50 descendants of 79f9bebb4fc0e6c3
|
2026-10-14
| ||
| 19:17 | Cutover: retire every agent password, refuse it at every door, rewrite /start and llms.txt for agent accounts check-in: d9219b3582 user: zeitgeist tags: agent-cutover | |
| 17:43 | land no-false-landed check-in: 396545a79f user: dmestas tags: trunk | |
| 17:38 | land agent-pages check-in: 478bf78fee user: dmestas tags: trunk | |
| 17:37 | A landing never reads as already landed against itself, nor in the moments after an update from its target closed check-in: df2f8cb9ae user: zeitgeist tags: no-false-landed | |
| 17:31 | update agent-pages from trunk closed check-in: 135060ecc1 user: dmestas tags: agent-pages | |
| 14:57 | land agent-audit-via check-in: 090b70e0d4 user: dmestas tags: trunk | |
| 14:56 | Merge trunk into agent-pages; People names a forge agent's answerable admin with the forge badge check-in: 6a3a127a65 user: zeitgeist tags: agent-pages | |
| 14:53 | update agent-audit-via from trunk closed check-in: 2a57ad299d user: dmestas tags: agent-audit-via | |
| 14:53 | land forge-agents check-in: 6e4fb75761 user: dmestas tags: trunk | |
| 13:35 | Forge agents: the agent guard refusals are Forbidden and answer forbidden at the API; a disabled site admin is shielded from lowering too; the RFC names the policy acts outside the edge closed check-in: 9113e04c34 user: zeitgeist tags: forge-agents | |
| 13:34 | Agent pages: the one-time token page is no-store, a token-bound request manages nothing, failed reads are logged check-in: 362ecbdf97 user: zeitgeist tags: agent-pages | |
| 13:28 | Merge trunk into agent-pages check-in: 478d39e3b9 user: zeitgeist tags: agent-pages | |
| 13:27 | Forge agents test: a revoke is judged once the site admin holds something, and the store guard's refusal counts as refused check-in: fc161db2c3 user: zeitgeist tags: forge-agents | |
| 13:24 | Forge agents: the store guard refuses a forge agent lowering a site admin or another forge agent on any grant door, and its s stops at a deed a site admin or forge agent holds check-in: ffd202d023 user: zeitgeist tags: forge-agents | |
| 13:05 | Forge agents test: the rig grants no role, so the reader string is written directly before the raise and lower caps checks check-in: 1be63f3e22 user: zeitgeist tags: forge-agents | |
| 13:02 | Forge agents: a forge agent may raise a site admin's repository letters (grant, caps that add) and never lower them; another forge agent stays refused check-in: 3a3135fa04 user: zeitgeist tags: forge-agents | |
| 12:59 | Agent pages: Your agents on /me, an agent's page, agents among a repository's people check-in: d7bd012403 user: zeitgeist tags: agent-pages | |
| 12:59 | Forge agents: a forge agent never alters a site admin or another forge agent on any account-level op; no self-answerable re-mark; the guard resolves the answerable admin as the badge does check-in: 142b2bb2e8 user: zeitgeist tags: forge-agents | |
| 12:36 | RFC 0021 rung 5 follow-up: via is its own value, not a packed actor; carry via on uv, landing, stamp, protection check-in: a93e678592 user: zeitgeist tags: agent-audit-via | |
| 12:33 | Merge trunk into forge-agents: keep the forge-agent badge hook beside the token-label wiring in main.go and web.go check-in: 42808d2307 user: zeitgeist tags: forge-agents | |
| 12:27 | land agent-audit-limits check-in: ef1105daf1 user: dmestas tags: trunk | |
| 02:46 | Forge agents: operator forge with an answerable site admin, the s-op creation and re-mark paths, account.answerable, the fleet section and badge (RFC 0021 decision 10) check-in: d5ad168a8f user: zeitgeist tags: forge-agents | |
| 02:31 | gofmt the audit test closed check-in: e81b96ad85 user: zeitgeist tags: agent-audit-limits | |
| 02:31 | RFC 0021 rung 5: audit via on events and settings log, push receipt token, sign-in link bound check-in: 63d1b34b05 user: zeitgeist tags: agent-audit-limits | |
| 02:17 | land agent-accounts-guards check-in: 6122591c53 user: dmestas tags: trunk | |
| 02:13 | RFC 0021 guards: repo.category.set refuses an agent writing a letter it does not resolve to closed check-in: 8f62fffde8 user: zeitgeist tags: agent-accounts-guards | |
| 02:06 | RFC 0021 rung 3 guards: no deed by backfill, no agent chains, forge reserved, team ops closed to agents, marking clears the flag and refuses holdings check-in: b54bf90918 user: zeitgeist tags: agent-accounts-guards | |
| 02:02 | land checks-newest-run check-in: f442236972 user: dmestas tags: trunk | |
| 01:58 | update checks-newest-run from trunk closed check-in: c71dede587 user: dmestas tags: checks-newest-run | |
| 01:55 | land agent-accounts check-in: 8ce7741572 user: dmestas tags: trunk | |
| 01:51 | merge trunk into agent-accounts: web sign-in links and the Publisher preset beside the rung 3 core closed check-in: 63efce309c user: zeitgeist tags: agent-accounts | |
| 01:48 | RFC 0021 rung 3 core: agent accounts, their tokens, the operator intersection, the deed and the a guards check-in: 1972eede17 user: zeitgeist tags: agent-accounts | |
| 01:27 | land publisher-preset check-in: f1563ef537 user: dmestas tags: trunk | |
| 01:23 | land rfc-statuses check-in: d0cf30f009 user: dmestas tags: trunk | |
| 01:19 | land web-signin-links check-in: 8e5c8a68a5 user: dmestas tags: trunk | |
| 01:17 | A check is its newest run: the landing panel lists one row per pipeline and the accept gate reads the same verdict check-in: 2a6c976831 user: zeitgeist tags: checks-newest-run | |
| 01:15 | update rfc-statuses from trunk closed check-in: 72b130540f user: dmestas tags: rfc-statuses | |
| 01:15 | update web-signin-links from trunk closed check-in: 62039bbbf0 user: dmestas tags: web-signin-links | |
| 01:14 | land failed-rebuild-test-race check-in: 3ae37b68f8 user: dmestas tags: trunk | |
| 00:43 | The failed-rebuild test fails crosslink only after the census reader has started, so it no longer races #911's cancel closed check-in: dc20e65f26 user: zeitgeist tags: failed-rebuild-test-race | |
| 00:35 | sign-in links: end bound session only when token known gone, verify uses MayAt, real-path admin test check-in: f7d3cf057f user: zeitgeist tags: web-signin-links | |
| 00:27 | sign-in links: token decides admin gates, fail closed on lost token, local next only, stash replaced session check-in: 26bfe9dec3 user: zeitgeist tags: web-signin-links | |
| 00:18 | web sign-in: me.signin-link, one-time signin_link, token-bound 24h sessions check-in: 1d8e9a1b27 user: zeitgeist tags: web-signin-links | |
| 00:14 | Name Publisher in the Role enum, off the Reader-to-Admin ladder closed check-in: a413112e91 user: zeitgeist tags: publisher-preset | |
| 00:12 | RFC statuses say what is built: 0005, 0009, 0011, 0016, 0018 and 0020 and the index check-in: f5a72e48ca user: zeitgeist tags: rfc-statuses | |
| 00:10 | Add the Publisher role preset: Reader plus y, read back by Infer check-in: 97712cbd6a user: zeitgeist tags: publisher-preset | |
|
2026-10-13
| ||
| 18:42 | land submanifest-is-manifest check-in: 1f8a3a3ce8 user: dmestas tags: trunk | |
| 18:17 | An S-card check-in is a manifest: the fold skips it without a parse, and a refused manifest is not logged closed check-in: af5d79765b user: zeitgeist tags: submanifest-is-manifest | |
| 17:46 | land rerun-while-dispatching check-in: f2d8579cce user: dmestas tags: trunk | |
| 17:35 | land remove-cancels-ingest check-in: 92cef418f8 user: dmestas tags: trunk | |
| 17:32 | update remove-cancels-ingest from trunk closed check-in: 79f9bebb4f user: dmestas tags: remove-cancels-ingest | |