CTO (Paperclip)
51733d8b36
db+ci: Agent Registry schema (agents + agent_keys), Phase-1 seed, migrate up/down CI (DEV-607)
...
build-images / signing-service image (push) Failing after 14s
validate / JSON Schema (ajv) (push) Successful in 19s
validate / Rego (opa fmt + opa test) (push) Successful in 14s
validate / DB (migrate up/down dry-run) (push) Failing after 18s
validate / Go (vet + test) (push) Successful in 34s
- 0002_agents / 0003_agent_keys migrations per architecture v1.1 §4.4
(incl. (k8s_namespace, k8s_service_account) uniqueness for the signing
service's dual identity check and an agent_id, valid_from index for the
verification lookup path)
- idempotent seed db/trust/seeds/0001_phase1_agents.sql with the three
Phase-1 identities: agent-approval-service, agent-testagent-transform,
agent-dummy-sink (namespace agent-trust)
- new db CI job in validate.yml: runs postgres:16-alpine, migrate up ->
down 2 -> up, applies the seed twice, verifies three agents
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-25 19:23:20 +00:00
CTO Agent
e3698de492
ci: fix Go job — golang:1.23-trixie does not exist on Docker Hub, use golang:1.23-alpine3.21 (git 2.47+, sha256-capable)
validate / Rego (opa fmt + opa test) (push) Successful in 13s
validate / JSON Schema (ajv) (push) Successful in 20s
validate / Go (vet + test) (push) Successful in 21s
2026-10-25 17:30:18 +00:00
CTO Agent
eeaceb07ed
ci+readme: add Go CI job (golang:1.23-trixie, vet + test for every services/**/go.mod); README reflects db/, admin-api, go-test commands
validate / Rego (opa fmt + opa test) (push) Successful in 13s
validate / Go (vet + test) (push) Failing after 1s
validate / JSON Schema (ajv) (push) Successful in 20s
2026-10-25 17:28:32 +00:00
CTO Agent
5d309e16c1
policies+ci: v1.1.0 allocation support — expense.rego enforces per-item sum invariant, 5 new tests (25/25 pass), CI validates examples per schema version
validate / Rego (opa fmt + opa test) (push) Successful in 12s
validate / JSON Schema (ajv) (push) Successful in 16s
2026-10-25 16:19:37 +00:00
CTO Agent
36aa391e59
ci: POSIX-safe example-validation loop (trixie-slim sh is dash, no shopt)
validate / Rego (opa fmt + opa test) (push) Successful in 13s
validate / JSON Schema (ajv) (push) Successful in 17s
2026-10-25 15:41:18 +00:00
CTO Agent
23594e1f9b
ci: skip actions/checkout — do manual git clone (checkout does git init without --object-format=sha256)
validate / Rego (opa fmt + opa test) (push) Successful in 12s
validate / JSON Schema (ajv) (push) Failing after 15s
2026-10-25 15:40:01 +00:00
CTO Agent
0a3ae36bf1
ci: run jobs in Debian trixie (git 2.47+) — sha256 git object format needs git >= 2.42
validate / Rego (opa fmt + opa test) (push) Failing after 13s
validate / JSON Schema (ajv) (push) Failing after 46s
2026-10-25 15:36:59 +00:00
CTO Agent
1d4eccb6d3
ci: use fetch-depth 0 — Forgejo repo has sha256 object format, checkout cannot fetch by raw SHA
validate / Rego (opa fmt + opa test) (push) Failing after 30s
validate / JSON Schema (ajv) (push) Failing after 35s
2026-10-25 15:33:02 +00:00
CTO Agent
81bc32e9c3
ci: make workflow robust — apt-get curl pre-step, local ajv install, OPA to user HOME, no setup-node reliance
validate / Rego (opa fmt + opa test) (push) Failing after 24s
validate / JSON Schema (ajv) (push) Failing after 28s
2026-10-25 15:30:57 +00:00
CTO Agent
961102ca6f
ci: add Forgejo Actions workflow — JSON Schema (ajv) + Rego (opa fmt + opa test)
validate / JSON Schema (ajv) (push) Has been cancelled
validate / Rego (opa fmt + opa test) (push) Has been cancelled
2026-10-25 15:28:19 +00:00
