1092 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	ef84832cdb	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#469) from fix/prod-restore-2026-09-29 into main	2026-11-03 15:28:31 +00:00
admin	10b989351a	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 15:28:19 +00:00
admin	6265734a34	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8b5e23aa9b)' (#467) from fix/prod-evidence-2026-09-29 into main	2026-11-03 15:28:16 +00:00
admin	f135ab2ac0	Merge branch 'main' into fix/prod-evidence-2026-09-29	2026-11-03 15:28:03 +00:00
admin	cc72e5d434	Merge pull request 'feat(analytics): add 0pt analytics HTTP surface + AUD0 ingestion' (#468) from feat/analytics-api into main	2026-11-03 13:12:52 +00:00
admin	766db9e9bb	fix(analytics): bump PyJWT to 2.14.0 (CVE-2026-102268)	2026-11-03 14:02:39 +01:00
admin	5f5d31f86d	feat(analytics): add 0pt analytics HTTP surface + AUD0 ingestion	2026-11-03 14:00:34 +01:00
siax-bot	4d88157cc1	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-8b5e23aa9b	2026-11-03 13:30:22 +01:00
admin	8b5e23aa9b	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#466) from fix/prod-restore-2026-09-29 into main	2026-11-03 11:24:46 +00:00
admin	068d00febb	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 11:24:35 +00:00
admin	9f74b53a4d	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (5772b4043a)' (#465) from fix/prod-evidence-2026-09-29 into main	2026-11-03 11:24:31 +00:00
siax-bot	ea16eabf79	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-5772b4043a	2026-11-03 09:30:18 +01:00
admin	5772b4043a	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#464) from fix/prod-restore-2026-09-29 into main	2026-11-03 07:28:15 +00:00
admin	afa3a888bc	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 07:28:03 +00:00
admin	9c99c2c633	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b70ae2bbfe)' (#463) from fix/prod-evidence-2026-09-29 into main	2026-11-03 07:28:00 +00:00
siax-bot	2ec3fe9b64	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-b70ae2bbfe	2026-11-03 05:30:19 +01:00
admin	b70ae2bbfe	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#462) from fix/prod-restore-2026-09-29 into main	2026-11-03 03:00:45 +00:00
admin	c33d3f4d76	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 03:00:33 +00:00
admin	03e065c34d	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (140a02a797)' (#461) from fix/prod-evidence-2026-09-29 into main	2026-11-03 03:00:30 +00:00
siax-bot	35719a6c68	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-140a02a797	2026-11-03 01:30:31 +01:00
admin	140a02a797	Merge pull request 'fix(portal): en idempotensnyckel per vald fil' (#460) from fix/ui-upload-key into main	2026-11-03 00:04:54 +00:00
admin	446b9aa299	fix(portal): one idempotency key per selected file ... A double click or a retry after a network error generated a new key each time and therefore a duplicate document. The key is now stable until the file selection changes, so the same upload returns the same verified receipt.	2026-11-03 00:51:42 +01:00
admin	6652fde6df	Merge pull request 'fix(upload): idempotent retry ger samma verifierade kvitto' (#459) from fix/upload-retry-receipt into main	2026-11-02 23:36:57 +00:00
admin	92eb78ba0a	fix(upload): an idempotent retry returns the same verified receipt ... A client retry with the same idempotency key replayed the journal and got 'outcome_unknown' even when the first upload had succeeded, because the verified DOC0 receipt was never persisted. Store document/version/checksum/ stage on the attempt (sql/021) and return it on replay; only a missing receipt falls back to observation. No second POST, no duplicate document.	2026-11-03 00:35:32 +01:00
admin	96d61d1308	Merge pull request 'fix(credits): importera trial-helpern i balance-routen' (#457) from fix/balance-trial-import into main	2026-11-02 21:39:17 +00:00
admin	4ea55c74bb	fix(credits): import the trial-credit helper in the balance route ... The call was added without its import, so GET /api/0pt/credits/balance returned CREDITS_UNAVAILABLE (readTrialCredits is not defined). Caught live right after enabling trial credits.	2026-11-02 22:27:19 +01:00
admin	ffd7e3341e	Merge pull request 'feat(credits): engångs trial-grant så ledgern körs skarpt' (#456) from feat/credit-trial-grant into main	2026-11-02 21:17:39 +00:00
admin	dade37ee05	feat(credits): one-time trial grant so the ledger runs in production ... - Ledger accepts kind='grant' (a server-owned balance grant, not a payment). - OPT_TRIAL_CREDITS=N grants N credits once per tenant (idempotent key trial:<tenant>) on balance/structure, so reserve -> settle is exercised before any customer purchase. - sql/020 extends the kind constraint (re-runnable). - Tests for the grant helper; full suite 1345 passed.	2026-11-02 22:05:06 +01:00
admin	456e331d80	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6a4a45a480)' (#455) from fix/prod-evidence-2026-09-29 into main	2026-11-02 20:50:29 +00:00
admin	6a4a45a480	Merge pull request 'ci(integration): rensa OpenSearch read-only-block (inte bara vattenmärket)' (#454) from fix/ci-opensearch-clear-readonly into main	2026-11-02 19:41:48 +00:00
admin	f29d2876a1	ci(integration): clear the OpenSearch read-only block, not just the watermark ... Disabling cluster.routing.allocation.disk.threshold_enabled does not clear a cluster already in flood stage: it keeps cluster.blocks.read_only_allow_delete and every write returns 403 index_create_block_exception (run 389046, still red after the previous fix). Clear that block explicitly on every attempt, set the threshold off at boot, and print the probe/settings bodies for future triage. Verified locally against opensearch:2.11.1: read-only block -> 403, then PUT {... read_only_allow_delete: null} -> index creation 200.	2026-11-02 20:29:30 +01:00
admin	24f4a407c8	Merge pull request 'fix(live): betalningsspärr i pilot + tydligt OCR-fel' (#453) from fix/live-honesty-and-billing-guard into main	2026-11-02 19:14:57 +00:00
admin	a0dd6b7653	fix(live): refuse billing in pilot mode and explain unparsed documents ... - Checkout returns 503 CREDITS_DISABLED while OPT_CREDITS_MODE=off, so a customer can never pay for credits that the pipeline will not consume. - Packs expose purchases_enabled; the portal hides Buy and says billing is off. - Structuring an unparsed document (e.g. a scanned PDF with no text layer) now answers 422 DOCUMENT_NOT_PARSED instead of a generic INVALID_REQUEST.	2026-11-02 20:14:12 +01:00
admin	8822b2adaa	Merge pull request 'ci(integration): åtgärda OpenSearch disk-vattenmärke (index_create_block)' (#451) from fix/ci-opensearch-watermark into main	2026-11-02 18:40:50 +00:00
admin	153c9b0cfc	ci(integration): disable the CI-only OpenSearch disk watermark and prove index creation ... The throwaway single-node cluster inherits the runner's disk watermark; on a busy runner the flood stage turns every new index read-only and the blocking suite fails with 403 index_create_block_exception (run 388536). Disable the threshold for this container and create+delete a probe index before the tests.	2026-11-02 19:18:03 +01:00
admin	32182b50dd	Merge pull request 'docs(deploy): runbook + workflow-rubriker matchar live-pipelinen' (#450) from docs/deploy-runbook into main	2026-11-02 17:58:38 +00:00
admin	ea40a67940	docs(deploy): runbook and workflow headers match the live pipeline ... The runbook still described Vercel and an unprovisioned Coolify app. It now documents the verified chain (ci -> release attestation -> cd -> Coolify), the proven manual dispatch, the verification endpoints and the rollback.	2026-11-02 18:57:45 +01:00
siax-bot	6e2d7b3068	Merge pull request 'feat(auth): central Keycloak portal-trust' (#449) from fix/keycloak-portal-trust-20261102 into main	2026-11-02 17:47:25 +00:00
admin	c4a7b83f61	feat(auth): central Keycloak portal-trust (KEYCLOAK_ISSUER/audience/azp)	2026-11-02 18:45:40 +01:00
admin	56d3a8341b	Merge pull request 'ci(smoke): läs main-SHA från commits-listan' (#448) from fix/smoke-main-sha into main	2026-11-02 17:31:39 +00:00
admin	118fd39f87	ci(smoke): read main SHA from the commits list endpoint ... /commits/main returns 404 on this Gitea; use /commits?limit=1 and parse the first sha with python instead of a greedy sed.	2026-11-02 18:30:44 +01:00
admin	d2854553e7	Merge pull request 'ci: optimera pipelines + automatisk produktionssmoke' (#447) from chore/optimize-pipelines into main	2026-11-02 17:25:58 +00:00
admin	c01deca048	ci: optimize delivery pipelines and add a production smoke gate ... - One run per ref (concurrency) for CI, security, nightly and release; branch pushes no longer duplicate pull_request runs (push is main-only). - Deploys keep their own concurrency group so two runs never race Coolify. - pnpm store cache on every Node job. - New /api/version returns the deployed commit (no secrets). - New scheduled prod-smoke workflow: readiness, db/stripe health, running commit == main, and the document/credit routes exist (401/405, never 5xx).	2026-11-02 18:24:45 +01:00
admin	4f5deec857	Merge pull request 'fix(workbench): numerisk decimal → källans exakta sträng' (#446) from fix/decimal-number-source into main	2026-11-02 17:10:22 +00:00
admin	c7187368de	fix(workbench): accept a JSON-number decimal and deliver the source's exact string ... The local model returns 12500.00 as a JSON number, which the contract rejects as a non-string decimal. A numeric value now matches a source span numerically and the delivered value is rewritten to that span's decimal string (12500.00), so precision is preserved instead of rounded. Exact string equality is still required for string decimals, and ambiguous formats still go to review.	2026-11-02 18:07:52 +01:00
admin	a23c744588	Merge pull request 'fix(decision-ollama): native JSON-läge utan thinking' (#445) from fix/ollama-native-json into main	2026-11-02 16:52:32 +00:00
admin	8b571cf2f4	fix(decision-ollama): use Ollama's native JSON mode without thinking ... The 9B model spent its whole 4000-token budget on reasoning and came back model_incomplete. Call /api/chat with format=json, think=false and num_predict, and read prompt_eval_count/eval_count/done_reason. Structured extraction no longer needs chain-of-thought.	2026-11-02 17:51:09 +01:00
admin	ce2d8b58ea	Merge pull request 'feat(workbench): entydig decimal/datum-evidens utan AI-beroende' (#444) from feat/deterministic-date-decimal into main	2026-11-02 16:42:02 +00:00
admin	6c4f1998dc	feat(workbench): locale-aware decimal/date evidence without an AI dependency ... A source span now supports a decimal ('12 500,00' -> '12500.00') or a date ('14/10/2026' -> '2026-10-14') when the reading is unambiguous. Ambiguous formats (01/02/2026, 1,234) still go to review. Evidence derivation scans the source for typed candidates, so the local decision-server model only has to return values, not UTF-16 offsets.	2026-11-02 17:39:31 +01:00
siax-bot	0b50f342a3	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-c386004f2e	2026-11-02 17:30:19 +01:00