50 descendants of c71dede5874563d2
|
2026-10-17
| ||
| 18:16 | Git mirror remote: refuse a leading-dash user, encoded or query characters, IP and one-word hosts closed check-in: e1f76a4d52 user: zeitgeist tags: git-mirror-setting | |
| 18:06 | Mirror to Git setting: deploy key sealed, settings section, private and takedown refusals (RFC 0022 rung 1) check-in: 6e042968d1 user: zeitgeist tags: git-mirror-setting | |
| 00:16 | land rfc23-rung1 check-in: 3f76972ced user: dmestas tags: trunk | |
| 00:09 | land menu-flip check-in: 1e793e9f26 user: dmestas tags: trunk | |
| 00:07 | RFC 0023 rung 1: disable and legal hold, 451 on every door closed check-in: 64a9cf6d68 user: zeitgeist tags: rfc23-rung1 | |
|
2026-10-16
| ||
| 23:59 | Fleet row menu flips rightward at phone width closed check-in: 4a95dbb2d0 user: zeitgeist tags: menu-flip | |
| 23:23 | land rfc23-takedown check-in: 113500a5d9 user: dmestas tags: trunk | |
| 23:16 | RFC 0023: takedown and legal hold closed check-in: bc632c2ebd user: zeitgeist tags: rfc23-takedown | |
| 23:11 | land fleet-delete check-in: b24a4ea1e8 user: dmestas tags: trunk | |
| 23:05 | Fleet rows stop serving and delete any store for a site admin closed check-in: f18b3d07b7 user: zeitgeist tags: fleet-delete | |
|
2026-10-15
| ||
| 21:03 | land site-scope-fixes check-in: b51117ef35 user: dmestas tags: trunk | |
| 20:59 | site token: hold the private line on the fleet pages, refuse worker tokens and the forge bucket, re-check streams closed check-in: e25fa23dca user: zeitgeist tags: site-scope-fixes | |
| 20:43 | land site-scoped-tokens check-in: 1491237bba user: dmestas tags: trunk | |
| 20:38 | Site scope: a flagged forge agent's token acts as site admin, never past a private repository it holds no grant on (RFC 0021) closed check-in: 7a9a8bf577 user: zeitgeist tags: site-scoped-tokens | |
| 17:12 | land zit-cache-ceiling check-in: dd36b9ecb3 user: dmestas tags: trunk | |
| 09:59 | merge trunk: keep both the zit-cache-mb and debug-addr flags closed check-in: 8c288280a9 user: zeitgeist tags: zit-cache-ceiling | |
| 09:57 | land debug-pprof check-in: 6240eaa396 user: dmestas tags: trunk | |
| 08:26 | release a dropped client's cache charges, set the ceiling before listening, count listing line overhead check-in: 3558190bef user: zeitgeist tags: zit-cache-ceiling | |
| 08:22 | bound zit caches by bytes forge-wide: listings by bytes, blobs by capacity, one ceiling check-in: b360ffbf9d user: zeitgeist tags: zit-cache-ceiling | |
| 04:14 | serve Go runtime profiles on a loopback --debug-addr closed check-in: 6191a3659a user: zeitgeist tags: debug-pprof | |
| 00:17 | land rfc-0022-git-mirror check-in: e9e293227d user: dmestas tags: trunk | |
| 00:10 | RFC 0022: mirror a public repository to a Git host from its settings closed check-in: 93b90dcaee user: zeitgeist tags: rfc-0022-git-mirror | |
|
2026-10-14
| ||
| 19:43 | land agent-cutover check-in: 1ac543890a user: dmestas tags: trunk | |
| 19:25 | Cutover review: drop agents' hand-issued push rows, refuse untokened agent sessions, one UPDATE in SetForgeAgent, scopes wording closed check-in: a426a8ee0c user: zeitgeist tags: agent-cutover | |
| 19:17 | Cutover: retire every agent password, refuse it at every door, rewrite /start and llms.txt for agent accounts check-in: d9219b3582 user: zeitgeist tags: agent-cutover | |
| 17:43 | land no-false-landed check-in: 396545a79f user: dmestas tags: trunk | |
| 17:38 | land agent-pages check-in: 478bf78fee user: dmestas tags: trunk | |
| 17:37 | A landing never reads as already landed against itself, nor in the moments after an update from its target closed check-in: df2f8cb9ae user: zeitgeist tags: no-false-landed | |
| 17:31 | update agent-pages from trunk closed check-in: 135060ecc1 user: dmestas tags: agent-pages | |
| 14:57 | land agent-audit-via check-in: 090b70e0d4 user: dmestas tags: trunk | |
| 14:56 | Merge trunk into agent-pages; People names a forge agent's answerable admin with the forge badge check-in: 6a3a127a65 user: zeitgeist tags: agent-pages | |
| 14:53 | update agent-audit-via from trunk closed check-in: 2a57ad299d user: dmestas tags: agent-audit-via | |
| 14:53 | land forge-agents check-in: 6e4fb75761 user: dmestas tags: trunk | |
| 13:35 | Forge agents: the agent guard refusals are Forbidden and answer forbidden at the API; a disabled site admin is shielded from lowering too; the RFC names the policy acts outside the edge closed check-in: 9113e04c34 user: zeitgeist tags: forge-agents | |
| 13:34 | Agent pages: the one-time token page is no-store, a token-bound request manages nothing, failed reads are logged check-in: 362ecbdf97 user: zeitgeist tags: agent-pages | |
| 13:28 | Merge trunk into agent-pages check-in: 478d39e3b9 user: zeitgeist tags: agent-pages | |
| 13:27 | Forge agents test: a revoke is judged once the site admin holds something, and the store guard's refusal counts as refused check-in: fc161db2c3 user: zeitgeist tags: forge-agents | |
| 13:24 | Forge agents: the store guard refuses a forge agent lowering a site admin or another forge agent on any grant door, and its s stops at a deed a site admin or forge agent holds check-in: ffd202d023 user: zeitgeist tags: forge-agents | |
| 13:05 | Forge agents test: the rig grants no role, so the reader string is written directly before the raise and lower caps checks check-in: 1be63f3e22 user: zeitgeist tags: forge-agents | |
| 13:02 | Forge agents: a forge agent may raise a site admin's repository letters (grant, caps that add) and never lower them; another forge agent stays refused check-in: 3a3135fa04 user: zeitgeist tags: forge-agents | |
| 12:59 | Agent pages: Your agents on /me, an agent's page, agents among a repository's people check-in: d7bd012403 user: zeitgeist tags: agent-pages | |
| 12:59 | Forge agents: a forge agent never alters a site admin or another forge agent on any account-level op; no self-answerable re-mark; the guard resolves the answerable admin as the badge does check-in: 142b2bb2e8 user: zeitgeist tags: forge-agents | |
| 12:36 | RFC 0021 rung 5 follow-up: via is its own value, not a packed actor; carry via on uv, landing, stamp, protection check-in: a93e678592 user: zeitgeist tags: agent-audit-via | |
| 12:33 | Merge trunk into forge-agents: keep the forge-agent badge hook beside the token-label wiring in main.go and web.go check-in: 42808d2307 user: zeitgeist tags: forge-agents | |
| 12:27 | land agent-audit-limits check-in: ef1105daf1 user: dmestas tags: trunk | |
| 02:46 | Forge agents: operator forge with an answerable site admin, the s-op creation and re-mark paths, account.answerable, the fleet section and badge (RFC 0021 decision 10) check-in: d5ad168a8f user: zeitgeist tags: forge-agents | |
| 02:31 | gofmt the audit test closed check-in: e81b96ad85 user: zeitgeist tags: agent-audit-limits | |
| 02:31 | RFC 0021 rung 5: audit via on events and settings log, push receipt token, sign-in link bound check-in: 63d1b34b05 user: zeitgeist tags: agent-audit-limits | |
| 02:17 | land agent-accounts-guards check-in: 6122591c53 user: dmestas tags: trunk | |
| 02:02 | land checks-newest-run check-in: f442236972 user: dmestas tags: trunk | |
| 01:58 | update checks-newest-run from trunk closed check-in: c71dede587 user: dmestas tags: checks-newest-run | |