Repository navigation

feat(delivery): a GitOps rollout delivers the signed pair through the composition interface - #1240

Merged

antoinetoussaint-byte merged 28 commits into

mainfrom

handoff/wiki-builder-install-20261029

Oct 30, 2026

Merged

feat(delivery): a GitOps rollout delivers the signed pair through the composition interface#1240
antoinetoussaint-byte merged 28 commits into
mainfrom
handoff/wiki-builder-install-20261029

Commits on Oct 28, 2026
Commits on Oct 29, 2026
- revert(environment): withdraw the import retired-key change
  
  antoinetoussaint-byte
  and
  claude
  committed
  0d5d8e8
- feat(environment): retire a re-keyed service key on explicit operator intent
  
  antoinetoussaint-byte
  and
  claude
  committed
  38f57ff
- refactor(environments): drop the unused ServicesByName export
  
  antoinetoussaint-byte
  and
  claude
  committed
  436e15e
- docs(environment): state the real no-write boundary for retirement
  
  antoinetoussaint-byte
  and
  claude
  committed
  abb5fcf
- fix(environment): keep import flags and its inspection to one invocation
  
  antoinetoussaint-byte
  and
  claude
  committed
  612e81f
- fix(gitops): tell an identity workload where its projected token is
  
  antoinetoussaint-byte
  and
  claude
  committed
  683ce1e
- feat(gitops): carry the installation declaration on the Core signed carrier
  
  antoinetoussaint-byte
  and
  claude
  committed
  87658ff
- feat(gitops): carry the installation declaration on BOTH signed carriers
  
  antoinetoussaint-byte
  and
  claude
  committed
  22c1ff9
- test(gitops): prove the produced carriers agree under Authority's own rule
  
  antoinetoussaint-byte
  and
  claude
  committed
  8c81d3c
- test(gitops),docs: close the review's wire regression and documentation gaps
  
  antoinetoussaint-byte
  and
  claude
  committed
  99d36d2
- build: pin the released Core v0.19.17
  
  antoinetoussaint-byte
  and
  claude
  committed
  f74d6b4
- test(gitops): an installation-only change must advance the generation
  
  antoinetoussaint-byte
  and
  claude
  committed
  6088bf3
- feat(gitops): the cell names the delivery endpoint, so no consumer guesses it
  
  antoinetoussaint-byte
  and
  claude
  committed
  0e5f28e
- feat(delivery): prepare and send the signed pair, with the credential read at execution
  
  antoinetoussaint-byte
  and
  claude
  committed
  3c41a3a
- chore: preserve incomplete installation delivery job wiring for handoff
  antoinetoussaint-byte
  committed
  d08e327
- feat(gitops): a publish toward a composition host renders the paired delivery Job
  
  antoinetoussaint-byte
  and
  claude
  committed
  683af61
- Merge ghhttps/main into handoff/wiki-builder-install-20261029
  
  antoinetoussaint-byte
  and
  claude
  committed
  881da1e
- fix(gitops): the paired delivery Job runs codefly companion 0.0.7, the first that carries the verb
  
  antoinetoussaint-byte
  and
  claude
  committed
  03d7de9
- Merge ghhttps/main into handoff/wiki-builder-install-20261029
  
  antoinetoussaint-byte
  and
  claude
  committed
  1450b46
- refactor(environment): read the retirement inputs in one helper
  
  antoinetoussaint-byte
  and
  claude
  committed
  d5cff65
- fix(gitops): a paired document is signed once and carried to the executing publish
  
  antoinetoussaint-byte
  and
  claude
  committed
  caf06e4
- fix(gitops): a manifest entering paired settlement advances once, even unchanged
  
  antoinetoussaint-byte
  and
  claude
  committed
  5d77510
- fix(gitops): a prepared binding addressed to the installer itself is not installed
  
  antoinetoussaint-byte
  and
  claude
  committed
  09f3b30
Commits on Oct 30, 2026
- chore(audit): re-review the three suppressed findings at 2026-10-30
  
  antoinetoussaint-byte
  and
  claude
  committed
  4632b98

Navigation Menu

Repository navigation

feat(delivery): a GitOps rollout delivers the signed pair through the composition interface - #1240

feat(delivery): a GitOps rollout delivers the signed pair through the composition interface#1240
antoinetoussaint-byte merged 28 commits into
mainfrom
handoff/wiki-builder-install-20261029

Commits on Oct 28, 2026

fix(environments): hold scoped names to the selected environment too

test(environments): pin that the narrowing does not excuse the selected env

fix(environments): reach the real NewFlow seam, and retire a renamed key on import

docs(environment): say when an import retires a re-keyed service key

Commits on Oct 29, 2026

revert(environment): withdraw the import retired-key change

feat(environment): retire a re-keyed service key on explicit operator intent

refactor(environments): drop the unused ServicesByName export

docs(environment): state the real no-write boundary for retirement

fix(environment): keep import flags and its inspection to one invocation

fix(gitops): tell an identity workload where its projected token is

feat(gitops): carry the installation declaration on the Core signed carrier

feat(gitops): carry the installation declaration on BOTH signed carriers

test(gitops): prove the produced carriers agree under Authority's own rule

test(gitops),docs: close the review's wire regression and documentation gaps

build: pin the released Core v0.19.17

test(gitops): an installation-only change must advance the generation

feat(gitops): the cell names the delivery endpoint, so no consumer guesses it

feat(delivery): prepare and send the signed pair, with the credential read at execution

chore: preserve incomplete installation delivery job wiring for handoff

feat(gitops): a publish toward a composition host renders the paired delivery Job

Merge ghhttps/main into handoff/wiki-builder-install-20261029

fix(gitops): the paired delivery Job runs codefly companion 0.0.7, the first that carries the verb

Merge ghhttps/main into handoff/wiki-builder-install-20261029

refactor(environment): read the retirement inputs in one helper

fix(gitops): a paired document is signed once and carried to the executing publish

fix(gitops): a manifest entering paired settlement advances once, even unchanged

fix(gitops): a prepared binding addressed to the installer itself is not installed

Commits on Oct 30, 2026

chore(audit): re-review the three suppressed findings at 2026-10-30