2026-05-04 - 2026-11-04
Overview
422 Pull requests merged by 2 users
Merged
#477 chore(design): add design-conformance manifest
Merged
#475 feat(auth): adopt @siax/auth-zitadel canonical claim normalizer
Merged
#473 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#472 feat(ui): upgrade to DES1GN @siax/ui 0.16.13
Merged
#470 feat(acquisition): X-800 consumer contract
Merged
#469 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#467 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8b5e23aa9b)
Merged
#468 feat(analytics): add 0pt analytics HTTP surface + AUD0 ingestion
Merged
#466 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#465 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5772b4043a)
Merged
#464 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#463 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b70ae2bbfe)
Merged
#462 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#461 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (140a02a797)
Merged
#460 fix(portal): en idempotensnyckel per vald fil
Merged
#459 fix(upload): idempotent retry ger samma verifierade kvitto
Merged
#457 fix(credits): importera trial-helpern i balance-routen
Merged
#456 feat(credits): engångs trial-grant så ledgern körs skarpt
Merged
#455 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6a4a45a480)
Merged
#454 ci(integration): rensa OpenSearch read-only-block (inte bara vattenmärket)
Merged
#453 fix(live): betalningsspärr i pilot + tydligt OCR-fel
Merged
#451 ci(integration): åtgärda OpenSearch disk-vattenmärke (index_create_block)
Merged
#450 docs(deploy): runbook + workflow-rubriker matchar live-pipelinen
Merged
#449 feat(auth): central Keycloak portal-trust
Merged
#448 ci(smoke): läs main-SHA från commits-listan
Merged
#447 ci: optimera pipelines + automatisk produktionssmoke
Merged
#446 fix(workbench): numerisk decimal → källans exakta sträng
Merged
#445 fix(decision-ollama): native JSON-läge utan thinking
Merged
#444 feat(workbench): entydig decimal/datum-evidens utan AI-beroende
Merged
#442 fix(workbench): tolerera platt/inkapslad JSON från lokal modell
Merged
#441 feat(workbench): decisionsserverns lokala modell som interim-AI
Merged
#440 fix(credits): visa rätt pris (öre → kronor)
Merged
#439 fix(admission): pilotläge utan reservation
Merged
#438 chore(workbench): logga orsaken till strukturfel
Merged
#437 fix(doc0): anropa DOC0 som den beviljade tjänsteaktören
Merged
#435 fix(auth): begär resourceowner-scope så tenant-claim finns
Merged
#434 chore(auth): logga OIDC-felkod (utan tokens)
Merged
#433 feat(auth): Zitadel OIDC-inloggning för portalen
Merged
#432 feat(workbench): uttryckligt pilotläge utan credit-plånbok
Merged
#431 chore(portal): pensionera den döda metadata-uppladdningen
Merged
#430 fix(portal): explicit dataklass för dokumentstrukturering
Merged
#429 feat(document-workbench): kundflöde uppladdning → struktur → export + credits
Merged
#428 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6bbd333a22)
Merged
#426 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2d68ce5016)
Merged
#425 Structure and export multiple evidence-bound document records
Merged
#423 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#417 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4f5a2ea865)
Merged
#424 Bind DOC0 upload receipts to the original request
Merged
#422 Enforce tenant isolation for document credit storage
Merged
#421 Bind model results to immutable source and policy snapshots
Merged
#420 Coordinate durable DOC0 upload attempts
Merged
#419 Distinguish unavailable sources from empty results
Merged
#418 Stabilize DOC0 multipart upload fingerprints
Merged
#410 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (cb01f948eb)
Merged
#416 feat: persist scoped document upload attempts
Merged
#415 feat: inspect document upload journal from 0pt
Merged
#414 feat: validate source-backed decimals and dates
Merged
#413 fix: reconcile uncertain document uploads
Merged
#412 fix: secure document upload transport
Merged
#411 feat: add evidence-checked document exports
Merged
#409 feat: add guarded document workbench foundations
Merged
#407 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#408 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4403908e0a)
Merged
#406 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4725b22b19)
Merged
#405 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#404 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (67540315bb)
Merged
#400 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a92a5fcb05)
Merged
#393 fix(deps): source-map-js 1.2.2-override
Merged
#402 chore(deps): ta bort stale package-lock.json
Merged
#401 ci(security): exkludera image-SBOM:er från källscanning
Merged
#399 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#398 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (d802e451f1)
Merged
#397 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#395 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (793b72fbf5)
Merged
#396 test(doctor): använd siax.repo.v3.json i fixturen
Merged
#392 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#394 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4e24f5d558)
Merged
#391 fix(deps): next 16.4.1/15.5.28 (GHSA-2464-fhr4-w9xw CRITICAL RCE)
Merged
#388 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#389 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b9443d6419)
Merged
#387 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a06138ce51)
Merged
#386 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#385 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (bdaca598d3)
Merged
#384 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#383 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (0f67507b89)
Merged
#381 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (ae9b16ecd4)
Merged
#379 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c04ba4dc7b)
Merged
#364 test(GOV-06): mutation-fixturerna bygger på den historiska down+402/404-posten SYNTEISKT — inte repots nuvarande evidens
Merged
#378 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#377 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (bfa0513f76)
Merged
#375 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (11bd38bdd6)
Merged
#374 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#373 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (774ba6593b)
Merged
#372 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#371 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8b32320bdc)
Merged
#370 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#369 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (e4a97a5732)
Merged
#368 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#367 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (ff8ae02a5d)
Merged
#357 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#356 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1867f8178f)
Merged
#355 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#354 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c48dbca983)
Merged
#353 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#352 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (25208fe798)
Merged
#351 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#350 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (12fd835b0e)
Merged
#349 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#348 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4ada6aada4)
Merged
#347 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#346 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (587306d86c)
Merged
#345 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#344 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (650481a1c2)
Merged
#343 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#342 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (cc464f7a7d)
Merged
#341 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#340 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3d616028ed)
Merged
#339 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#338 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3fa45b3b62)
Merged
#337 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#336 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (960e25e702)
Merged
#335 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#334 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b541b69551)
Merged
#333 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#332 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (065937aea7)
Merged
#331 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#330 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c007205056)
Merged
#329 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#328 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (983f3cb3a3)
Merged
#327 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#326 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (24287b0668)
Merged
#325 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#324 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9f9b513980)
Merged
#323 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#322 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (98313d3822)
Merged
#321 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#320 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (16a97817e1)
Merged
#319 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#318 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (53d2927f9b)
Merged
#317 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#316 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (e984376669)
Merged
#315 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#314 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c81fdcbc7c)
Merged
#313 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#312 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4b163c3c3b)
Merged
#311 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#310 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (7a27a42aa9)
Merged
#309 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#308 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5e8dff713a)
Merged
#307 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#306 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (01fcfe497c)
Merged
#305 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#304 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1d16f64b8f)
Merged
#303 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#302 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (7c582b117e)
Merged
#301 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#300 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (e7b86bb499)
Merged
#299 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#298 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (dea08441d2)
Merged
#297 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#296 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2d43d7ad91)
Merged
#295 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#294 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (fba0fa14c8)
Merged
#293 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#292 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (fda7096b1c)
Merged
#291 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#290 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (f57b53ce72)
Merged
#289 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#288 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a6b0100e4d)
Merged
#287 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#286 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (cb5f8ae467)
Merged
#285 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#284 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1ca76797c5)
Merged
#283 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#282 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6775f2f126)
Merged
#281 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#280 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (7284596911)
Merged
#279 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#278 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (7ee87b203f)
Merged
#277 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#276 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (32e7b3d4ad)
Merged
#275 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#274 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4c47e38fcb)
Merged
#273 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#272 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (94de4acef5)
Merged
#271 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#270 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3e4a194f74)
Merged
#269 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#268 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1471c69e29)
Merged
#267 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#266 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (fece0a207f)
Merged
#265 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#264 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (069d9632e1)
Merged
#263 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#262 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5e37b5f107)
Merged
#261 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#260 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (856d1fdf61)
Merged
#259 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#258 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (0ca3f66746)
Merged
#257 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#256 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (888718aee9)
Merged
#255 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#254 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (94c9e0ad7b)
Merged
#253 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#252 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (cc15bafd50)
Merged
#251 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#250 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3b2bf4ff0b)
Merged
#249 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#248 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (d66dd14fb2)
Merged
#247 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#246 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (28390268fd)
Merged
#245 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#244 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5214cf4005)
Merged
#243 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#242 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (be3517c1b2)
Merged
#241 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#240 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9fcd33b505)
Merged
#239 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#238 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (17da27051f)
Merged
#237 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#236 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (632c22f979)
Merged
#234 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#235 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3354c741cd)
Merged
#233 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (03a4fe4898)
Merged
#232 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#231 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (864b5ef3c4)
Merged
#230 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#229 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (f8aca88dac)
Merged
#228 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#227 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4444af3fa2)
Merged
#226 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#225 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (19a62898d3)
Merged
#224 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#223 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (d6b7296c76)
Merged
#222 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#221 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3d651ef173)
Merged
#219 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (56916cf7e4)
Merged
#217 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (87beafafef)
Merged
#216 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#215 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6e23eb87e0)
Merged
#214 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#213 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (392cc4d132)
Merged
#212 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#211 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (db31fbaa72)
Merged
#210 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#209 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (f25034efe6)
Merged
#208 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#207 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (793d8817e7)
Merged
#205 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#206 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (cbc3ed8c03)
Merged
#203 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#204 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (c9baec772a)
Merged
#198 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#199 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (50576047f7)
Merged
#196 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#195 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (84c826f5ec)
Merged
#194 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#193 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (08fac91969)
Merged
#192 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#191 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (0fcd395b75)
Merged
#188 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#187 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3445f92cbe)
Merged
#186 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#185 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (32879ecf75)
Merged
#184 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#183 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (e3ebcefa09)
Merged
#182 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#181 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8cc7b7edca)
Merged
#180 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#179 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1fa9d0bc21)
Merged
#178 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#177 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8debc77eaf)
Merged
#176 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#175 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b8b63c429d)
Merged
#173 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8ed38d4f8d)
Merged
#171 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#172 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (336b51f29a)
Merged
#148 feat(import): ImportDispatchPolicy (DES1GN D3 §31) — policy-objekt + route-koppling
Merged
#170 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (da5fc9d16b)
Merged
#169 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#168 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9ff72f0326)
Merged
#167 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#166 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (55628ec483)
Merged
#165 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#164 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5be1769f68)
Merged
#163 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#162 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b7221754bc)
Merged
#161 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#160 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (7b68f18233)
Merged
#159 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#158 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (15e882bf8b)
Merged
#157 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#156 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (ce0824317b)
Merged
#155 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#154 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (05e8253481)
Merged
#151 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#153 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9cad5f9dbe)
Merged
#152 chore(deps): släpp pnpm-overrides — contracts ^0.11.1 / import-export ^0.2.2 / ui ^0.15.1
Merged
#150 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#149 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2419b76eb2)
Merged
#143 fix(deps): patch HIGH/CRITICAL advisories (brace-expansion)
Merged
#146 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#144 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (09b9cc80bf)
Merged
#147 feat(collab): order-anteckningar — @siax/collaboration-kernelns första produktkonsument (spår C)
Merged
#145 feat(orders): CSV-import admin-yta — första riktiga ImportWizard-värden (C8)
Merged
#142 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#141 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (24912b735f)
Merged
#140 fix(health): engine-kollen ärlig (not_configured när URL saknas) + EVIDENCE-docs mot Coolify-verkligheten
Merged
#139 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#138 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9a14f65121)
Merged
#137 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
Merged
#136 fix(signing): cosign-pubkey + SBOM + deployment/env-poster (3dcc46c064)
Merged
#135 docs: P1-5 korrigerad — 0pt.app verifierad kanonisk prod (falsk blocker)
Merged
#134 feat(charts): recharts → @siax/charts — Product Firewall fullbordad i 0pt (våg 2.4)
Merged
#133 build: @siax/ui 0.12.0-kanarie — dist-läge, transpilePackages bort för ui [C1]
Merged
#132 feat(orders): kanonisk statusmaskin + guardad DB-constraint (ADR-0002, C3)
Merged
#131 feat(orders): CSV-export-endpoint — export-kernelns första adoption (våg 3.4)
Merged
#130 feat(admin): InboxList — orderkön som universal inkorg (våg 3.3-adoption)
Merged
#128 feat(admin): authz-pilot — server-renderad advance-resolution + ActionGate (ADR-0001)
Merged
#127 build: @siax/ui ^0.11.0 — kanonalignering (adoption-förberedelse)
Merged
#126 fix(manifest): provenRestore=true — styrkt av godkänd restore-evidens
Merged
#125 build: kanoniska kernel-versioner — cmdk 1.1.1, sonner ^2.0.6 (våg 2)
Merged
#124 feat(katalog): filter + sök + flikval i URL:en (URL state-konventionen)
Merged
#123 chore(ci): koppla in SonarQube-analys mot självhostad sonar.siax.io
Merged
#122 ci: add missing timeout-minutes guards to hot-path jobs
Merged
#121 fix(a11y): ta bort alfa-tonad textfärg — 82 kontrastöverträdelser (UI-09)
Merged
#117 feat(ingestion): VehIQ OLTP -> ClickHouse watermark extractor (P070)
Merged
#120 fix(ci): check out the siax-templates pin directly instead of comparing main
Merged
#119 fix(ci): bump SIAX_TEMPLATES_PINNED_SHA to reviewed siax-templates#138
Merged
#115 fix(ci): re-pinna siax-templates 9a3a0aa → 09504e3a (granskad bump)
Merged
#118 feat(contract): add routing + normalization operationIds (ADR-027)
Merged
#116 fix(readiness): /api/ready svarade 200 med en död motor i produktion
Merged
#114 chore: normalize sax3l -> admin CI references
Merged
#113 fix(ci): bump siax-templates G17-pin till 9a3a0aa (reviewed)
Merged
#112 feat(des1gn): riktiga consumes i des1gn-consumer.yaml (härlett ur package.json)
Merged
#111 chore(ci): bump SIAX_TEMPLATES_PINNED_SHA -> 5bda795 (granskad)
Merged
#109 feat(des1gn): repo-kontraktsbaslinjer — RC-gaten v3 (GENERATED, 4 filer)
Merged
#110 fix(decision): gate env OPT_DECISION_ER_SHADOW (Coolify avvisar sifferledande nycklar)
Merged
#107 fix(ci): pin till full 40-teckens SHA
Merged
#106 chore(ci): bump SIAX_TEMPLATES_PINNED_SHA -> cc81b295 (granskad)
Merged
#105 feat(decision): Jev ER auto-match shadow (0PT_DECISION_ER_SHADOW)
Merged
#102 feat(FAS 36/ADR-027): siax.repo.json v3-migration + discovery/decision-block
Merged
#100 feat: decision-plane wiring — ER-pair decision.match tie-break (@siax/0pt-decision)
Merged
#99 feat(HSP-085): Migration Studio — ratio, session-resume, scoped coverage claim
Merged
#98 feat(HSP-084): cutover — dual writers, sena ändringar, rollback
Merged
#95 feat(HSP-067): exit-manifest — portabel export + notice-krav + icke-exporterbart explisit
Merged
#94 feat(HSP-083): migration runner + checkpoint store + reconciliation evidence
Merged
#92 feat(HSP-082): migrationsmappning + konfliktmodell
Merged
#90 feat(HSP-081): discovery-inventory — read-only kartläggning av kundstack
Merged
#89 feat(seo): robots.txt + sitemap.xml — crawler-kontraktet saknades (404 mätt live)
Merged
#88 docs(truth): STATUS.md — slutproduktions-verifiering 2026-09-22
Merged
#87 fix(cd): attestation not-ready regex — cosign 3.x says no matching attestations: (no found)
Merged
#86 fix(db): subscriptions.created_at — migration 014 reparerar GET /api/subscriptions
Merged
#81 fix(prod): map SiaxError in the 7 legacy money routes — DEPENDENCY_UNAVAILABLE/503 instead of opaque 500
Merged
#80 chore(release): re-pin siax-templates G17 hook pin 7725498 -> a401880
Merged
#79 chore(estate): capability-post owner = repo-namn "0pt"
Merged
#78 chore(capabilities): RW-005b — risk-assignment (0pt)
Merged
#74 docs: fix AGENTS.md push claim + protected-paths gap (enable_push is false, not true)
Merged
#77 feat(X-737): Synthetic Data Factory (0pt dataset-truth + INF0-generering)
Merged
#76 chore(capabilities): RW-005 — capability-/surface-poster (surfaces-fasen)
Merged
#75 chore(recovery): P005-reparationsvåg — verifierad backup-, restore- och licens-evidens
Merged
#73 chore(release): bump siax-templates pin after deliberate review
Merged
#72 BTI promptpack: contracts + tests (godkänd av Simon)
Merged
#65 feat(ci): migrate signed-deploy gate to siax-templates G17 reference (ADR-W16-003)
Merged
#66 fix: fail-closed 0pt Stripe payment and order transitions
Merged
#69 feat(payments): verified tenant-owned 0pt orders
Merged
#64 M0: DES1GN-distribution — @siax/ui 0.4.1 + kanonisk import-kedja (token-copy ersatt)
Merged
#62 chore(deps): update dependency autoprefixer to v10.5.5
Merged
#63 chore(deps): update dependency postcss to v8.5.28
Merged
#61 chore(deps): update dependency @types/react-dom to v19.2.7
Merged
#60 fix(cd): signed-artifact-gate får retry på "no signatures found" (sign-racet mätt live)
Merged
#59 feat(release-chain): bygg→push→SBOM→cosign-sign→verify + signed-artifact-gate i cd.yml (kl0ud/st0re-mönstret)
Merged
#58 feat(engine): fail-closed X-Internal-Token-gate + commit-kedja i services/api (ENGINE_URL-wire-förberedelse)
Merged
#57 docs(evidence): operational-state prober 2026-09-15 — runtime healthy i SIAX Cloud, publikt hostname fortfarande down (DNS-cutover hos Simon)
Merged
#56 feat: prod-merge-pass — PII-Gate GDPR-guardrail + realinfra-migration-test + security headers & repo-honesty doctor (PR#44-klassen)
Merged
#55 feat(toolchain): 0pt-pilot — mise task-kontrakt (node/pnpm pinat) + lefthook + template-pin + dokumentation (W3, pilot 2/3)
Merged
#54 fix(security): add SSRF guard to Fabric/OneLake adapter's sqlEndpoint
Merged
#51 fix(prod): close legacy storage fallbacks in orders/subscriptions/blobs
Merged
#52 chore(conformance): masterplan-lock guard + PLAN index
Merged
#50 fix(contract): deklarera internal-er + quality bridge-run + internalToken-scheme
Merged
#48 feat: Work entity resolution — review-gated ER (kanoniserad från GitHub #11)
Merged
#27 chore(deps): update clickhouse/clickhouse-server docker tag to v24.12
Merged
#47 fix(deps): update dependency next to v16.3.4
Merged
#46 chore(deps): update react monorepo to v19.2.18
Merged
#40 feat(deploy): gör 0pt körbar utanför Vercel — standalone + bevisad Coolify-image
Merged
#45 fix(ci): make the required security gate able to fail + repair the integration guard that could not pass
Merged
#22 chore: untrack committed __pycache__ and scraper output dumps (P4-4)
Merged
#49 feat(P-001, P-002): 0pt→N0D quality delegation + internal OpenAPI
Merged
#43 feat: durable AUD0 outbox + dataset/search/ER HTTP surfaces + P065 stängd (kod, utan workflow-ändringar)
Merged
#41 fix(descriptor): 0PT operationalState running -> down (measured 2026-09-07)
Merged
#39 fix(BI-P147): flytta MetricFlow-pinnen ovanför licensgränsen (0.208.1 var BUSL-1.1)
Merged
#38 BI-P029 + BI-P103: two prompts cited as done were not — writing the cited test found a metric-definition filter dropped at execution
Merged
#37 BI-P129/P130/P131 — analytics ConnectorProvider: native (verified), dlt + Singer (honest readiness)
Merged
#36 BI-P060/P061/P103/P104/P105 — dashboard model + versioning, BI SLO, benchmark harness, materialization
Merged
#35 feat(analytics): BI-P014/016..022/025..026/028..031 — query contract, analyst SQL, execution, cache, cost, dbt, quality, metrics
Merged
#34 feat(analytics): BI-P002..BI-P012 — 0pt analytics core (domain model, tiers, contracts, Arrow, ClickHouse engine, tenant isolation, resource governance)
Merged
#21 feat(compliance): scaffold Golden Standard artifacts (CI-14, DX-02, DX-03)
Merged
#33 docs: the Coolify deploy hook is LIVE — six docs still call it a placeholder
Merged
#32 docs: withdraw the "Superset / OpenMetadata are OUT" rows — both are canonical
Merged
#13 chore(deps): update dependency autoprefixer to v10.5.4
Merged
#31 P060-P068: durable ingestion plane — source classification gate, connector contract, common envelope, schema evolution, quality enforcement, queryable lineage, idempotent backfill
Merged
#30 chore(estate): add first siax.repo.v3.json manifest (P003 v3 adoption, REPO-16 NA→PASS)
Merged
#29 P014: close tenant-isolation + idempotency gaps, execute real restore drill
Merged
#28 feat(data-os): P010 completion — Source Registry persistence + TS/Python quality bridge + provenance + fault-injection tests
Merged
#25 feat: SIAX Platforms P0 wave 2 — real-contract platform clients + Data-OS capability layer
Merged
#12 chore(deps): update dependency @tailwindcss/postcss to v4.3.3
Merged
#14 chore(deps): update dev-dependencies (non-major)
Merged
#24 fix: COOLIFY_APP_ID from variables (0pt app live in Coolify)
Merged
#23 fix(env): NEXT_PUBLIC_API_URL -> live origin (api.0pt.app is dead)
Merged
#20 docs+chore: repo hygiene -- v2.0 manifests, ADRs, changelog, doctor, guides
Merged
#18 fix(health): report real per-dependency status instead of hardcoded ok:true
Merged
#16 docs(compliance): add BLOCKERS.md (§1.4)
Merged
#17 docs(compliance): finish attributing the evasion-stack keep decision
Merged
#15 docs(compliance): record dated provenance for evasion-stack keep decision
Merged
#11 fix(security): require auth on GET /api/orders and GET /api/admin/metrics
Merged
#9 ci(workflows): split CD/security/nightly under .gitea/workflows + gitignore hygiene
Merged
#8 fix(deploy): declare Coolify as the deploy target, not Vercel
Merged
#6 unify: merge the GitHub line into Gitea, settled against real service contracts
Merged
#3 docs(data-engine): 1p extends the provenance chain to the network layer
Merged
#5 chore: Configure Renovate
Merged
#4 fix(auth): make the AUTH_ENFORCE default fail-closed -- 0pt.app was answering anonymously
Merged
#2 Foundational hardening (Waves 1–4): CI/Docker, flag-gated Zitadel auth, validation, tests
1 Pull request proposed by 1 user
Proposed
#479 fix(manifest): provenRestore=true (restore-drill 2026-09-29)
6 Issues closed from 2 users
Closed
#67 P0 live payments: remove demo bypass and guard order status transitions
Closed
#82 [healer] 0pt release.yml: UNKNOWN (persistent, 2 försök)
Closed
#53 P1: durable-store guard fixes the money-loss bug but 7 legacy routes leak an opaque 500 instead of the documented DEPENDENCY_UNAVAILABLE/503
Closed
#68 CI integration OpenSearch times out under simultaneous push/PR runs
Closed
#70 [availability] 0pt-web på server5 körs healthy men är orouterad — 0pt.siax.io 503, ingen DNS-post
Closed
#71 [healer] 0pt release.yml: UNKNOWN (persistent, 2 försök)
15 Issues created by 2 users
Opened
#10 Dependency Dashboard
Opened
#53 P1: durable-store guard fixes the money-loss bug but 7 legacy routes leak an opaque 500 instead of the documented DEPENDENCY_UNAVAILABLE/503
Opened
#67 P0 live payments: remove demo bypass and guard order status transitions
Opened
#68 CI integration OpenSearch times out under simultaneous push/PR runs
Opened
#70 [availability] 0pt-web på server5 körs healthy men är orouterad — 0pt.siax.io 503, ingen DNS-post
Opened
#71 [healer] 0pt release.yml: UNKNOWN (persistent, 2 försök)
Opened
#82 [healer] 0pt release.yml: UNKNOWN (persistent, 2 försök)
Opened
#91 [healer] 0pt release.yml: UNKNOWN (persistent, 2 försök)
Opened
#93 [healer] 0pt cd.yml: UNKNOWN (persistent, 2 försök)
Opened
#97 [healer] 0pt ci.yml: LOCKFILE_DRIFT (persistent, 2 försök)
Opened
#101 [healer] 0pt ci.yml: UNKNOWN (persistent, 2 försök)
Opened
#108 [healer] 0pt release.yml: POLICY_GATE
Opened
#129 [healer] 0pt ci.yml: LOCKFILE_DRIFT (persistent)
Opened
#197 [healer] 0pt vehiq-oltp-ingest.yml: LOCKFILE_DRIFT (persistent)
Opened
#201 [healer] 0pt nightly.yml: LOCKFILE_DRIFT (persistent)