Commit Graph

Select branches

Hide Pull Requests

ci/probe-empty

ci/probe-none

ci/probe-noop

ci/probe-optout

ci/test-verdict

ci/verdict-probe

main

refusal-proof

site-incremental

wip/move-universe

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

mirror/ci/kms-v1-migration-f330d57

mirror/feat/delegate-mode-44d092f

mirror/feat/opt-in-multiarch-885d509

mirror/fix/provision-parse-toolchain-8ae1c46

mirror/main-eebaf17

probe-base

probe-final

v0.1.0

v0.2.0

v0.3.0

v1

v1-probe

v1.0.1

v1.0.10

v1.0.100

v1.0.101

v1.0.102

v1.0.103

v1.0.104

v1.0.105

v1.0.106

v1.0.107

v1.0.108

v1.0.109

v1.0.11

v1.0.110

v1.0.111

v1.0.112

v1.0.113

v1.0.114

v1.0.115

v1.0.116

v1.0.117

v1.0.118

v1.0.119

v1.0.12

v1.0.120

v1.0.121

v1.0.122

v1.0.123

v1.0.124

v1.0.125

v1.0.126

v1.0.127

v1.0.128

v1.0.129

v1.0.13

v1.0.130

v1.0.131

v1.0.132

v1.0.133

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.0.18

v1.0.19

v1.0.2

v1.0.20

v1.0.21

v1.0.22

v1.0.23

v1.0.24

v1.0.25

v1.0.26

v1.0.27

v1.0.28

v1.0.29

v1.0.3

v1.0.30

v1.0.31

v1.0.32

v1.0.33

v1.0.34

v1.0.35

v1.0.36

v1.0.37

v1.0.38

v1.0.39

v1.0.4

v1.0.40

v1.0.41

v1.0.42

v1.0.43

v1.0.44

v1.0.45

v1.0.46

v1.0.47

v1.0.48

v1.0.49

v1.0.5

v1.0.50

v1.0.51

v1.0.52

v1.0.53

v1.0.54

v1.0.55

v1.0.56

v1.0.57

v1.0.58

v1.0.59

v1.0.6

v1.0.60

v1.0.61

v1.0.62

v1.0.63

v1.0.64

v1.0.65

v1.0.66

v1.0.67

v1.0.68

v1.0.69

v1.0.7

v1.0.70

v1.0.71

v1.0.72

v1.0.73

v1.0.74

v1.0.75

v1.0.76

v1.0.77

v1.0.78

v1.0.79

v1.0.8

v1.0.80

v1.0.81

v1.0.82

v1.0.83

v1.0.84

v1.0.85

v1.0.86

v1.0.87

v1.0.88

v1.0.89

v1.0.9

v1.0.90

v1.0.91

v1.0.92

v1.0.93

v1.0.94

v1.0.95

v1.0.96

v1.0.97

v1.0.98

v1.0.99

v2

v2.1.0

v2.1.1

v2.1.2

v2.1.3

v2.1.4

v2.1.5

v2.1.6

v2.1.7

v2.1.8

v2.1.9

Mono Color

• 56fb655fc6 say Hanzo Git, which is what it is zeekay 2026-08-19 22:27:48 -07:00
• a393a8e376 read git.hanzo.ai with the token it already issues zeekay 2026-08-19 22:26:21 -07:00
• 9aa35288c9 site: read the published page back before calling the deploy done zeekay 2026-08-19 20:52:58 -07:00
• 7253cc21ea the board answers on a phone, and a pinned-back sidecar is not the service v1.0.74 zooqueen 2026-08-17 09:17:59 -07:00
• d05bc6dbbc ci.hanzo.ai answers whether what we wrote is what is running v1.0.73 zooqueen 2026-08-17 08:38:18 -07:00
• c26a5d840a a suite that reports its count against tests is counted v1.0.72 zooqueen 2026-08-16 23:54:12 -07:00
• 79af3932e0 the download address is the one a reader outside the cluster can reach v1.0.71 zooqueen 2026-08-16 23:23:37 -07:00
• 39b7371310 the release body is sent as the JSON it is v1.0.70 zooqueen 2026-08-16 23:01:28 -07:00
• 4404be4ad3 an asset is uploaded where the release says to put it, and a refusal says why v1.0.69 zooqueen 2026-08-16 22:30:01 -07:00
• 88a4c96a7a probe(none): a .gitmodules declaring nothing, and no test: key ci/probe-none zooqueen 2026-08-16 22:13:34 -07:00
• 0b03f1e5a4 skipping the tests and passing the tests now report differently v1.0.68 zooqueen 2026-08-16 11:39:05 -07:00
• 92aedda0b8 probe(optout): induce the shape and let the gate answer ci/probe-optout zooqueen 2026-08-16 22:10:02 -07:00
• f7d9df650f probe(empty): induce the shape and let the gate answer ci/probe-empty zooqueen 2026-08-16 22:09:55 -07:00
• b54313f581 probe(noop): induce the shape and let the gate answer ci/probe-noop zooqueen 2026-08-16 22:09:48 -07:00
• 14753264cf skipping the tests and passing the tests now report differently zooqueen 2026-08-16 11:39:05 -07:00
• 493b255114 a release is written with the credential the listening forge issued v1.0.67 zooqueen 2026-08-16 21:50:38 -07:00
• 27b6bd5bc6 build: carry a package-registry credential into buildx, apart from the image one zeekayandHanzo Dev 2026-08-16 14:41:07 -07:00
• 1b8beef92f probe: the shippable tree, with a submodule declared and not fetched ci/verdict-probe zooqueen 2026-08-16 11:39:48 -07:00
• db9aa820e1 skipping the tests and passing the tests now report differently zooqueen 2026-08-16 11:39:05 -07:00
• cb35bb790f the tools a pipeline needs are named where they are fetched, and a hole in the source says so probe-final zooqueen 2026-08-16 11:38:17 -07:00
• 9848dd94a5 probe: the caller opts out explicitly ci/test-verdict zooqueen 2026-08-16 11:35:16 -07:00
• 07f301e57e probe: a declared gate list with nothing in it zooqueen 2026-08-16 11:34:22 -07:00
• 900282b6a2 probe: a gate that says it tests and reports nothing zooqueen 2026-08-16 11:33:25 -07:00
• eafcbe63b5 probe: the test phase vanishes, as it did for 20 releases zooqueen 2026-08-16 11:32:35 -07:00
• a3f7cfda45 probe: name what the host served, and read the tools from this branch probe-base zooqueen 2026-08-16 11:29:40 -07:00
• a81a7a04dc the tools a pipeline runs are named where they are fetched, not discovered as exit 127 zooqueen 2026-08-16 11:28:31 -07:00
• e392102af1 probe: run this branch's own pipeline against itself zooqueen 2026-08-16 11:26:17 -07:00
• afe6103981 a gate that is skipped and a gate that passes now report differently zooqueen 2026-08-16 11:25:50 -07:00
• 91a593e289 policy files may quote the policy they define zeekayandHanzo Dev 2026-08-15 21:49:04 -07:00
• d368c916a9 go-cache: opt-in Go caching, because the cache server was there all along zeekayandHanzo Dev 2026-08-15 21:39:24 -07:00
• 4717f375d8 the hedge was the claim all along zeekayandHanzo Dev 2026-08-15 21:36:19 -07:00
• 9829aca6a4 delete the object-store publisher this lane no longer has zeekayandHanzo Dev 2026-08-15 20:19:53 -07:00
• 7c52a28508 one object-store publisher: this lane ships release assets and refuses bucket: zeekayandHanzo Dev 2026-08-15 09:13:57 -07:00
• 2693302ac6 the date in the filename is the exemption, not the folder it sits in zeekayandHanzo Dev 2026-08-15 09:00:02 -07:00
• da20f8cbfb refuse a build that claims a certification we cannot produce zeekayandHanzo Dev 2026-08-15 04:21:16 -07:00
• 4c69c753c7 the run:/out: lane indexes per FILE, so a release index is resolvable zeekayandHanzo Dev 2026-08-14 19:04:37 -07:00
• fc8fbf8f02 site v1.0.66 zeekayandHanzo Dev 2026-08-14 18:58:56 -07:00
• a8219111f6 Read the edge limit the way the edge reads it zooqueen 2026-08-14 15:34:29 -07:00
• 0cc1ea8a39 Measure a publish body against the edge before sending it zooqueen 2026-08-14 14:55:22 -07:00
• 50486290ad a 5xx from the Sites plane is not a lost build zooqueen 2026-08-14 11:41:12 -07:00
• 08cc3100d8 rustup is not the whole toolchain for a tree that binds C v1.0.65 zeekay 2026-08-14 10:57:48 -07:00
• 2cab645f22 An image that stamps its own version has to be told what it is v1.0.64 zeekayandHanzo Dev 2026-08-14 09:28:57 -07:00
• 3b40059e91 the site lane streams its export instead of posting it whole zooqueen 2026-08-14 09:23:12 -07:00
• 1d7bb2da24 The forge attempt carries a credential, so "forge first" is a behaviour v1.0.63 zeekayandHanzo Dev 2026-08-14 09:10:36 -07:00
• 79f9ad1995 One build can publish a site per brand v1.0.62 zeekayandHanzo Dev 2026-08-14 08:46:00 -07:00
• c9f2736df9 One build can publish a site per brand v1.0.61 zeekayandHanzo Dev 2026-08-14 08:44:00 -07:00
• 0bcaa0c8c1 a failed upload is measured as failure, not as a number v1.0.60 zooqueen 2026-08-13 23:32:04 -07:00
• ece7e9e4f4 the deploy key comes from KMS, for every site v1.0.59 zooqueen 2026-08-13 23:16:54 -07:00
• 795d3a8cb3 pin the deploy wire, and let the server own the cache policy zooqueen 2026-08-13 23:16:53 -07:00
• 658f3379f4 sitedeploy enqueues on the deployments collection zooqueen 2026-08-13 23:04:52 -07:00
• 11ef17773f the directory the forge stopped reading zeekay 2026-08-13 21:06:56 -07:00
• d59abd478b sitedeploy: the credential preflight loses its veto v1.0.58 zooqueen 2026-08-13 20:37:46 -07:00
• 6a06977f2d ask the proxy which of our modules it serves, and trust the rest to the forge v1.0.57 zeekayandHanzo Dev 2026-08-13 19:32:43 -07:00
• cb4c4bde81 resolve our modules by their namespace, not by who owns the repo v1.0.56 zeekayandHanzo Dev 2026-08-13 18:50:10 -07:00
• fd6116ea47 a mirror copy that did not land turns the run red v1.0.55 zeekayandHanzo Dev 2026-08-13 13:51:36 -07:00
• 627eae8668 the payload decides a move, because the event cannot be asked here v1.0.54 zeekay 2026-08-12 20:03:05 -07:00
• 0ac5e7c8c9 Build, publish, stop. Deploying is a change to what declares the workload. zooqueen 2026-08-11 16:26:04 -07:00
• f04bda98d6 the tools come from the forge, and hanzo/ci is not this repo zeekayandHanzo Dev 2026-08-10 18:38:36 -07:00
• 77b0201c51 sitedeploy: say the credential is dead instead of naming a header CI cannot set v1.0.53 zeekayandHanzo Dev 2026-08-10 18:28:20 -07:00
• 749d96543c one credential goes on the wire, so the one that is allowed is the one read v1.0.52 zeekayandHanzo Dev 2026-08-10 01:09:29 -07:00
• ef46aec156 the push back carries the credential that is allowed through a protected branch v1.0.51 zeekayandHanzo Dev 2026-08-10 01:03:15 -07:00
• a634a62e70 bun is a package manager corepack never shimmed, so provision it like the others v1.0.50 zeekay 2026-08-09 01:53:45 +00:00
• 38c4641aaa a polyglot repo keeps its module one level down, so the toolchain looks there too zeekay 2026-08-08 20:39:05 +00:00
• ba7a3fce23 the suite is executable like its siblings zeekayandHanzo Dev 2026-08-08 12:36:49 -07:00
• 11d8c34da0 the conflictmarkers suite runs with its siblings zeekay 2026-08-08 19:36:22 +00:00
• c85f1c399f pin conflictmarkers in both directions zeekay 2026-08-08 19:36:21 +00:00
• faa7f4f6af a fenced code block quotes the shape, it does not commit it zeekay 2026-08-08 19:36:20 +00:00
• b46f882ff7 the regenerated projection is pushed back to the forge it was generated on v1.0.49 zeekay 2026-08-08 12:08:55 -07:00
• d67e7f6769 the driver gets an interpreter that can read yaml v1.0.48 zeekay 2026-08-08 11:58:37 -07:00
• 714dd5327f the lane fetches the generator, so no call site has to guess a credential v1.0.47 zeekay 2026-08-08 11:46:59 -07:00
• d9260cfa02 remove promotion probe nonce zeekay 2026-08-08 16:43:53 +00:00
• 6d168d84ef ci: probe the fail-closed smoke->pin promotion (deleted next) zeekay 2026-08-08 16:27:40 +00:00
• f9c7ee8369 the last gate that read the pipeline's old address v1.0.46 zeekay 2026-08-08 06:45:25 -07:00
• 5b5a221a89 the detector stops reporting itself v1.0.45 zeekay 2026-08-08 06:41:51 -07:00
• 9e26629872 the projection asks for the release; nothing tells it v1.0.44 zeekay 2026-08-08 06:35:28 -07:00
• f939f5c973 the projection asks for the release; nothing tells it v1.0.43 zeekay 2026-08-08 06:33:24 -07:00
• 9586d04196 one address for the pipeline: .hanzo/workflows/build.yml zeekay 2026-08-08 06:13:10 -07:00
• 62a0cadcff the reusable's definition moves to the only path both forges resolve v1.0.42 zeekay 2026-08-08 05:59:18 -07:00
• 5da0bbab5f say which credential pushed, when it is the weak one v1.0.41 zeekayandHanzo Dev 2026-08-08 04:05:18 -07:00
• 2cf9db0cfe ghcr pushes as zeekay zeekayandHanzo Dev 2026-08-08 04:02:41 -07:00
• 82aa5b8f56 the native registry is oci.hanzo.ai, and the alias it replaced stopped resolving zeekay 2026-08-08 00:14:41 -07:00
• 71060ceeea one definition, two addresses: .github forwards to .hanzo zeekay 2026-08-07 21:27:27 -07:00
• bc429d9f3f the reusable lives at two paths — keep them one content zeekay 2026-08-07 21:24:17 -07:00
• f65ff41d3a stop publishing :latest — it named a race, and nobody read it v1.0.40 zeekayandHanzo Dev 2026-08-07 20:55:46 -07:00
• cad5e8cc95 one KMS tenant per brand family, matched by prefix zeekay 2026-08-07 15:26:24 -07:00
• 47dc97ab9e ask the door whether a publishable key still works v1.0.39 zeekayandHanzo Dev 2026-08-06 16:38:58 -07:00
• a1fc49eba5 Merge the GitHub line: one history, so a tag move survives the sync zeekay 2026-08-06 14:16:39 -07:00
• 829a6530d5 build: the forge lane is the lane that runs zeekay 2026-08-06 12:52:27 -07:00
• ff9a3e3fcc build: the registry credential is not an object-store credential zeekay 2026-08-06 12:35:47 -07:00
• f93bcad7f5 main is not the proof branch v1.0.38 zeekay 2026-08-06 12:01:54 -07:00
• 79b55c0ba4 the pipeline carries its own rule, because its tools come from somewhere else zeekay 2026-08-06 12:01:09 -07:00
• 69b954cc75 proof: delegate must gate before it delegates zeekay 2026-08-06 11:50:22 -07:00
• 85178e419c delegate chooses where the image is built, not whether it was tested v1.0.37 v1.0.36 zeekay 2026-08-06 11:38:34 -07:00
• 35f423c19c Merge pull request #11 from hanzoai/ci/site-zip-publish zeekayandGitHub 2026-08-06 02:10:27 -07:00
• bc232be6c5 Merge pull request #10 from hanzoai/ci/vendormark zeekayandGitHub 2026-08-06 02:10:23 -07:00
• f9d9217cde the site lane publishes with a credential that exists zeekayandHanzo Dev 2026-08-05 23:29:20 -07:00
• cb9dc77c42 refuse a site-generator vendor's branding, in all four places it hides zeekayandHanzo Dev 2026-08-05 16:56:10 -07:00
• 0e5c6c6818 ci: @v1, not @v2 — v2 is an alias for the v1 line zeekayandHanzo Dev 2026-08-05 15:56:51 -07:00
• 2896fb9c05 hanzo-inc resolves to the KMS org it actually seals to zeekayandHanzo Dev 2026-08-05 14:40:56 -07:00
• 27339494f7 a documented example is not an expression to evaluate v1.0.35 v1-probe zeekayandHanzo Dev 2026-08-05 14:28:04 -07:00