0da126b70
feat(api): GET /repos/{o}/{n}/diffusion, both directions with their pills (closes #153)
Andy McCall ·
✔ eb2a3502601d
feat(web): sidebar cards, a shaded tree head, icons, aligned Diffusion tables (closes #152)
Andy McCall ·
✔ c9aacc0e7dc1
When a proposal's target moves, its new projected state is run
Andy McCall ·
✔ d943160dafeb
Diffusion: a bump's run reads the upstream it bumps
Andy McCall ·
✔ 180dc43ad0e0
Diffusion: see it, and landing refreshes the pin index
Andy McCall ·
✔ 757195ad7a5d
Diffusion: flag upstream changes that touch what a game watches close-proposal-140
Andy McCall ·
✔ c4e432da4bc9
Diffusion: an upstream without checks is amber, not green
Andy McCall ·
✔ 9aaa88b2d9c8
Diffusion: a bump's pipeline runs
Andy McCall ·
✔ f01cb865fc60
Diffusion: keep a pin's own changes when moving it
Andy McCall ·
✔ 7a14bdaeb857
newer older