basicstack/ProofedMesh
SHA256
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit graph

  • a9a53ca31e approval-service: fix NetworkPolicy ingress to allow Traefik from kube-system (DEV-619) main CTO (Paperclip) 2026-10-25 21:23:59 +00:00
  • ddbd304659 docs: Phase-1 wrap-up — README status, ADR-0006/0007/0008 (DEV-616) CTO (Paperclip) 2026-10-25 21:23:30 +00:00
  • 20ba29d3ac approval-service: K8s deployment manifests + Pocket-ID OIDC client (DEV-614) CTO (Paperclip) 2026-10-25 21:12:01 +00:00
  • 5d2bf73d84 deploy: verification-service + dummy-sink Phase-1 manifests (DEV-615) CTO 2026-10-25 21:09:14 +00:00
  • 5bbd3b2c68 ci(db): bump migrate-down to 4 + verify verification_decisions (DEV-618) CTO 2026-10-25 21:03:03 +00:00
  • 55834438a8 phase1-smoke: end-to-end harness + Forgejo workflow (DEV-613) CTO (Paperclip) 2026-10-25 20:58:28 +00:00
  • 9b8f520afc testagent-transform: align with dummy-sink contract + static dev tokens (DEV-613) CTO (Paperclip) 2026-10-25 20:58:14 +00:00
  • 801c50cfb0 approval-service: dev auth/credentials routes + predicate chain-control fields (DEV-613) CTO (Paperclip) 2026-10-25 20:58:03 +00:00
  • 47a7373ef2 transparency-log: add GET /api/v1/log/entries/{hash} + /healthz (DEV-613) CTO (Paperclip) 2026-10-25 20:57:52 +00:00
  • 0ae29ae342 verification-service: Phase-1 two-stage chain verifier (approval -> transform) (DEV-612) CTO (Paperclip) 2026-10-25 20:35:35 +00:00
  • b45ad34169 dummy-sink: Phase-1 mock sink (sink:dummy-sink) (DEV-611) CTO (Paperclip) 2026-10-25 20:20:40 +00:00
  • d6efabd96f ci(images): pass Harbor secrets as env vars so robot $ is not expanded (DEV-617) CTO (Paperclip) 2026-10-25 20:17:41 +00:00
  • a4d5391f55 ci(images): re-run after setting HARBOR_USERNAME/PASSWORD secrets (DEV-617) CTO (Paperclip) 2026-10-25 20:16:18 +00:00
  • 770e71daab ci(images): install docker-buildx so --mount=type=cache works (DEV-617) CTO (Paperclip) 2026-10-25 20:10:56 +00:00
  • 174a74435a ci(images): enable BuildKit for signing-service image build CTO (Paperclip) 2026-10-25 20:06:05 +00:00
  • 89da9b0414 ci(db): migrate down above per_diem_rates and verify all four tables CTO (Paperclip) 2026-10-25 20:03:50 +00:00
  • cfb5e29b54 admin-api: go mod tidy after signing-service go 1.26 bump CTO (Paperclip) 2026-10-25 20:00:58 +00:00
  • 47f295d864 ci: bump Go image to 1.26-alpine for signing-service dep CTO (Paperclip) 2026-10-25 19:59:05 +00:00
  • ba1b88d490 testagent-transform: Phase-1 trust-chain demo agent (DEV-610) CTO (Paperclip) 2026-10-25 19:55:02 +00:00
  • 30dd2f8b65 signing-service: Pocket-ID JWKS + K8s TokenReview + OPA (DEV-609) CTO (Paperclip) 2026-10-25 19:42:40 +00:00
  • 3a01cc651f approval-service: Phase-1 content-binding approval service (DEV-608) Paperclip 2026-10-25 19:42:06 +00:00
  • b99801f0df ci: install docker-cli explicitly on debian trixie (DEV-607) CTO (Paperclip) 2026-10-25 19:27:24 +00:00
  • 51733d8b36 db+ci: Agent Registry schema (agents + agent_keys), Phase-1 seed, migrate up/down CI (DEV-607) CTO (Paperclip) 2026-10-25 19:23:20 +00:00
  • 951f22f80e transparency-log: real Trillian backend wiring + agent-trust deploy (DEV-604) CTO 2026-10-25 18:39:44 +00:00
  • b52936ce9d signing-service: Dockerfile, K8s manifests (agent-trust), image CI, secret convention CTO 2026-10-25 18:18:28 +00:00
  • 5d338dd725 signing-service: public pkg/httpapi test surface + admin-api interop test (DEV-599) CTO Agent 2026-10-25 18:11:09 +00:00
  • 9f1eb84032 admin-api: Pocket-ID session-cookie verifier (OIDC Authorization-Code + PKCE, JWKS, group check) CTO (Paperclip) 2026-10-25 18:06:51 +00:00
  • 69b3f3012f services: add transparency-log Go service (ADR-0005 POST /api/v1/log/entries) CTO 2026-10-25 18:08:53 +00:00
  • 2e44147a71 services: add attest-reconciler Go service (periodic worker re-signs per_diem_rates rows without rate_change_attestation_ref via Signer+TLog, 11/11 go tests pass, go vet clean) CTO 2026-10-25 18:06:05 +00:00
  • be3ac9cdb8 admin-api: Pocket-ID client_credentials TokenSource with OIDC discovery + cache (replaces StaticToken in prod) CTO (Paperclip) 2026-10-25 18:03:48 +00:00
  • d9fa1c55b9 services: add signing-service (real Ed25519 DSSE, in-memory keyring, AllowAll+Static validators as DEV; OpenBao/OPA/Pocket-ID as stubs). Interop with admin-api attest.HTTPSigner verified: 19 Go-Tests + end-to-end content_hash equality. CTO Agent 2026-10-25 18:02:44 +00:00
  • ca62108f70 admin-api: wire Signer+TLog into Create/Retire handlers; on tlog outage row stays attestation-pending (26/26 tests pass, go vet clean) CTO Agent 2026-10-25 17:51:53 +00:00
  • cacdf7e286 attest+tlog: ADR-0005 Signing/TLog API contract, HTTP clients + orchestrator in admin-api (go vet clean, 11 new tests pass) CTO Agent 2026-10-25 17:51:33 +00:00
  • e3698de492 ci: fix Go job — golang:1.23-trixie does not exist on Docker Hub, use golang:1.23-alpine3.21 (git 2.47+, sha256-capable) CTO Agent 2026-10-25 17:30:18 +00:00
  • eeaceb07ed ci+readme: add Go CI job (golang:1.23-trixie, vet + test for every services/**/go.mod); README reflects db/, admin-api, go-test commands CTO Agent 2026-10-25 17:28:32 +00:00
  • 65514559dc services: add admin-api Go service (per-diem rates CRUD, in-memory + Postgres stub store, HTML templates, 13/13 go tests pass, go vet clean) CTO Agent 2026-10-25 17:28:14 +00:00
  • d56f918c69 db: add ADR-0004 (golang-migrate), db/ layout, 0001_per_diem_rates migration (up+down) with EXCLUDE constraint and immutability trigger CTO Agent 2026-10-25 17:28:00 +00:00
  • 3f466dfae8 services: add per-diem-calculator Go skeleton (deterministic compute core + 5 unit tests, HTTP wire stubbed); README reflects new layout CTO Agent 2026-10-25 17:07:55 +00:00
  • c0472691c8 policies: add receipts + per_diem_rates data-source policies, per_diem transformation policy, extend expense.rego for v1.2.0 (54/54 tests pass) CTO Agent 2026-10-25 17:07:38 +00:00
  • 27c45b356a schemas: add ds/receipts v1.0.0, ds/per_diem v1.0.0, expense.canonical v1.2.0, sink.db.expense v1.2.0 (+ examples) CTO Agent 2026-10-25 17:07:20 +00:00
  • 95e50aff7d docs(architecture): add 4.7 receipts flow (ds:receipts, PII-store, hash binding) and 6.2 deterministic rules example (ds:per-diem-rates, compute-agent, no LLM on numeric path) CTO Agent 2026-10-25 16:50:34 +00:00
  • 2181225022 docs(architecture): add section 7.2a for per-line project allocations (expense.canonical v1.1.0) CTO Agent 2026-10-25 16:20:38 +00:00
  • 5d309e16c1 policies+ci: v1.1.0 allocation support — expense.rego enforces per-item sum invariant, 5 new tests (25/25 pass), CI validates examples per schema version CTO Agent 2026-10-25 16:19:37 +00:00
  • 81e5f334b5 schemas: add expense.canonical v1.1.0 and sink.db.expense v1.1.0 — per-line project allocations (percentage or absolute) CTO Agent 2026-10-25 16:19:21 +00:00
  • 36aa391e59 ci: POSIX-safe example-validation loop (trixie-slim sh is dash, no shopt) CTO Agent 2026-10-25 15:41:18 +00:00
  • 23594e1f9b ci: skip actions/checkout — do manual git clone (checkout does git init without --object-format=sha256) CTO Agent 2026-10-25 15:40:01 +00:00
  • 0a3ae36bf1 ci: run jobs in Debian trixie (git 2.47+) — sha256 git object format needs git >= 2.42 CTO Agent 2026-10-25 15:36:59 +00:00
  • 1d4eccb6d3 ci: use fetch-depth 0 — Forgejo repo has sha256 object format, checkout cannot fetch by raw SHA CTO Agent 2026-10-25 15:33:02 +00:00
  • 81bc32e9c3 ci: make workflow robust — apt-get curl pre-step, local ajv install, OPA to user HOME, no setup-node reliance CTO Agent 2026-10-25 15:30:57 +00:00
  • baa8b61021 docs(README): link policies/ and CI workflow; add local validation snippets CTO Agent 2026-10-25 15:28:50 +00:00
  • 961102ca6f ci: add Forgejo Actions workflow — JSON Schema (ajv) + Rego (opa fmt + opa test) CTO Agent 2026-10-25 15:28:19 +00:00
  • e721073767 policies: add Rego skeletons for transformations, sink expense_db_app, and ds expense_db_app (20/20 opa test pass, rego.v1) CTO Agent 2026-10-25 15:28:12 +00:00
  • 71259de4c8 docs(README): link schemas/ and docs/adr/ in repo layout and entry points CTO Agent 2026-10-25 15:11:47 +00:00
  • a9c853f881 docs(adr): add ADR template and ADR-0001..0003 (DB-App scope, session scope tokens, PII retention) CTO Agent 2026-10-25 15:11:23 +00:00
  • 30939b777a schemas: add expense.canonical, ds.expense.project_assignment, sink.db.expense (all v1.0.0) with README CTO Agent 2026-10-25 15:11:10 +00:00
  • 989140ee88 docs(architecture): clarify PII-Store is a role, not a product; add dedicated section 8.4 with technology choice CTO Agent 2026-10-25 14:57:00 +00:00
  • fddce4d0fb docs(architecture): add parallel read path (Data Sources, Query Attestations, Session Scope Tokens); make own DB-App the first rollout CTO Agent 2026-10-25 14:41:18 +00:00
  • 7205fa2e98 docs(README): reflect sink generalization — ERP is one of many possible sinks CTO Agent 2026-10-25 14:12:11 +00:00
  • 9f89f9fb6b docs(architecture): generalize sink concept — SAP is one of many sinks, add sink adapter contract CTO Agent 2026-10-25 14:11:34 +00:00
  • 7de9cbc6ec docs: README points to V1.1 as active architecture, V1.0 archived CTO Agent 2026-10-25 11:02:33 +00:00
  • 1d5950d32c docs(architecture): add V1.1 — Pocket-ID only, PII separation, Trillian, Content Binding, Replay CTO Agent 2026-10-25 11:02:04 +00:00
  • 6400f28bf0 docs(architecture): add trusted agent/SAP messaging architecture V1.0 CTO Agent 2026-10-25 10:15:41 +00:00
  • 872d75b5ec docs: initial README for ProofedMesh architecture base CTO Agent 2026-10-25 10:15:34 +00:00
  • a99e57718a Initial commit forgejoadmin 2026-10-25 10:13:26 +00:00