754505d40a
fix(admin): preserve revoked owners and 503 status
...
Owner recovery lived in the identity-only migration path and could clear historical revocations on conflict. Admin layout also rethrew authorization 503s, turning service-unavailable failures into 500 responses.\n\nMove recovery behind the RBAC migration sequence, exclude revoked candidates without mutating their history, and terminate layout redirects at a no-store 503 route.
2026-08-07 11:33:48 +08:00
0d7e5a26d5
fix(admin): break denied-session redirect loop
...
Preserve 403/503 responses instead of redirecting them through the Caddy root, and recover Owner only for the sole loginable synced identity admin.
2026-08-07 11:06:13 +08:00
jesse
ae41b3aef5
Merge pull request 'Clarify staging report auth smoke' ( #26 )
...
Staging Backend Quality Gate / validate (push) Successful in 14m6s
Staging Backend Quality Gate / publish (push) Successful in 15m38s
Merge docs-only correction matching the deployed route contract.
2026-08-07 02:34:28 +08:00
aebd1b56c9
docs(staging): clarify report auth smoke
2026-08-07 02:33:55 +08:00
jesse
8099091e43
Merge pull request 'Close staging exact-SHA release acceptance' ( #25 )
...
Merge docs-only staging acceptance closure after successful gate 1525, migration 1516, deploy 1526, and post-deploy audit.
2026-08-07 02:32:03 +08:00
91a39f2528
docs(staging): close exact-SHA release acceptance
2026-08-07 02:30:59 +08:00
jesse
6c1dcbe857
Merge pull request 'Refresh staging dual-host edge verification' ( #24 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m23s
Staging Backend Quality Gate / publish (push) Successful in 2m6s
Merge reviewed Caddy bind refresh and dual-host verification fix after successful PR gate 1523.
2026-08-07 02:05:38 +08:00
e718b2c6d9
fix(staging): refresh dual-host edge verification
Staging Backend Quality Gate / validate (pull_request) Successful in 17m22s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 01:46:47 +08:00
jesse
28f4207f29
Merge pull request 'Wait for staging public release identity' ( #23 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m21s
Staging Backend Quality Gate / publish (push) Successful in 3m33s
Merge reviewed bounded staging public identity convergence fix after successful PR gate 1519.
2026-08-07 01:22:04 +08:00
3221b6a9a4
fix(staging): await public release identity
Staging Backend Quality Gate / validate (pull_request) Successful in 13m57s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 01:07:08 +08:00
jesse
8dc61e3135
Merge pull request 'Bound staging quality gate frontend build' ( #22 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m4s
Staging Backend Quality Gate / publish (push) Successful in 2m7s
Merge reviewed fail-closed staging gate timeout after successful exact-head PR validation run 1511.
2026-08-07 00:32:23 +08:00
f145f52b01
fix(staging): bound frontend quality build
Staging Backend Quality Gate / validate (pull_request) Successful in 11m6s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 00:06:45 +08:00
jesse
6fd2292119
Merge pull request 'Restore staging gate after concurrent admin rollout' ( #21 ) from fix/staging-gate-retry-and-admin-audit into main
Staging Backend Quality Gate / validate (push) Failing after 56m44s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 22:51:27 +08:00
56dbed0d93
docs(staging): record runtime role drift repair
Staging Backend Quality Gate / validate (pull_request) Successful in 14m11s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 22:35:33 +08:00
f3b78bfee1
Merge remote-tracking branch 'origin/main' into fix/staging-gate-retry-and-admin-audit
...
Staging Backend Quality Gate / validate (pull_request) Successful in 14m24s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
# Conflicts:
# docs/BUG_HISTORY.md
# frontend/tests/admin-users-contract.test.ts
2026-08-06 22:11:41 +08:00
9a3d0d440f
fix(frontend): declare admin users runtime locally
Staging Backend Quality Gate / validate (push) Successful in 16m8s
Staging Backend Quality Gate / publish (push) Successful in 12m59s
2026-08-06 21:20:12 +08:00
015f1e501e
fix(admin): declare users route runtime locally
Staging Backend Quality Gate / validate (pull_request) Successful in 19m9s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 21:17:19 +08:00
de2caf6249
test(audit): include billing admin routes
Staging Backend Quality Gate / validate (push) Failing after 10m43s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 20:50:42 +08:00
ec0a8c3c39
test(admin): register operations routes in capability audit
Staging Backend Quality Gate / validate (pull_request) Failing after 11m5s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 20:48:56 +08:00
c1061695c7
fix(staging): retry exact gate checkout
2026-08-06 20:47:38 +08:00
9d8c73561f
test(deploy): integrate billing admin rollout checks
Staging Backend Quality Gate / validate (push) Failing after 7m30s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 20:15:50 +08:00
5622ab448a
feat(admin): add operations resources and audit UI
2026-08-06 20:15:08 +08:00
28e04857fa
feat(models): secure catalog and pin model versions
2026-08-06 20:15:08 +08:00
7040fd998e
feat(billing): add products subscriptions orders and usage
2026-08-06 20:15:08 +08:00
6457c836fa
feat(admin): add RBAC identity and MFA controls
2026-08-06 20:15:08 +08:00
jesse
9f71e849a0
Merge pull request 'Close staging controller fetch incident' ( #19 )
...
Staging Backend Quality Gate / validate (push) Failing after 2m5s
Staging Backend Quality Gate / publish (push) Has been skipped
Record resolved gate-attested controller deployment evidence and retain browser handoff blockers.
2026-08-06 20:05:29 +08:00
3f61188b07
docs(staging): close controller fetch incident
2026-08-06 20:04:47 +08:00
jesse
e59f15d352
Merge pull request 'Deploy gate-attested staging controllers' ( #18 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m53s
Staging Backend Quality Gate / publish (push) Successful in 10m17s
Replace mutation-time Git object fetches with exact-gate hash-bound controller bundles.
2026-08-06 19:33:47 +08:00
8473146773
fix(staging): deploy gate-attested controllers
Staging Backend Quality Gate / validate (pull_request) Successful in 14m1s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 19:18:04 +08:00
jesse
784ee36cec
Merge pull request 'Bound staging trusted-main fetch retries' ( #17 )
...
Staging Backend Quality Gate / validate (push) Successful in 14m3s
Staging Backend Quality Gate / publish (push) Successful in 5m36s
Fail closed on prolonged trusted-main fetches without changing exact-SHA or ancestry controls.
2026-08-06 18:14:55 +08:00
fa8698c95b
docs(staging): close bounded fetch incident
Staging Backend Quality Gate / validate (pull_request) Successful in 12m46s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 18:00:40 +08:00
52b467cbe5
docs(bugs): clarify recovered staging fetch stall
Staging Backend Quality Gate / validate (pull_request) Successful in 15m11s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 17:43:06 +08:00
975f5c346d
fix(staging): bound trusted main fetch retries
2026-08-06 17:40:41 +08:00
jesse
02cc483b7c
Merge pull request 'Record personal report staging acceptance' ( #16 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m48s
Staging Backend Quality Gate / publish (push) Successful in 4m59s
Record the tested staging evidence and explicit browser handoff blockers.
2026-08-06 17:03:14 +08:00
3431956de1
docs(staging): record personal report acceptance evidence
2026-08-06 17:01:17 +08:00
jesse
f7a615a5bf
Merge pull request 'Harden staging SSH secret and env ownership' ( #15 )
...
Staging Backend Quality Gate / validate (push) Successful in 12m56s
Staging Backend Quality Gate / publish (push) Successful in 5m51s
Rotate the staging key boundary and align deploy-owned environment validation.
2026-08-06 15:53:41 +08:00
0ddbe11eda
docs(bugs): record staging credential incident resolved
Staging Backend Quality Gate / validate (pull_request) Successful in 14m56s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 15:52:37 +08:00
cfc7af6b46
fix(staging): rotate SSH secret handling and env ownership
Staging Backend Quality Gate / validate (pull_request) Successful in 16m32s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 15:34:31 +08:00
jesse
eccd831ae9
Merge pull request 'Record staging env ownership drift guard' ( #14 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m31s
Staging Backend Quality Gate / publish (push) Successful in 15m29s
Record and prevent the staging env owner drift found by the encrypted backup gate.
2026-08-06 14:32:20 +08:00
a277efb8f4
docs(ops): record staging env ownership drift
2026-08-06 14:30:39 +08:00
jesse
8d636fc5ac
Merge pull request 'Record staging SSH host key rotation guard' ( #13 )
...
Record the independently verified staging host-key rotation before release.
2026-08-06 14:26:47 +08:00
eb4ebf7c73
docs(ops): record staging host key rotation guard
2026-08-06 14:24:20 +08:00
jesse
e018dc90a7
Merge pull request 'Add one-way Skill governance and personal reports' ( #12 )
...
Reviewed one-way Skill governance and ReportDocument v1 personal report rollout.
2026-08-06 14:10:51 +08:00
8a475198e3
docs(bugs): record report gate regressions resolved
Staging Backend Quality Gate / validate (pull_request) Successful in 16m17s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:53:11 +08:00
94f051f4d0
test(report): register personal reports in database fixture
Staging Backend Quality Gate / validate (pull_request) Successful in 15m5s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:36:23 +08:00
58894b201b
test(report): register report reader in capability audit
Staging Backend Quality Gate / validate (pull_request) Failing after 12m13s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:21:04 +08:00
c949b224fe
docs(staging): add personal report acceptance and rollback runbook
Staging Backend Quality Gate / validate (pull_request) Failing after 15m33s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 12:59:36 +08:00
d89073d296
feat(report): add browser-rendered report and PDF print
2026-08-06 12:52:05 +08:00
47e829e971
feat(report): generate grounded reports with Mastra
2026-08-06 12:43:30 +08:00
82dab96b07
feat(report): add personal report contract and persistence
2026-08-06 12:43:10 +08:00
Jesse_Chen
jesse