OXYGENHUB

Changes up to # b9eb70fb9509 touching deps/oxygenflow · 77

See as swimlanes (independent work side by side)

The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
The hub countersigns updates by keys it certified (keyless step 4c)
Andy McCall ·
✔ 3eb491e9489b
Pin oxygen: the hub accepts pushes by certified keys its policies grant
Andy McCall via Claude Code agent ·
✔ a74ba3cb4511
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ 4cc40ccc6034
Pin oxygen: a missing object in a bucket is not asked for again for 30 s
Andy McCall via Claude Code agent ·
✔ 7e51c8a2d23c
Pin oxygen: the nightly gc no longer rewrites a repository that is already one pack
Andy McCall via Claude Code agent ·
✔ 6aedcd6c0ad2
A stop no longer waits on blocking work past the drain
Andy McCall via Claude Code agent ·
✔ 529c703db24d
Pin oxygen: packed objects are read without asking for a loose copy first
Andy McCall via Claude Code agent ·
✔ 2bae995eb2f1
/health shows cloud store requests by kind
Andy McCall via Claude Code agent ·
✔ a268d4df52bf
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ c4027e038d25
Pin oxygenflow 72f171d0 (oxygen 24f95a3e): ranges of large packs cached
Andy McCall via Claude Code agent ·
✔ fb8aafc64f9c
Pin oxygenflow f299e457 (oxygen a23729f0): shared cloud store clients
Andy McCall via Claude Code agent ·
✔ ed3a36b6414c
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
Artifacts between jobs: the claim names each input's blob, runners fetch inputs
Andy McCall via Claude Code agent ·
✔ cd437c4f5f8d
Pin oxygenflow at allow-listed egress (oxygenflow#55)
Andy McCall via Claude Code agent ·
✔ c65b0f0a196f
Of two runners holding a job's build cache, the fresher copy wins v0.5.0v0.5.1v0.5.2
Andy McCall ·
✔ c2be148cfe83
The hub reads what each image is for, and learns the rest from passes
Andy McCall ·
✔ 93501da2a162
feat(flow): jobs go where their build cache is (refs andymccall/oxygenflow#51)
Andy McCall ·
✔ 4fa0da126b70
Pin OxygenFlow with the build cache
Andy McCall ·
✔ e5acd2a2ceb5
Diffusion: the bump
Andy McCall ·
✔ 1d634f698ecd
Swarm: the tracker passes on each peer's certificate fingerprint
Andy McCall ·
✔ 6adcd68b90b1
Jetstream: the swarm's tracker and peer tickets
Andy McCall ·
✔ a46d15e72101
Requirements learned from each job's past runs
Andy McCall ·
✔ 44a3d2ebaddd
Runners' facts kept from their claims and shown
Andy McCall ·
✔ 2fb70d019851
Images by hash on the hub: chunks, verified manifests, and placement for runners that fetch
Andy McCall ·
✔ 92a797b20912
Reports: keep a job's report file by file, index its declaration, metrics and files job-waitsrun-one-jobwiki-says-so
Andy McCall ·
✔ a36bab6b9ffc
The nightly gc keeps Flow's artifacts
Andy McCall ·
✔ 4597750166e7
Release 0.4.1; pin oxygenflow fe71c8eb (oxygen 0.4.3) v0.4.1
Andy McCall ·
✔ 8aafd2023dec
Take pushes in parts; pin oxygenflow d2e5e11a (oxygen 8e86d728)
Andy McCall ·
✔ 4bae285c6ed8
Pin oxygenflow 08d0082d: artifacts when "always"
Andy McCall ·
✔ 336c953a020f
A repository can live in its owner's bucket
Andy McCall ·
✔ 1f78655a0466
Runners decline, and the queue says why a job waits
Andy McCall ·
✔ 4d2e44d79b03
Jobs go to runners of the right architecture
Andy McCall ·
✔ efd29a0033e8
A job's identity: the hub is an OIDC issuer
Andy McCall ·
✔ d1727c573f30
Secrets for pipelines, mounted as files
Andy McCall ·
✔ 4ac01a732552
Variables for pipelines at the site, organisation and repository
Andy McCall ·
✔ 2a83f5303458
Release 0.4.0, pinning oxygen 0.4.0 v0.4.0
Andy McCall ·
✔ a6c241e8eba0
Who did the work: via AGENT, rotated identities link themselves, a Flow badge
Andy McCall ·
✔ 8933faff2043
History API takes a revset: ?r=
Andy McCall ·
✔ f28389bd6aab
Pin oxygen main: scoped delegates; the hub needs changes and refs
Andy McCall ·
✔ b43a9ab0498f
The hub garbage-collects every repository nightly
Andy McCall ·
✔ 8a3334b7a364
Scheduled runs: on { schedule } jobs start on the default bookmark when due v0.3.1
Andy McCall ·
✔ 348f8c4baccf
Runs by event: on decides the jobs; tag pushes run tag jobs
Andy McCall ·
✔ c889911bec12
older