ProofedMesh

approval-service: fix NetworkPolicy ingress to allow Traefik from kube-system (DEV-619)

#72 -Commit a9a53ca31e pushed by forgejoadmin

main

2026-10-25 21:27:05 +00:00

2m0s

approval-service: K8s deployment manifests + Pocket-ID OIDC client (DEV-614)

#66 -Commit 20ba29d3ac pushed by forgejoadmin

main

2026-10-25 21:15:09 +00:00

2m0s

ci(db): bump migrate-down to 4 + verify verification_decisions (DEV-618)

#60 -Commit 5bbd3b2c68 pushed by forgejoadmin

main

2026-10-25 21:05:27 +00:00

1m51s

dummy-sink: Phase-1 mock sink (sink:dummy-sink) (DEV-611)

#52 -Commit b45ad34169 pushed by forgejoadmin

main

2026-10-25 20:23:01 +00:00

1m35s

ci(images): pass Harbor secrets as env vars so robot `$` is not expanded (DEV-617)

#50 -Commit d6efabd96f pushed by forgejoadmin

main

2026-10-25 20:19:22 +00:00

1m38s

ci(images): install docker-buildx so --mount=type=cache works (DEV-617)

#46 -Commit 770e71daab pushed by forgejoadmin

main

2026-10-25 20:13:32 +00:00

2m8s

ci(images): enable BuildKit for signing-service image build

#44 -Commit 174a74435a pushed by forgejoadmin

main

2026-10-25 20:07:44 +00:00

1m33s

ci(db): migrate down above per_diem_rates and verify all four tables

#42 -Commit 89da9b0414 pushed by forgejoadmin

main

2026-10-25 20:05:25 +00:00

1m31s

ci: install docker-cli explicitly on debian trixie (DEV-607)

#34 -Commit b99801f0df pushed by forgejoadmin

main

2026-10-25 19:28:34 +00:00

1m0s

transparency-log: real Trillian backend wiring + agent-trust deploy (DEV-604)

#30 -Commit 951f22f80e pushed by forgejoadmin

main

2026-10-25 18:41:02 +00:00

51s

signing-service: Dockerfile, K8s manifests (agent-trust), image CI, secret convention

#28 -Commit b52936ce9d pushed by forgejoadmin

main

2026-10-25 18:21:06 +00:00

42s

signing-service: public pkg/httpapi test surface + admin-api interop test (DEV-599)

#26 -Commit 5d338dd725 pushed by forgejoadmin

main

2026-10-25 18:12:26 +00:00

38s

admin-api: Pocket-ID session-cookie verifier (OIDC Authorization-Code + PKCE, JWKS, group check)

#25 -Commit 9f1eb84032 pushed by forgejoadmin

main

2026-10-25 18:10:51 +00:00

41s

services: add transparency-log Go service (ADR-0005 POST /api/v1/log/entries)

#24 -Commit 69b3f3012f pushed by forgejoadmin

main

2026-10-25 18:10:08 +00:00

38s

services: add attest-reconciler Go service (periodic worker re-signs per_diem_rates rows without rate_change_attestation_ref via Signer+TLog, 11/11 go tests pass, go vet clean)

#23 -Commit 2e44147a71 pushed by forgejoadmin

main

2026-10-25 18:07:24 +00:00

36s

admin-api: Pocket-ID client_credentials TokenSource with OIDC discovery + cache (replaces StaticToken in prod)

#22 -Commit be3ac9cdb8 pushed by forgejoadmin

main

2026-10-25 18:04:42 +00:00

34s

services: add signing-service (real Ed25519 DSSE, in-memory keyring, AllowAll+Static validators as DEV; OpenBao/OPA/Pocket-ID as stubs). Interop with admin-api attest.HTTPSigner verified: 19 Go-Tests + end-to-end content_hash equality.

#21 -Commit d9fa1c55b9 pushed by forgejoadmin

main

2026-10-25 18:03:20 +00:00

34s

admin-api: wire Signer+TLog into Create/Retire handlers; on tlog outage row stays attestation-pending (26/26 tests pass, go vet clean)

#20 -Commit ca62108f70 pushed by forgejoadmin

main

2026-10-25 17:52:30 +00:00

34s

ci: fix Go job — golang:1.23-trixie does not exist on Docker Hub, use golang:1.23-alpine3.21 (git 2.47+, sha256-capable)

#18 -Commit e3698de492 pushed by forgejoadmin

main

2026-10-25 17:30:59 +00:00

38s

services: add per-diem-calculator Go skeleton (deterministic compute core + 5 unit tests, HTTP wire stubbed); README reflects new layout

#14 -Commit 3f466dfae8 pushed by forgejoadmin

main

2026-10-25 17:08:18 +00:00

19s

docs(architecture): add 4.7 receipts flow (ds:receipts, PII-store, hash binding) and 6.2 deterministic rules example (ds:per-diem-rates, compute-agent, no LLM on numeric path)

#11 -Commit 95e50aff7d pushed by forgejoadmin

main

2026-10-25 16:50:52 +00:00

17s

docs(architecture): add section 7.2a for per-line project allocations (expense.canonical v1.1.0)

#10 -Commit 2181225022 pushed by forgejoadmin

main

2026-10-25 16:20:57 +00:00

17s

policies+ci: v1.1.0 allocation support — expense.rego enforces per-item sum invariant, 5 new tests (25/25 pass), CI validates examples per schema version

#9 -Commit 5d309e16c1 pushed by forgejoadmin

main

2026-10-25 16:19:57 +00:00

17s

ci: POSIX-safe example-validation loop (trixie-slim sh is dash, no shopt)

#7 -Commit 36aa391e59 pushed by forgejoadmin

main

2026-10-25 15:41:37 +00:00

17s