OXYGENHUB

Changes up to # ca0c443c30cf · 417

See as swimlanes (independent work side by side)

Repository bar: an Artifacts menu and a More menu
Andy McCall via agent:claude@andymccall agent ·
◈ 16ee5d19d220
Metrics: the bytes pushes and fetches carry cancel-landed-runsoh-comment-body-filev0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ 85ec74fd82d8
Metrics: OxygenFlow runs and runners' heartbeats, and mail
Andy McCall via agent:claude@andymccall agent ·
◈ 2c47eecfeab6
/metrics: database pool, pushes and backups (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ a6d824c5ebf5
/metrics: HTTP requests by route class with latency histograms (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ b9b74d997cec
Live L5: the issue page, the overview and Diffusion (closes #207)
Andy McCall via agent:claude@andymccall agent ·
◈ a10446c68043
Live L4: the bell, the inbox and the dashboard (closes #206); /metrics, first slice (refs #212)
Andy McCall via agent:claude@andymccall agent ·
◈ 8a48dd830178
The hub keeps Terraform and OpenTofu state (closes #252)
Andy McCall via agent:claude@andymccall agent ·
◈ 8dcaeeb848c6
Pin oxygen: bucket-backed repositories list their packs once a while
Andy McCall via agent:claude@andymccall agent ·
◈ a2a96bf21455
No inline code in pages, so the CSP can be enforced (#227) cancel-landed-runsoh-comment-body-filev0.6.0
Andy McCall via agent:claude@andymccall agent ·
◈ a7aa76ac52d7
Approvals through an agent token say so (closes #229)
Andy McCall via agent:claude@andymccall agent ·
◈ 05f1a85a2842
Hubs witness each other's transparency logs (step A5)
Andy McCall via agent:claude@andymccall agent ·
◈ 4f40eed0588f
Pin oxygen: a new log key is a note, and oxy tlog verify
Andy McCall via agent:claude@andymccall agent ·
◈ 7dbb41b09a99
Refs answers carry the transparency log (step A3)
Andy McCall via agent:claude@andymccall agent ·
◈ e5b97ac399e7
The hub's transparency log (step 1 of docs/transparency.md)
Andy McCall via agent:claude@andymccall agent ·
◈ 965b950f9b96
Agents push with their grant token
Andy McCall via agent:claude@andymccall agent ·
✔ 559c39204234
Release trust counts receipts by keys this hub certified
Andy McCall via Claude Code agent ·
✔ 244724133fed
Agent grants: agents act for their owner with no key (keyless step 5)
Andy McCall ·
✔ 8aa5ef384ef1
The hub countersigns updates by keys it certified (keyless step 4c)
Andy McCall ·
✔ 3eb491e9489b
Pin oxygen: the hub accepts pushes by certified keys its policies grant
Andy McCall via Claude Code agent ·
✔ a74ba3cb4511
Keyless step 3, hub: receipts signed by a key the hub certified are kept
Andy McCall via Claude Code agent ·
✔ 2c31915f5c89
Keyless step 2: the hub certifies fresh keys for ten minutes
Andy McCall via Claude Code agent ·
✔ 026a76d251ce
A pipeline may lower its jobs' priority, never raise it
Andy McCall via Claude Code agent ·
✔ 53a0fb2e4ac6
Drafts stream into the editor as the assistant writes them
Andy McCall via Claude Code agent ·
✔ 119fd17d213f
Pin oxygen 0.4.4
Andy McCall via Claude Code agent ·
✔ 4cc40ccc6034
transparency.md and keyless.md: accepted, with Andy's decisions
Andy McCall via Claude Code agent ·
✔ 6ba07678ae86
Pin oxygen: a missing object in a bucket is not asked for again for 30 s
Andy McCall via Claude Code agent ·
✔ 7e51c8a2d23c
Pin oxygen: the nightly gc no longer rewrites a repository that is already one pack
Andy McCall via Claude Code agent ·
✔ 6aedcd6c0ad2
docs/keyless.md: short-lived keys from an OIDC identity, proposed
Andy McCall via Claude Code agent ·
✔ 52ae6422e5a1
A stop no longer waits on blocking work past the drain
Andy McCall via Claude Code agent ·
✔ 529c703db24d
Pin oxygen: packed objects are read without asking for a loose copy first
Andy McCall via Claude Code agent ·
✔ 2bae995eb2f1
/health shows cloud store requests by kind
Andy McCall via Claude Code agent ·
✔ a268d4df52bf
Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ c4027e038d25
docs/transparency.md: the transparency log and trusted time, proposed
Andy McCall via Claude Code agent ·
✔ 6e006eaf1da4
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Pin oxygenflow 72f171d0 (oxygen 24f95a3e): ranges of large packs cached
Andy McCall via Claude Code agent ·
✔ fb8aafc64f9c
Pin oxygenflow f299e457 (oxygen a23729f0): shared cloud store clients
Andy McCall via Claude Code agent ·
✔ ed3a36b6414c
Assistants: what to do when a proposal is too much for the model
Andy McCall via Claude Code agent ·
✔ c08cec372c81
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
Flow: repositories take turns on the runners (fair share)
Andy McCall via Claude Code agent ·
✔ 55673c650986
Runners: Connectivity and Status apart, a heartbeat, a filterable queue
Andy McCall via Claude Code agent ·
✔ e9b9619cd857
Restarts drain: SIGTERM stops taking connections and lets requests finish
Andy McCall via Claude Code agent ·
✔ c92a99490cba
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
Postgres, step 2c: inbox threads by window functions, RETURNING, lower()
Andy McCall via Claude Code agent ·
✔ 97b18869acf5
Postgres, step 2b: flags compared as TRUE and FALSE, counted with CASE
Andy McCall via Claude Code agent ·
✔ ea14c4ec5c3f
Postgres, step 1: every query numbers its placeholders $1, $2, ...
Andy McCall via Claude Code agent ·
✔ 5d90e0e045e2
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Live pages L3: the proposal page updates itself
Andy McCall via Claude Code agent ·
✔ b5a0a69b3622
newer older