OXYGENHUB

Changes up to # de4467cb1eca · 436

See as swimlanes (independent work side by side)

Pin oxygen with tags made before a key rotation (oxygen#114)
Andy McCall via Claude Code agent ·
✔ c4027e038d25
docs/transparency.md: the transparency log and trusted time, proposed
Andy McCall via Claude Code agent ·
✔ 6e006eaf1da4
Flow: SLSA provenance for artifacts, in DSSE, that cosign verifies
Andy McCall via Claude Code agent ·
✔ 076c7a7c86b1
Pin oxygenflow 72f171d0 (oxygen 24f95a3e): ranges of large packs cached
Andy McCall via Claude Code agent ·
✔ fb8aafc64f9c
Pin oxygenflow f299e457 (oxygen a23729f0): shared cloud store clients
Andy McCall via Claude Code agent ·
✔ ed3a36b6414c
Assistants: what to do when a proposal is too much for the model
Andy McCall via Claude Code agent ·
✔ c08cec372c81
Flow priorities: site, organisation and repository levels, and expediting a run
Andy McCall via Claude Code agent ·
✔ 107eaba52c9d
Flow: repositories take turns on the runners (fair share)
Andy McCall via Claude Code agent ·
✔ 55673c650986
Runners: Connectivity and Status apart, a heartbeat, a filterable queue
Andy McCall via Claude Code agent ·
✔ e9b9619cd857
Restarts drain: SIGTERM stops taking connections and lets requests finish
Andy McCall via Claude Code agent ·
✔ c92a99490cba
A new hub gives administrator only to whoever brings its setup code
Andy McCall via Claude Code agent ·
✔ c8684d44d549
Postgres, step 3: the hub builds and passes its tests on PostgreSQL
Andy McCall via Claude Code agent ·
✔ 3b1bc27fe805
Postgres, step 2c: inbox threads by window functions, RETURNING, lower()
Andy McCall via Claude Code agent ·
✔ 97b18869acf5
Postgres, step 2b: flags compared as TRUE and FALSE, counted with CASE
Andy McCall via Claude Code agent ·
✔ ea14c4ec5c3f
Postgres, step 2a: ON CONFLICT instead of INSERT OR IGNORE/REPLACE cancel-landed-runsoh-comment-body-filev0.6.0v0.6.1v0.7.0v0.8.0
Andy McCall via Claude Code agent ·
✔ d1bf2d698777
Postgres, step 1: every query numbers its placeholders $1, $2, ...
Andy McCall via Claude Code agent ·
✔ 5d90e0e045e2
Sealed approvals: a gate released only by a signature of the approver's key
Andy McCall via Claude Code agent ·
✔ 47e374020b59
A security contact page; HSTS from [server] hsts_max_age
Andy McCall via Claude Code agent ·
✔ 2cbf6f348595
Live pages L3: the proposal page updates itself
Andy McCall via Claude Code agent ·
✔ b5a0a69b3622
Live: a first comment on the stream so the tunnel sends the headers at once
Andy McCall via Claude Code agent ·
✔ f6529a2fb9db
Live pages L2: GET /live?topics= and the hub.js client
Andy McCall via Claude Code agent ·
✔ 67be8ac00c24
Live pages L1: an event bus of topics, versions and a replay buffer
Andy McCall via Claude Code agent ·
✔ 7e01a7665aa5
Environments: the token names the environment once approved; a Deployments page
Andy McCall via Claude Code agent ·
✔ b644e1757711
Approvers are told; oh run approve and oh run reject
Andy McCall via Claude Code agent ·
✔ dc59d1b56c3d
Approval gates: a job waits for a person with the role
Andy McCall via Claude Code agent ·
✔ 417184c73f4e
Artifacts between jobs: the claim names each input's blob, runners fetch inputs
Andy McCall via Claude Code agent ·
✔ cd437c4f5f8d
Pin oxygenflow at allow-listed egress (oxygenflow#55)
Andy McCall via Claude Code agent ·
✔ c65b0f0a196f
Sign up through an invitation with GitHub, GitLab or Google
Andy McCall via Claude Code agent ·
✔ 3ff52534f69b
The Code panel offers git clone when the Git mirror is on
Andy McCall via Claude Code agent ·
✔ 7b17d570d7ee
Long hashes and state addresses in change titles are shown by their ends
Andy McCall via Claude Code agent ·
✔ 62cdf34daec1
Diffusion reconciler: every 10 minutes the pin index is checked and mended
Andy McCall via Claude Code agent ·
✔ 0e04dfc20211
Diffusion index writes log every failure and try once more
Andy McCall via Claude Code agent ·
✔ 5d54cf746e00
Sessions are server-side records: random ids, expiry, listed and ended per browser
Andy McCall via Claude Code agent ·
✔ 0024ccb1b050
security.txt from a contact set under Administration
Andy McCall via Claude Code agent ·
✔ 3dd6582de060
Security headers on every response; CSP report-only with a report endpoint
Andy McCall via Claude Code agent ·
✔ d74ce22fa80e
Sign-in, 2FA codes, device codes and reset requests slow guessing
Andy McCall via Claude Code agent ·
✔ aa0bfbd11f02
Webhook responses read up to 64 KiB; at most 1000 waiting per hook
Andy McCall via Claude Code agent ·
✔ c98935537c57
Outbound requests only to public addresses
Andy McCall via Claude Code agent ·
✔ 9a777fec4ed9
HTTPS only: nothing taken over plain http through a proxy
Andy McCall via Claude Code agent ·
✔ 9a8e3b4419e0
Flow on your own runners
Andy McCall via Claude Code agent ·
✔ 1870e4fa9808
OxygenHub 0.5.2 v0.5.2
Andy McCall via Claude Code agent ·
✔ 7ebb7052bc7f
Profile pulse: the last 3, 6, 9 or 12 months v0.5.2
Andy McCall via Claude Code agent ·
✔ c0095389312b
Profile pulse: the account's own span, fewer labels, neat chips
Andy McCall via Claude Code agent ·
✔ a2fbad481dd7
Profile: the year as a signal
Andy McCall via Claude Code agent ·
✔ 2a0c09c09716
OxygenHub 0.5.1 v0.5.1
Andy McCall via Claude Code agent ·
✔ 11a2e09d6a69
Sign in with GitLab, and branded sign-in buttons v0.5.1
Andy McCall via Claude Code agent ·
✔ 810896d41be7
Diffusion reads multi-line lists; assistants say why there is no answer v0.5.1v0.5.2
Andy McCall via Claude Code agent ·
✔ 5360cea36c30
Live pages: the design v0.5.1v0.5.2
Andy McCall ·
✔ c0e39717895d
Long hashes show their two ends, the whole in a tip
Andy McCall ·
✔ addec2bd6423
A landed proposal runs its target's pipeline oh-comment-body-filev0.5.1v0.5.2
Andy McCall ·
✔ f7bcee49bf24
newer older