|
|
|
.. |
|
|
|
|
carve-host-interfaces
|
Delivery batch: lib-hosts VR1 arms, D-133 guards, appendix-A pf entry, DoD 8-9 (gauntlet 77 GREEN)
|
6 days ago
|
|
|
checks
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
claude-guard
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
clientdocs-scripts
|
addendum 30: client handover package complete -- DOCFIX-108 starter kit + DOCFIX-109 tenant AI skill (union-merged, deduped), L7 coverage recursive, receipt 29 files, gauntlet 37/37
|
22 days ago
|
|
|
clientdocs-skill
|
addendum 46: DOCFIX-128 -- handover package consolidation phase 1 (glossary folded into handover-pack, glossary.md removed, account-table hard de-dup, no extra files); skill rewrite phase 2 next
|
21 days ago
|
|
|
cloud-assert
|
Four gate-integrity defects fixed, each demonstrated RED then GREEN
|
5 hours ago
|
|
|
cloud-snapshot
|
addendum 28: operator-away batch integrated -- DOCFIX-098..105 (H4 drift detector, offboard orphan sweep + E0 guard, handover pack, cloud-snapshot, tenant-acceptance harness, lint L7 sweep rule, ledger-scan 099-boundary fix)
|
22 days ago
|
|
|
cloudinit-vm
|
G12 dc1 step B COMPLETE: transit live, rack enrolled, SEC-010 both ends, 26.7 staged
|
7 days ago
|
|
|
creds-audit
|
D-137 phase 2: fix the eight confirmed false-greens, regression-lock each
|
3 days ago
|
|
|
creds-matrix
|
F6: P5 was measuring the wrong host's filesystem and reporting it as fact
|
6 hours ago
|
|
|
creds-probe
|
D-137 tier 3 behavioural half: V2 declared-state + creds-probe.sh
|
2 days ago
|
|
|
d063-apply
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
d115-office-carve
|
D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
|
15 days ago
|
|
|
d120-compose-bands
|
C2 sub-task (ii): extend sandbox loop to ip-ranges/ip-addresses; load + verify D-120 bands
|
14 days ago
|
|
|
d124-transit-seed
|
Block B complete: d124-transit-seed tooling + full D-124 NetBox import
|
12 days ago
|
|
|
dc-cache-proxy
|
Four gate-integrity defects fixed, each demonstrated RED then GREEN
|
5 hours ago
|
|
|
dc-dc-ceph-disk-budget
|
D-119: region-qualify the VR1 DC namespace -- C3 / gap #19 CLOSED (Stage 3 unblocked)
|
15 days ago
|
|
|
dc-dc-dr-drill
|
G12 dc1: item-3 substrate landed + harness reconcile (gauntlet 76 ALL GREEN)
|
7 days ago
|
|
|
dc-dc-mtu-geneve-budget
|
DOCFIX-162: MTU/geneve + Ceph disk-budget calculator scripts (gap #7)
|
19 days ago
|
|
|
dc-dc-prefixes-import
|
D-120 ADOPTED + EXECUTED: re-IP Office1 services into the .2-.49 static band
|
14 days ago
|
|
|
dc-dc-radosgw-multisite
|
G12 dc1: item-3 substrate landed + harness reconcile (gauntlet 76 ALL GREEN)
|
7 days ago
|
|
|
dc-dc-rbd-mirror
|
G12 dc1: item-3 substrate landed + harness reconcile (gauntlet 76 ALL GREEN)
|
7 days ago
|
|
|
dc-dc-whole-host-budget
|
Review sweep A+B + R-3 storage-04: coherent record, whole-host calculator, R-3-compliant Model A fallback
|
13 days ago
|
|
|
dc-edge-wan-import
|
Stage 3 (vr1-dc0) prep batch: D-121..D-124 rulings + substrate/rack wiring, HA overlay, NetBox importers
|
13 days ago
|
|
|
dc-mirror
|
Stage 4 close-out: fix dc-mirror.sh check false-greening the mirror gate
|
2 days ago
|
|
|
dc-node-v6-carve
|
dc-node-v6-carve harness 9/9; manifest re-recorded (84)
|
1 day ago
|
|
|
dc-plane-ipam
|
dc1 FIP pool RULED 10.12.65.0-10.12.67.254 (GA-R5); lib-net dc1 arm + assertions re-pointed
|
1 day ago
|
|
|
dc-rack-mgmt-import
|
G12 dc1: apex confirm-free captured; dc-rack-mgmt-import gains per-site (--site) dc1 support
|
7 days ago
|
|
|
dc-rack-net
|
G12 dc1: dc-rack-net.sh dc1 site-table arm + harness (D-131 sub-1)
|
6 days ago
|
|
|
dc-selector
|
P4 is DC-aware, 3.7 closed, and lib-net's dc1 arm populated
|
5 hours ago
|
|
|
juju-spaces-check
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
keystone-policy-drift
|
addendum 28: operator-away batch integrated -- DOCFIX-098..105 (H4 drift detector, offboard orphan sweep + E0 guard, handover pack, cloud-snapshot, tenant-acceptance harness, lint L7 sweep rule, ledger-scan 099-boundary fix)
|
22 days ago
|
|
|
ledger-scan
|
Session bookend: queue-pass CLOSED (ledger summary, changelog archived, scan fix)
|
6 days ago
|
|
|
lib-validate
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
maas-node-power
|
NEW: maas-node-power.sh (+harness 24/24) -- per-machine virsh power, MAC-matched
|
9 days ago
|
|
|
maas-role-tags
|
maas-role-tags owns the D-104 controller tag too; harness 11 -> 12
|
16 hours ago
|
|
|
netem-link
|
Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual)
|
8 days ago
|
|
|
netem-sudoers
|
Step-E netem sudo: scoped NOPASSWD fragment shipped (operator-ruled)
|
8 days ago
|
|
|
node-vm
|
Pin juju-01 MACs, add both controllers to lib-hosts at the ruled .5
|
17 hours ago
|
|
|
office1-record-dump
|
netbox: office1-record dumper (source separation) + current apex snapshot
|
4 days ago
|
|
|
opentofu-validate
|
D-127 IaC autostart matrix baked into deploy tooling + Office1 guest updates
|
12 days ago
|
|
|
opnsense-api
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
opnsense-bootstrap-apikey
|
Queue pass: post-G12 queued findings delivered (5 script/harness fixes + DOCFIX-198/-199)
|
6 days ago
|
|
|
opnsense-plugins
|
FIX false-success: opnsense-plugins.sh apply ALWAYS dry-ran (DRY_RUN:+ expands on 0)
|
9 days ago
|
|
|
opnsense-prep-image
|
Queue pass: post-G12 queued findings delivered (5 script/harness fixes + DOCFIX-198/-199)
|
6 days ago
|
|
|
opnsense-set-interface-v4
|
set-interface-v4: reload the pf filter on --commit (RULED); appendix-A rewritten
|
2 days ago
|
|
|
opnsense-set-interface-v6
|
opnsense-set-interface-v6: script the LAN IPv6 the REST API cannot set (D-113 amendment)
|
15 days ago
|
|
|
phase-00-maas-standup
|
G12 dc1: item-3 substrate landed + harness reconcile (gauntlet 76 ALL GREEN)
|
7 days ago
|
|
|
phase-00-teardown-d061
|
Patches
|
26 days ago
|
|
|
phase-02
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-03
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-03-adminrc
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-04
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-04-create
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-04-internal-cert-san
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-05
|
Octavia: R8a BUILT (record was false), two stale surfaces, R7 generator de-frozen
|
19 hours ago
|
|
|
phase-05-amphora
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-bootstrap
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-capi-stack
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-k8s-bootstrap
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-kubeconfig-gate
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-mgmt-vm
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-06-net-setup
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
phase-07-conductor-graft
|
D-113(a2) step 1: thin OPNsense REST API client + harness
|
16 days ago
|
|
|
pre-flight-checks
|
P4 is DC-aware, 3.7 closed, and lib-net's dc1 arm populated
|
5 hours ago
|
|
|
preflight
|
P4 is DC-aware, 3.7 closed, and lib-net's dc1 arm populated
|
5 hours ago
|
|
|
prereqs
|
Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
|
16 days ago
|
|
|
provider-bundle-check
|
Four gate-integrity defects fixed, each demonstrated RED then GREEN
|
5 hours ago
|
|
|
record-audit
|
Batch 6: exit runs 1/2/4/5 -- archive exclusion (operator-ruled), adjudication, plan==triple, S2
|
10 days ago
|
|
|
reenroll-hosts
|
Delivery batch: lib-hosts VR1 arms, D-133 guards, appendix-A pf entry, DoD 8-9 (gauntlet 77 GREEN)
|
6 days ago
|
|
|
render-baseline
|
Ruling 3 commit 1: bundle.yaml is VIP-free; dc0's VIPs are now a RENDERED overlay
|
21 hours ago
|
|
|
render-dc-overlays
|
Four gate-integrity defects fixed, each demonstrated RED then GREEN
|
5 hours ago
|
|
|
render-drift
|
D-136 step 6: the chain audit -- R9's drift gate built, three refusals, two dead cases
|
19 hours ago
|
|
|
repo-lint
|
R15(1): repo-lint can no longer report PASS over zero files
|
1 day ago
|
|
|
roles-aggregates-import
|
C4 DONE: document the NetBox sandbox loop; add the upstream-write guard it exposed
|
14 days ago
|
|
|
sandbox-fidelity-check
|
C2 sub-task (ii): extend sandbox loop to ip-ranges/ip-addresses; load + verify D-120 bands
|
14 days ago
|
|
|
sandbox-seed
|
Prove the sandbox is a FAITHFUL replica, not just a count-matching one
|
15 days ago
|
|
|
site-baseleg
|
D-126 base-leg oneshot (site-baseleg.sh) + D-128 operating model; post-restart sweep
|
11 days ago
|
|
|
site-forward
|
D-126: durable rootless agent access to VR1 site VMs (shell + forward) + DC creds prep
|
13 days ago
|
|
|
site-headend-install
|
Four gate-integrity defects fixed, each demonstrated RED then GREEN
|
5 hours ago
|
|
|
site-ssh-config
|
D-126: durable rootless agent access to VR1 site VMs (shell + forward) + DC creds prep
|
13 days ago
|
|
|
tenant-acceptance
|
addendum 28: operator-away batch integrated -- DOCFIX-098..105 (H4 drift detector, offboard orphan sweep + E0 guard, handover pack, cloud-snapshot, tenant-acceptance harness, lint L7 sweep rule, ledger-scan 099-boundary fix)
|
22 days ago
|
|
|
tenant-assert
|
addendum 27: d011-batch3 window EXECUTED -- D-073 APPLIED, foil1 onboarded, d011-04/05 PASS, D-011 closed-except-item-6; DOCFIX-095/096/097
|
23 days ago
|
|
|
tenant-offboard
|
DOCFIX-131: tenant-offboard.sh Phase A cluster captures stdout-only
|
21 days ago
|
|
|
tenant-onboard
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
trust_filter
|
DOCFIX-132/133: S-class cleanups -- S7 dead code + S4 trust_filter.py consolidation
|
21 days ago
|
|
|
validate
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
vault-kv-health
|
addendum 33: script-quality fix batch DOCFIX-112..117 -- anti-escalation guard fail-closed (SECURITY), tenant-offboard hardening cluster, validate/juju-spaces fail-opens, pipefail sweep, guard-hook extension; deferred-findings register; ledger REMAINING-OPEN-WORK block
|
22 days ago
|
|
|
HARNESS-MANIFEST
|
P4 is DC-aware, 3.7 closed, and lib-net's dc1 arm populated
|
5 hours ago
|
