50 descendants of f5a72e48ca870e5f
|
2026-10-16
| ||
| 23:11 | land fleet-delete check-in: b24a4ea1e8 user: dmestas tags: trunk | |
| 23:05 | Fleet rows stop serving and delete any store for a site admin closed check-in: f18b3d07b7 user: zeitgeist tags: fleet-delete | |
|
2026-10-15
| ||
| 21:03 | land site-scope-fixes check-in: b51117ef35 user: dmestas tags: trunk | |
| 20:59 | site token: hold the private line on the fleet pages, refuse worker tokens and the forge bucket, re-check streams closed check-in: e25fa23dca user: zeitgeist tags: site-scope-fixes | |
| 20:43 | land site-scoped-tokens check-in: 1491237bba user: dmestas tags: trunk | |
| 20:38 | Site scope: a flagged forge agent's token acts as site admin, never past a private repository it holds no grant on (RFC 0021) closed check-in: 7a9a8bf577 user: zeitgeist tags: site-scoped-tokens | |
| 17:12 | land zit-cache-ceiling check-in: dd36b9ecb3 user: dmestas tags: trunk | |
| 09:59 | merge trunk: keep both the zit-cache-mb and debug-addr flags closed check-in: 8c288280a9 user: zeitgeist tags: zit-cache-ceiling | |
| 09:57 | land debug-pprof check-in: 6240eaa396 user: dmestas tags: trunk | |
| 08:26 | release a dropped client's cache charges, set the ceiling before listening, count listing line overhead check-in: 3558190bef user: zeitgeist tags: zit-cache-ceiling | |
| 08:22 | bound zit caches by bytes forge-wide: listings by bytes, blobs by capacity, one ceiling check-in: b360ffbf9d user: zeitgeist tags: zit-cache-ceiling | |
| 04:14 | serve Go runtime profiles on a loopback --debug-addr closed check-in: 6191a3659a user: zeitgeist tags: debug-pprof | |
| 00:17 | land rfc-0022-git-mirror check-in: e9e293227d user: dmestas tags: trunk | |
| 00:10 | RFC 0022: mirror a public repository to a Git host from its settings closed check-in: 93b90dcaee user: zeitgeist tags: rfc-0022-git-mirror | |
|
2026-10-14
| ||
| 19:43 | land agent-cutover check-in: 1ac543890a user: dmestas tags: trunk | |
| 19:25 | Cutover review: drop agents' hand-issued push rows, refuse untokened agent sessions, one UPDATE in SetForgeAgent, scopes wording closed check-in: a426a8ee0c user: zeitgeist tags: agent-cutover | |
| 19:17 | Cutover: retire every agent password, refuse it at every door, rewrite /start and llms.txt for agent accounts check-in: d9219b3582 user: zeitgeist tags: agent-cutover | |
| 17:43 | land no-false-landed check-in: 396545a79f user: dmestas tags: trunk | |
| 17:38 | land agent-pages check-in: 478bf78fee user: dmestas tags: trunk | |
| 17:37 | A landing never reads as already landed against itself, nor in the moments after an update from its target closed check-in: df2f8cb9ae user: zeitgeist tags: no-false-landed | |
| 17:31 | update agent-pages from trunk closed check-in: 135060ecc1 user: dmestas tags: agent-pages | |
| 14:57 | land agent-audit-via check-in: 090b70e0d4 user: dmestas tags: trunk | |
| 14:56 | Merge trunk into agent-pages; People names a forge agent's answerable admin with the forge badge check-in: 6a3a127a65 user: zeitgeist tags: agent-pages | |
| 14:53 | update agent-audit-via from trunk closed check-in: 2a57ad299d user: dmestas tags: agent-audit-via | |
| 14:53 | land forge-agents check-in: 6e4fb75761 user: dmestas tags: trunk | |
| 13:35 | Forge agents: the agent guard refusals are Forbidden and answer forbidden at the API; a disabled site admin is shielded from lowering too; the RFC names the policy acts outside the edge closed check-in: 9113e04c34 user: zeitgeist tags: forge-agents | |
| 13:34 | Agent pages: the one-time token page is no-store, a token-bound request manages nothing, failed reads are logged check-in: 362ecbdf97 user: zeitgeist tags: agent-pages | |
| 13:28 | Merge trunk into agent-pages check-in: 478d39e3b9 user: zeitgeist tags: agent-pages | |
| 13:27 | Forge agents test: a revoke is judged once the site admin holds something, and the store guard's refusal counts as refused check-in: fc161db2c3 user: zeitgeist tags: forge-agents | |
| 13:24 | Forge agents: the store guard refuses a forge agent lowering a site admin or another forge agent on any grant door, and its s stops at a deed a site admin or forge agent holds check-in: ffd202d023 user: zeitgeist tags: forge-agents | |
| 13:05 | Forge agents test: the rig grants no role, so the reader string is written directly before the raise and lower caps checks check-in: 1be63f3e22 user: zeitgeist tags: forge-agents | |
| 13:02 | Forge agents: a forge agent may raise a site admin's repository letters (grant, caps that add) and never lower them; another forge agent stays refused check-in: 3a3135fa04 user: zeitgeist tags: forge-agents | |
| 12:59 | Agent pages: Your agents on /me, an agent's page, agents among a repository's people check-in: d7bd012403 user: zeitgeist tags: agent-pages | |
| 12:59 | Forge agents: a forge agent never alters a site admin or another forge agent on any account-level op; no self-answerable re-mark; the guard resolves the answerable admin as the badge does check-in: 142b2bb2e8 user: zeitgeist tags: forge-agents | |
| 12:36 | RFC 0021 rung 5 follow-up: via is its own value, not a packed actor; carry via on uv, landing, stamp, protection check-in: a93e678592 user: zeitgeist tags: agent-audit-via | |
| 12:33 | Merge trunk into forge-agents: keep the forge-agent badge hook beside the token-label wiring in main.go and web.go check-in: 42808d2307 user: zeitgeist tags: forge-agents | |
| 12:27 | land agent-audit-limits check-in: ef1105daf1 user: dmestas tags: trunk | |
| 02:46 | Forge agents: operator forge with an answerable site admin, the s-op creation and re-mark paths, account.answerable, the fleet section and badge (RFC 0021 decision 10) check-in: d5ad168a8f user: zeitgeist tags: forge-agents | |
| 02:31 | gofmt the audit test closed check-in: e81b96ad85 user: zeitgeist tags: agent-audit-limits | |
| 02:31 | RFC 0021 rung 5: audit via on events and settings log, push receipt token, sign-in link bound check-in: 63d1b34b05 user: zeitgeist tags: agent-audit-limits | |
| 02:17 | land agent-accounts-guards check-in: 6122591c53 user: dmestas tags: trunk | |
| 02:13 | RFC 0021 guards: repo.category.set refuses an agent writing a letter it does not resolve to closed check-in: 8f62fffde8 user: zeitgeist tags: agent-accounts-guards | |
| 02:06 | RFC 0021 rung 3 guards: no deed by backfill, no agent chains, forge reserved, team ops closed to agents, marking clears the flag and refuses holdings check-in: b54bf90918 user: zeitgeist tags: agent-accounts-guards | |
| 02:02 | land checks-newest-run check-in: f442236972 user: dmestas tags: trunk | |
| 01:58 | update checks-newest-run from trunk closed check-in: c71dede587 user: dmestas tags: checks-newest-run | |
| 01:55 | land agent-accounts check-in: 8ce7741572 user: dmestas tags: trunk | |
| 01:51 | merge trunk into agent-accounts: web sign-in links and the Publisher preset beside the rung 3 core closed check-in: 63efce309c user: zeitgeist tags: agent-accounts | |
| 01:27 | land publisher-preset check-in: f1563ef537 user: dmestas tags: trunk | |
| 01:23 | land rfc-statuses check-in: d0cf30f009 user: dmestas tags: trunk | |
| 01:15 | update rfc-statuses from trunk closed check-in: 72b130540f user: dmestas tags: rfc-statuses | |
| 00:12 | RFC statuses say what is built: 0005, 0009, 0011, 0016, 0018 and 0020 and the index check-in: f5a72e48ca user: zeitgeist tags: rfc-statuses | |