Commit Graph

Select branches

Hide Pull Requests

commit-bottle-state

core-coverage-badge

cover-egress-addon-adapter

cover-global-90

decompose-egress-dlp-config

feat/pipelock-skip-scan-extensions

fix-integration-test-failures

fix/macos-container-relative-dockerfile

flatten-deep-nesting

harden-git-gate-shell-rendering

main

move-codex-auth-to-contrib

pr-211

prd-0049-named-labelled-agents

prd-0054-install-script

prd-egress-control-plane

prd-smolmachines-linux

ratchet-egress-addon-90

ratchet-egress-core-90

ratchet-git-gate-90

ratchet-manifest-90

ratchet-supervise-90

ratchet-yaml-subset-90

table-drive-dlp-tests

#1

#10

#101

#102

#103

#107

#108

#11

#110

#114

#115

#119

#12

#121

#123

#124

#127

#13

#131

#132

#133

#14

#141

#142

#143

#144

#145

#146

#147

#149

#15

#151

#153

#16

#161

#162

#163

#164

#165

#166

#167

#168

#17

#170

#172

#173

#175

#176

#179

#18

#180

#181

#182

#183

#184

#186

#187

#188

#189

#19

#190

#191

#192

#193

#196

#199

#2

#20

#200

#201

#202

#203

#205

#207

#209

#21

#210

#211

#212

#214

#216

#219

#22

#222

#224

#225

#227

#228

#229

#23

#231

#232

#234

#235

#238

#239

#24

#240

#241

#242

#244

#246

#248

#25

#250

#26

#260

#262

#263

#264

#265

#266

#267

#27

#270

#271

#272

#273

#274

#275

#276

#278

#279

#28

#280

#282

#284

#285

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#76

#78

#79

#8

#80

#81

#83

#85

#87

#89

#9

#91

#92

#93

#95

#97

#98

#99

Mono Color

• d89d389bef ci(coverage): add auto-updated "core coverage" badge core-coverage-badge didericis 2026-06-26 02:19:35 -04:00
• 8caa79ee76 test(supervise): ratchet supervise coverage to >=90% ratchet-supervise-90 didericis 2026-06-25 22:19:37 -04:00
• 74060192e0 test(manifest): ratchet manifest + manifest_agent to >=90% ratchet-manifest-90 didericis 2026-06-25 22:15:07 -04:00
• 5365a7a852 test(git-gate): ratchet git_gate coverage to >=90% ratchet-git-gate-90 didericis 2026-06-25 22:11:19 -04:00
• f289b6382c test(egress): ratchet egress_addon_core coverage to >=90% ratchet-egress-core-90 didericis 2026-06-25 22:04:27 -04:00
• 3073230f58 test(yaml): ratchet yaml_subset coverage to >=90% ratchet-yaml-subset-90 didericis 2026-06-25 22:00:17 -04:00
• 18059f2a78 test(egress): ratchet egress_addon coverage to >=90% ratchet-egress-addon-90 didericis 2026-06-25 21:54:36 -04:00
• 632ab002ed ci(coverage): risk-weighted coverage policy + diff-coverage gate cover-global-90 didericis 2026-06-25 21:29:08 -04:00
• c97c01d300 test(dlp): table-drive token-pattern detector cases table-drive-dlp-tests didericis 2026-06-25 19:41:17 -04:00
• 4ab48a77ff refactor(tui): flatten _multiselect_loop key handling flatten-deep-nesting didericis 2026-06-25 19:38:46 -04:00
• 1659f738ef refactor(egress): split DLP detector-config parsing into its own module decompose-egress-dlp-config didericis 2026-06-25 19:35:40 -04:00
• af7f74dc32 test(egress): cover egress_addon adapter; drop coverage omit cover-egress-addon-adapter didericis 2026-06-25 19:31:21 -04:00
• 99ba532783 docs(prd): add PRD for egress control plane prd-egress-control-plane didericis 2026-06-25 19:13:28 -04:00
• 49c2ed0b93 feat(smolmachines): run backend on Linux prd-smolmachines-linux didericis 2026-06-25 16:49:04 -04:00
• a666f9fe54 docs(prd): add PRD for smolmachines backend on Linux didericis 2026-06-25 16:49:04 -04:00
• eaf6b1f72e ci(prd): assign sequential numbers to new PRDs main github-actions[bot] 2026-06-25 20:43:06 +00:00
• ca910f8f4f fix(start): show bottle lineage root-first with -> arrows didericis 2026-06-25 08:07:12 -04:00
• 338c08a243 test: fix cli selector typing didericis-codex 2026-06-25 08:53:57 +00:00
• 6faa6f67aa feat(tui,start): space/enter split, bottle lineage, YAML preflight didericis-claude 2026-06-25 07:56:05 +00:00
• b6ae6af63a fix(types): resolve pyright errors introduced in #269 changes didericis-claude 2026-06-25 07:08:57 +00:00
• ad72eeddc1 feat(tui): add reordering to filter_multiselect didericis-claude 2026-06-25 07:00:19 +00:00
• 61f89de2da docs(prd): activate PRD for separate agent/bottle selection didericis-claude 2026-06-25 06:55:13 +00:00
• 1ba185d1e0 feat(#269): separate agent and bottle selection at launch time didericis-claude 2026-06-25 06:55:06 +00:00
• e82dbaba09 docs(prd): draft PRD for separate agent/bottle selection didericis-claude 2026-06-25 06:45:58 +00:00
• d7fbe8e8a9 chore: update quality badges Quality Badge Bot 2026-06-25 20:11:29 +00:00
• 50f5b3aa7f ci(badges): add coverage percentage to quality badges didericis 2026-06-25 15:13:44 -04:00
• 45a096413f fix: add type annotations to __exit__ context manager (pyright) didericis-claude 2026-06-25 14:27:47 -04:00
• c6479d62e4 test: add coverage for git gate and supervise server didericis 2026-06-25 05:45:16 -04:00
• d0cad3a559 chore: ignore coverage data didericis 2026-06-25 05:25:01 -04:00
• c2ddac1be5 test: fix integration coverage failures didericis 2026-06-25 04:39:43 -04:00
• 446414144e test: tune coverage exclusions didericis 2026-06-25 05:08:54 -04:00
• 8188d6304e ci: add coverage.py reporting didericis 2026-06-25 04:08:21 -04:00
• 88f58bf4c0 merge: update tests/unit/test_supervise_server.py from issue-277-coverage-ci fix-integration-test-failures didericis-claude 2026-06-25 14:31:36 -04:00
• ca0dc72b89 merge: update bot_bottle/cli/supervise.py from issue-277-coverage-ci didericis-claude 2026-06-25 14:31:32 -04:00
• 2fc99ea098 merge: update .gitignore from issue-277-coverage-ci didericis-claude 2026-06-25 14:31:29 -04:00
• 9a9235f2af merge: update .coveragerc from issue-277-coverage-ci didericis-claude 2026-06-25 14:31:27 -04:00
• 9f7c067e85 ci(prd): assign sequential numbers to new PRDs github-actions[bot] 2026-06-25 11:42:07 +00:00
• 90e84a52e6 fix: remove unused supervise import for pyright didericis-codex 2026-06-25 05:45:55 -04:00
• 75755a472f refactor: drop redundant single-parent fast path in _resolve_one_bottle didericis-claude 2026-06-25 07:27:31 +00:00
• 2f3dc57fa9 fix: resolve pyright reportUnnecessaryIsInstance in _resolve_one_bottle didericis-claude 2026-06-25 07:08:37 +00:00
• 302920e290 feat: support multiple parents in bottle extends: didericis-claude 2026-06-25 07:01:31 +00:00
• ca1b4afaea chore: update quality badges Quality Badge Bot 2026-06-25 09:06:44 +00:00
• d2072b13be feat!: remove capability apply didericis-codex 2026-06-25 08:58:28 +00:00
• 42f79283f0 test: fix integration coverage failures didericis 2026-06-25 04:39:43 -04:00
• 36c5b7025b feat: add ripgrep to agent images didericis-codex 2026-06-25 08:23:37 +00:00
• 515a95a79d fix: escape quotes/newlines in YAML and gitconfig emitters didericis-claude 2026-06-25 07:42:31 +00:00
• 0bace7615a refactor: rename GIT_GATE_DAEMON_TIMEOUT_SECS to GIT_GATE_TIMEOUT_SECS didericis-claude 2026-06-25 07:07:44 +00:00
• c0d3f16519 refactor: import GIT_GATE_DAEMON_TIMEOUT_SECS instead of duplicating the value didericis-claude 2026-06-25 07:03:18 +00:00
• 508c537deb fix: add explicit timeouts to subprocess and HTTP calls in git-gate paths didericis-claude 2026-06-25 06:59:09 +00:00
• d6b9d7af3e ci: add coverage.py reporting didericis 2026-06-25 04:08:21 -04:00
• d99dba037c feat(supervise): typed RPC error taxonomy for dispatch didericis-claude 2026-06-25 07:41:54 +00:00
• 9a878bd885 fix: guard CGI Status-line parse in _write_cgi_response didericis-claude 2026-06-25 07:11:32 +00:00
• 0f72843150 fix(macos-container): anchor relative Dockerfile path to build context fix/macos-container-relative-dockerfile didericis 2026-06-25 03:03:08 -04:00
• fd6b14fb32 fix: route remote control through provider startup args didericis 2026-06-25 00:30:50 -04:00
• 9f9aa2e762 refactor: remove load_routes, use load_config(...).routes in tests didericis-claude 2026-06-25 06:07:47 +00:00
• 454baaf3a1 fix(egress): validate proposed full config didericis-codex 2026-06-25 05:25:42 +00:00
• 8a092504b8 ci(prd): assign sequential numbers to new PRDs github-actions[bot] 2026-06-25 04:50:36 +00:00
• e7dacf7d86 fix: satisfy pyright for log redaction tests didericis-codex 2026-06-25 03:07:03 +00:00
• 9b929d0684 fix(egress): strip injected Authorization and redact bodies in LOG_FULL path didericis-claude 2026-06-25 02:39:54 +00:00
• ec41f629a4 ci(prd): assign sequential numbers to new PRDs github-actions[bot] 2026-06-25 04:19:30 +00:00
• d9a9eef276 docs: remove prd-new code citations didericis-codex 2026-06-25 03:57:41 +00:00
• 5204b98777 refactor(egress): centralize launch env entries didericis-codex 2026-06-25 03:35:24 +00:00
• 14ae89580a fix(egress): wire canary env for smolmachines didericis-codex 2026-06-25 03:31:51 +00:00
• 4808ef557a fix(egress): randomize canary secret env name didericis-codex 2026-06-25 03:25:23 +00:00
• 0a7e166b35 fix(tests): remove unused dlp entropy import didericis-codex 2026-06-25 02:48:49 +00:00
• a920203730 fix(dlp): skip projection passes when exact variant is safe-listed didericis-claude 2026-06-25 02:33:34 +00:00
• e02fab15d0 docs(prd): flip prd-new-strengthen-outbound-exfil-detection Draft → Active didericis-claude 2026-06-25 01:02:55 +00:00
• 11cf12188d feat(egress): inject per-session canary token into sidecar and agent environments didericis-claude 2026-06-25 01:02:44 +00:00
• 701df6cb2f feat(dlp): fragmentation resistance, entropy detector, broadened known-value scan didericis-claude 2026-06-25 01:02:34 +00:00
• ea6bc5a170 docs: draft PRD prd-new for strengthen-outbound-exfil-detection didericis-claude 2026-06-25 00:54:28 +00:00
• ecaae708f7 feat(provider): support startup args settings didericis 2026-06-24 22:51:27 -04:00
• 2e790268b0 fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts didericis-claude 2026-06-25 02:23:12 +00:00
• a421d1d688 Rename TOOL_ALLOW to TOOL_EGRESS_ALLOW didericis-claude 2026-06-25 01:23:10 +00:00
• d2d50be65a Restructure PRD 0062 to the init-prd template didericis 2026-06-24 21:10:31 -04:00
• 1ad710a041 Default agent-provider routes to the redact on-match policy didericis 2026-06-24 20:40:36 -04:00
• b411577e76 Stop scanning the request body for CRLF injection didericis 2026-06-24 20:37:26 -04:00
• cdfaaa3de8 Add dlp.outbound_on_match policy (block | redact | supervise) didericis 2026-06-24 16:50:13 -04:00
• 7f2352287e PRD 0062: supervisor override for egress token blocks didericis 2026-06-24 16:12:50 -04:00
• 7cb967770e feat(log): add leveled severity and structured context to log wrappers didericis 2026-06-24 15:37:57 -04:00
• 80eca740d6 docs(research): replace unsourced "20% malicious skills" with cited empirical figures didericis 2026-06-24 09:32:19 -04:00
• bd663196dc docs: reposition README around provider-neutral secure substrate prd-0054-install-script didericis 2026-06-24 01:21:05 -04:00
• 6b0de88be6 docs: activate install script prd didericis-codex 2026-06-10 05:38:05 +00:00
• 9a941e59be feat: add install script packaging didericis-codex 2026-06-10 05:37:53 +00:00
• d7a3539755 ci(prd): rename PRD to prd-new placeholder per new convention didericis 2026-06-06 22:10:15 -04:00
• cfe57a50d0 docs(prd): renumber PRD 0054 → 0057 (0054 slot taken by named-labelled-agents) didericis 2026-06-06 16:25:46 -04:00
• e5d551861c docs(prd): PRD 0054 - install script didericis 2026-06-06 15:59:24 -04:00
• 369d332204 Default the supervise flag to true didericis 2026-06-23 20:48:04 -04:00
• 31cde11b0d docs: correct stale role field and claude provider auth example didericis 2026-06-23 17:53:18 -04:00
• c41751f3b9 docs: add role and git.fetch to egress route fields table didericis-claude 2026-06-22 18:31:32 +00:00
• e2422c20a0 docs: document egress matches, dlp fields, and detector defaults didericis 2026-06-06 16:10:30 -04:00
• de71533a17 ci(prd): assign sequential numbers to new PRDs github-actions[bot] 2026-06-23 21:47:01 +00:00
• 88c4f61901 fix: don't archive gitleaks-allow response before gate reads it didericis-claude 2026-06-23 02:05:40 +00:00
• c666eaa63f fix: add TOOL_GITLEAKS_ALLOW to __all__ in supervise.py didericis-claude 2026-06-23 01:43:24 +00:00
• 83eb9e4041 docs(prd): add gitleaks allow supervision didericis-codex 2026-06-10 07:26:10 +00:00
• 33333ac4d9 Supervise gitleaks inline allow exceptions didericis-codex 2026-06-10 07:21:57 +00:00
• 4d56f515bc ci(prd): assign sequential numbers to new PRDs github-actions[bot] 2026-06-23 21:32:54 +00:00
• c48c3688b8 fix(smolmachines): exclude /tmp+/var/tmp from snapshot; mkdir -p on boot commit-bottle-state didericis-claude 2026-06-23 18:06:41 +00:00
• 6040b20e6e fix(smolmachines): write tar to VM file then machine_cp to host didericis-claude 2026-06-23 16:37:43 +00:00
• f2775101a0 fix(smolmachines): pipe tar stdout via PIPE not file fd didericis-claude 2026-06-23 09:15:17 +00:00
• dd99c495f4 fix(smolmachines): use sh -c not sh -lc in exec_agent didericis-claude 2026-06-23 09:04:35 +00:00