Codex
|
283dec58ab
|
fix(hermes): enforce minimum heartbeat lease duration
|
2026-07-21 13:21:09 +08:00 |
|
Codex
|
7de1fe80ac
|
docs(hermes): retain key-id and rollback contracts
|
2026-07-21 13:19:21 +08:00 |
|
Codex
|
89a502b39b
|
test(hermes): preserve validated ten-case release gate
|
2026-07-21 13:19:21 +08:00 |
|
Codex
|
61bec280e2
|
deploy(hermes): preserve bounded rollback readiness
|
2026-07-21 13:19:21 +08:00 |
|
Codex
|
1791c91c5b
|
docs(hermes): define lifecycle contract and validation state
|
2026-07-21 13:13:15 +08:00 |
|
Codex
|
e8c0f0250b
|
test(hermes): cover live lifecycle and recovery matrix
|
2026-07-21 13:09:06 +08:00 |
|
Codex
|
94718308fc
|
fix(hermes): normalize trusted runtime headers and conflicts
|
2026-07-21 13:09:06 +08:00 |
|
Codex
|
a4cbed0f5f
|
feat(hermes): persist and protect full runtime lifecycle
|
2026-07-21 13:09:06 +08:00 |
|
Codex
|
25c7740739
|
docs(hardening): refresh Gate A report with verified execution results
|
2026-07-21 12:39:53 +08:00 |
|
Codex
|
8bbb049c39
|
docs(hardening): index ADR-009 without inventing missing history
|
2026-07-21 12:36:22 +08:00 |
|
Codex
|
1707cc4953
|
docs(hardening): rebuild complete UR-001 to UR-022 traceability
|
2026-07-21 12:34:50 +08:00 |
|
Codex
|
e397594200
|
docs(hardening): add Run Provenance and scoped Grant requirements
|
2026-07-21 12:31:58 +08:00 |
|
Codex
|
68b7f2c1d2
|
docs(hardening): align module contracts with hardened runtime and Grant model
|
2026-07-21 12:28:25 +08:00 |
|
Codex
|
fda98e61f5
|
docs(hardening): record least-privilege Provenance decision
|
2026-07-21 12:16:22 +08:00 |
|
Codex
|
ea9f599522
|
fix(hardening): scope CLI authorization to one Grant
|
2026-07-21 12:13:21 +08:00 |
|
Codex
|
1aabcd8b62
|
test(hardening): add least-privilege Grant isolation coverage
|
2026-07-21 12:04:02 +08:00 |
|
Codex
|
4d68af9524
|
test(hardening): upgrade runtime flows and add dispatch recovery coverage
|
2026-07-21 12:01:17 +08:00 |
|
Codex
|
467b127804
|
fix(hardening): give application a safe default Grant scope
|
2026-07-21 11:57:32 +08:00 |
|
Codex
|
50a73b211b
|
fix(hardening): bind dispatch and runtime results to principal
|
2026-07-21 11:55:07 +08:00 |
|
Codex
|
f14d4b6e14
|
feat(hardening): persist principal and runtime lookup in dispatch store
|
2026-07-21 11:51:01 +08:00 |
|
Codex
|
fc8bd8c8d4
|
feat(hardening): build scoped Grant writers per service
|
2026-07-21 11:48:11 +08:00 |
|
Codex
|
382fe662a3
|
feat(hardening): add service-scoped least-privilege writer
|
2026-07-21 11:45:46 +08:00 |
|
Codex
|
4754e5762a
|
fix(hardening): use constant-time fingerprint comparison
|
2026-07-21 11:42:08 +08:00 |
|
Codex
|
ce7d35a811
|
config(hardening): add seven least-privilege Grant references
|
2026-07-21 11:37:58 +08:00 |
|
Codex
|
60ac7d9d0b
|
refactor(hardening): make evidence tracking use least-privilege authorization interface
|
2026-07-21 11:34:43 +08:00 |
|
Codex
|
2a10d1cdd9
|
feat(hardening): add workflow and least-privilege Grant CLI
|
2026-07-21 11:31:51 +08:00 |
|
Codex
|
677ea738e7
|
fix(hardening): authorize Git content before modifying index
|
2026-07-21 11:27:28 +08:00 |
|
Codex
|
7154d62cca
|
fix(hardening): export OpenClaw Ed25519 contract types
|
2026-07-21 11:24:35 +08:00 |
|
Codex
|
4e154c8baf
|
feat(hardening): wire durable dispatch least-privilege grants and internal reconcile
|
2026-07-21 11:20:39 +08:00 |
|
Codex
|
b848361079
|
feat(hardening): require least-privilege grants in production writer
|
2026-07-21 11:17:39 +08:00 |
|
Codex
|
74224cfbd5
|
feat(hardening): add least-privilege provenance child grants
|
2026-07-21 11:14:42 +08:00 |
|
Codex
|
a7c09ba646
|
feat(hardening): upgrade OpenClaw command contract to Ed25519 v2
|
2026-07-21 11:10:21 +08:00 |
|
Codex
|
f055cb74bb
|
feat(hardening): persist dispatches and strictly bind runtime results
|
2026-07-21 11:04:59 +08:00 |
|
Codex
|
071a378de6
|
fix(hardening): close public runtime lifecycle bypass
|
2026-07-21 11:00:28 +08:00 |
|
Codex
|
a492b15df6
|
feat(hardening): add durable dispatch repository
|
2026-07-21 10:53:32 +08:00 |
|
Codex
|
a9f0a4359b
|
patch(chatgpt): start full Gate A hardening
|
2026-07-21 10:46:59 +08:00 |
|
Codex
|
6a9fab894a
|
docs(traceability): add run provenance implementation matrix
|
2026-07-21 10:30:54 +08:00 |
|
Codex
|
e9111dea47
|
deploy(provenance): add mandatory operation authorization wrapper
|
2026-07-21 10:30:40 +08:00 |
|
Codex
|
d25fbfa61e
|
test(provenance): add signature lifecycle replay and seven-path gate coverage
|
2026-07-21 10:21:01 +08:00 |
|
Codex
|
6b03c47625
|
build(provenance): install Ed25519 runtime dependency
|
2026-07-21 10:16:28 +08:00 |
|
Codex
|
770fe1ef66
|
docs(aios-v2): add ADR-007 run provenance control
|
2026-07-21 10:12:03 +08:00 |
|
Codex
|
7a025430f9
|
config(provenance): add production environment references
|
2026-07-21 10:11:56 +08:00 |
|
Codex
|
d079da4029
|
feat(provenance): export trusted provenance APIs
|
2026-07-21 10:11:49 +08:00 |
|
Codex
|
b8f7dc4112
|
feat(provenance): wire production gate into API application
|
2026-07-21 10:07:19 +08:00 |
|
Codex
|
947cdaff42
|
feat(provenance): add issuer authorization revoke and status CLI
|
2026-07-21 10:00:02 +08:00 |
|
Codex
|
83b0c8bd74
|
feat(provenance): add deployment and rollback operation gate factory
|
2026-07-21 09:56:50 +08:00 |
|
Codex
|
fbd880cf8c
|
feat(provenance): add controlled Git writer with operation policy
|
2026-07-21 09:46:40 +08:00 |
|
Codex
|
819ac94c9f
|
feat(provenance): enforce authorization before evidence writes
|
2026-07-21 09:42:25 +08:00 |
|
Codex
|
b02401e60d
|
feat(provenance): enforce signed provenance before runtime dispatch
|
2026-07-21 09:39:33 +08:00 |
|
Codex
|
cbb2e232f5
|
feat(provenance): implement Ed25519 issuer persistent store and seven-path writer
|
2026-07-21 09:33:07 +08:00 |
|