ffa9ca68eb8e4351a592a481c7aacfe145bf3e69
1233
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
  adminandClaude Opus 5.5
|
ffa9ca68eb |
fix(estate): reconnect main history after orphan docs(production) commit
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / integration (pull_request) Successful in 48s
CI (SIAX Cloud) / security (pull_request) Successful in 1m27s
CI (SIAX Cloud) / quality (pull_request) Successful in 12m9s
The docs(production) publishing sweep (2026-11-10) pushed main as a parentless commit, detaching 1230 commits of history. This merge keeps the current tree byte-for-byte and adds the last pre-orphan tip
|
||
|
siax-estate-bot
|
20911a399f |
chore(source-bundle+evidence): registrera FAKTISKT deployad commit 829150fd04 (app 0pt, deployed 2026-11-10T10:04:54Z) + deploy-log-evidens — estate-kampanj issue #76
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 23s
Security Scan (SIAX Cloud) / security (push) Failing after 23s
CI (SIAX Cloud) / security (push) Successful in 29s
CI (SIAX Cloud) / sonar (push) Successful in 1m55s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 5m7s
Deploy to Coolify / deploy (push) Successful in 5m12s
CI (SIAX Cloud) / integration (push) Successful in 10m56s
CI (SIAX Cloud) / quality (push) Successful in 12m13s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 6s
masterplan-lock / check (push) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / integration (pull_request) Successful in 58s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m3s
|
||
|
admin
|
829150fd04 |
docs(production): standardiserad produktionsberedskap och gap-analys (2026-11-11)
masterplan-lock / check (push) Successful in 19s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 27s
Security Scan (SIAX Cloud) / security (push) Successful in 48s
CI (SIAX Cloud) / security (push) Successful in 50s
CI (SIAX Cloud) / sonar (push) Successful in 2m1s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m19s
Deploy to Coolify / deploy (push) Successful in 2m26s
CI (SIAX Cloud) / integration (push) Successful in 10m29s
CI (SIAX Cloud) / quality (push) Successful in 11m26s
|
||
 siax-bot
|
2a253bdb66 |
Merge pull request 'fix(security): ta bort död GitHub Actions-CI (SEC-25)' (#547) from fix/sec25-remove-github-workflows into main
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 16s
CI (SIAX Cloud) / security (push) Successful in 28s
Security Scan (SIAX Cloud) / security (push) Successful in 28s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 1m6s
CI (SIAX Cloud) / sonar (push) Successful in 2m10s
masterplan-lock / check (push) Successful in 13s
CI (SIAX Cloud) / integration (push) Successful in 11m8s
CI (SIAX Cloud) / quality (push) Successful in 11m23s
Deploy to Coolify / deploy (push) Failing after 10m16s
|
||
|
admin
|
6d16589878 |
fix(security): ta bort död GitHub Actions-CI (SEC-25)
masterplan-lock / check (push) Successful in 12s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / security (pull_request) Successful in 26s
masterplan-lock / check (pull_request) Successful in 23s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 35s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 1m7s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m59s
CI (SIAX Cloud) / quality (pull_request) Successful in 11m23s
Varför: .github/workflows/ci.yml återställdes av recovery-commit
|
||
|
admin
|
6fa5408cc1 |
Merge pull request 'docs(runbook): stäng DOC-07 med befintligt, verkligt restore-bevis' (#546) from docs/doc07-restore-drill into main
masterplan-lock / check (push) Successful in 11s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 20s
CI (SIAX Cloud) / security (push) Successful in 41s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 53s
Security Scan (SIAX Cloud) / security (push) Successful in 45s
CI (SIAX Cloud) / integration (push) Successful in 2m8s
CI (SIAX Cloud) / sonar (push) Successful in 2m5s
CI (SIAX Cloud) / quality (push) Successful in 3m30s
Deploy to Coolify / deploy (push) Failing after 11m33s
|
||
|
admin
|
a87eb534d4 |
docs(doctor): stäng DOC-07 med befintligt, verkligt restore-bevis
masterplan-lock / check (push) Successful in 15s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 16s
CI (SIAX Cloud) / security (pull_request) Successful in 25s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 39s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 38s
CI (SIAX Cloud) / quality (pull_request) Successful in 3m47s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m48s
Varför: DOC-07 kräver en otvetydig rad om BEVISAD restore med datum i docs/runbook/backup-restore.md. Repot har redan en genomförd, dokumenterad restore-övning — det som saknades var den kanoniska raden. Ändring: en rad som namnger datum, källa och vad som faktiskt utfördes. Inget påstående som inte redan står i repots egen evidens. Verifiering: doctor --repo . -> DOC-07 PASS. |
||
|
admin
|
f88d3b4161 |
Merge pull request 'fix(security): gitleaks-fingerprints som inte flaggar sig själva' (#545) from fix/gitleaksignore-b2 into main
Deploy to Coolify / deploy (push) Canceled after 0s
CI (SIAX Cloud) / quality (push) Canceled after 0s
CI (SIAX Cloud) / integration (push) Canceled after 0s
CI (SIAX Cloud) / security (push) Canceled after 0s
CI (SIAX Cloud) / sonar (push) Canceled after 0s
CI (SIAX Cloud) / Component conformance (blocking) (push) Canceled after 0s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Canceled after 0s
Security Scan (SIAX Cloud) / security (push) Canceled after 0s
masterplan-lock / check (push) Successful in 16s
|
||
|
admin
|
3e186591a9 |
fix(security): gitleaks-fingerprints som inte flaggar sig själva
masterplan-lock / check (push) Successful in 18s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 11s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 11s
CI (SIAX Cloud) / security (pull_request) Failing after 15s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 1m56s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m2s
CI (SIAX Cloud) / quality (pull_request) Successful in 12m50s
Varför: REPO-15 fällde repot igen. Två orsaker, båda strukturella: (1) gitleaks skannar historiken, så samma falska positiv måste pinnas per commit som inför den — nya commits gav nya träffar; (2) .gitleaksignore skannas själv, så en kommentar som återgav det flaggade värdet ordagrant gjorde att filen flaggade sig själv. Ändring: .gitleaksignore skriven om med en post per commit:fil:regel:rad för samtliga verifierade falska positiva, och kommentarer som beskriver fyndet utan att återge något värde. Inga regel- eller globundantag — ett framtida riktigt fynd fälls fortfarande. Verifiering: gitleaks detect -s . -> no leaks found. |
||
|
admin
|
5468ef92f0 |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (1e5fafce1a)' (#544) from fix/prod-evidence-2026-09-29 into main
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 5s
masterplan-lock / check (push) Successful in 32s
CI (SIAX Cloud) / security (push) Successful in 38s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 38s
Security Scan (SIAX Cloud) / security (push) Successful in 29s
CI (SIAX Cloud) / sonar (push) Successful in 1m51s
CI (SIAX Cloud) / quality (push) Successful in 2m31s
CI (SIAX Cloud) / integration (push) Successful in 10m0s
Deploy to Coolify / deploy (push) Failing after 10m11s
|
||
|
siax-bot
|
d4a9ffee62 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-1e5fafce1a
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / security (pull_request) Successful in 22s
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 30s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 46s
CI (SIAX Cloud) / integration (pull_request) Successful in 55s
CI (SIAX Cloud) / quality (pull_request) Successful in 11m2s
|
||
|
admin
|
1e5fafce1a |
Merge pull request #543
masterplan-lock / check (push) Successful in 6s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Failing after 7s
CI (SIAX Cloud) / integration (push) Failing after 18s
Security Scan (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / security (push) Successful in 34s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 45s
CI (SIAX Cloud) / sonar (push) Successful in 1m28s
Deploy to Coolify / deploy (push) Failing after 9m58s
CI (SIAX Cloud) / quality (push) Successful in 10m31s
|
||
|
SIAX Estate
|
67b0a205b7 |
fix(estate): återställ main efter massradering i docs(production)-svepet
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 3s
masterplan-lock / check (pull_request) Successful in 11s
CI (SIAX Cloud) / security (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 22s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 48s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m15s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m38s
Massraderingscommit: |
||
|
siax-bot
|
576ae1585f |
Merge pull request 'fix(security): smala gitleaks-fingerprints för verifierade falska positiver' (#538) from chore/gitleaksignore-repo15 into main
CI (SIAX Cloud) / security (push) Successful in 31s
Security Scan (SIAX Cloud) / security (push) Successful in 36s
CI (SIAX Cloud) / integration (push) Successful in 1m1s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 1m12s
CI (SIAX Cloud) / sonar (push) Successful in 1m19s
masterplan-lock / check (push) Successful in 1m40s
CI (SIAX Cloud) / quality (push) Successful in 2m10s
Deploy to Coolify / deploy (push) Successful in 4m20s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 4m37s
|
||
|
siax-bot
|
1029a4c485 |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a6c605ea7f)' (#541) from fix/prod-evidence-2026-09-29 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 12s
Security Scan (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Canceled after 42s
CI (SIAX Cloud) / integration (push) Canceled after 42s
CI (SIAX Cloud) / security (push) Canceled after 42s
CI (SIAX Cloud) / sonar (push) Canceled after 41s
masterplan-lock / check (push) Successful in 54s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m4s
Deploy to Coolify / deploy (push) Successful in 2m20s
|
||
|
siax-bot
|
e0fb148fba |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-a6c605ea7f
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 7s
CI (SIAX Cloud) / security (pull_request) Successful in 14s
masterplan-lock / check (push) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 40s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m48s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m3s
|
||
|
admin
|
a6c605ea7f |
Merge pull request 'fix(recovery): restore 0pt source and isolate integration writes' (#539) from codex/operator-source-recovery-20261110 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 9s
Security Scan (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / security (push) Successful in 18s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m19s
CI (SIAX Cloud) / quality (push) Successful in 1m28s
Deploy to Coolify / deploy (push) Successful in 2m15s
CI (SIAX Cloud) / sonar (push) Successful in 2m17s
CI (SIAX Cloud) / integration (push) Successful in 9m46s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 8s
masterplan-lock / check (pull_request) Successful in 11s
CI (SIAX Cloud) / security (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 32s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m47s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m7s
|
||
|
admin
|
0cac0266e0 |
test(safety): require an isolated opt-in target for ST0RE integration
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m15s
|
||
|
admin
|
3d2fc6f913 | fix(recovery): restore source removed by production documentation merge | ||
|
admin
|
39fc5e3ce3 |
fix(security): smala gitleaks-fingerprints för verifierade falska positiver
Varför: REPO-15 (BLOCK) fällde repot på fynd i historiken. Varje fynd öppnades och lästes; samtliga är syntetiska testvärden, dokumentationsplatshållare eller tredjepartsinnehåll — ingen verklig hemlighet. Se kommentarerna i filen. Ändring: .gitleaksignore med en post per exakt förekomst i formatet <commit>:<fil>:<regel>:<rad>. Inga regel- eller globundantag, så ett framtida riktigt fynd fälls fortfarande. Verifiering: gitleaks detect -s . -> no leaks found; doctor --repo . -> REPO-15 PASS. |
||
|
admin
|
585bdd4b44 | docs(production): standardiserad produktionsberedskap och gap-analys | ||
|
admin
|
a4189333af |
docs(production): standardiserad produktionsberedskap och gap-analys
Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-11. Nivån är evidensbaserad, inte ett leveransgodkännande. |
||
|
admin
|
fb072d47c7 |
docs(status): spegla STATUS.md i docs/ för produktionsaudit
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / integration (push) Failing after 37s
CI (SIAX Cloud) / security (push) Successful in 1m1s
CI (SIAX Cloud) / sonar (push) Successful in 1m10s
masterplan-lock / check (push) Successful in 1m3s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m8s
Deploy to Coolify / deploy (push) Successful in 2m39s
CI (SIAX Cloud) / quality (push) Successful in 10m12s
|
||
|
admin
|
e7cfdf47f1 |
Merge pull request #536 (manually-merged)
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 14s
masterplan-lock / check (push) Successful in 22s
Security Scan (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / security (push) Successful in 51s
CI (SIAX Cloud) / integration (push) Successful in 1m57s
CI (SIAX Cloud) / sonar (push) Successful in 2m21s
Deploy to Coolify / deploy (push) Successful in 3m5s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m53s
CI (SIAX Cloud) / quality (push) Successful in 10m45s
|
||
|
siax-bot
|
dccdfed9bd |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-925f5ca2fd
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 24s
masterplan-lock / check (push) Successful in 10s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 1m53s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m4s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m31s
|
||
|
admin
|
925f5ca2fd |
Merge pull request #535
CI (SIAX Cloud) / security (push) Successful in 18s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 11s
masterplan-lock / check (push) Successful in 11s
Security Scan (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m44s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m35s
Deploy to Coolify / deploy (push) Successful in 1m40s
CI (SIAX Cloud) / integration (push) Successful in 10m31s
CI (SIAX Cloud) / quality (push) Successful in 12m23s
|
||
|
admin
|
2ea4062d09 |
chore: adopt SIAX Golden Standard docs and configuration
masterplan-lock / check (push) Successful in 14s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 14s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 37s
CI (SIAX Cloud) / security (pull_request) Successful in 38s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 1m23s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m7s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m28s
siax-scaffold genererade saknade standardartefakter (arkitektur, säkerhet, ändringslogg, runbooks, CI, devcontainer, licens m.m.) ur repots faktiska filer. DOC-07 lämnas avsiktligt röd till en verklig restore bevisats. |
||
|
admin
|
6ae98c7034 |
Merge pull request 'chore(doctor): undanta genererade artefakter och spegelprosa från REPO-01' (#534) from chore/doctor-exemptions-repo01 into main
masterplan-lock / check (push) Successful in 11s
CI (SIAX Cloud) / security (push) Successful in 48s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 58s
Security Scan (SIAX Cloud) / security (push) Successful in 25s
CI (SIAX Cloud) / sonar (push) Successful in 1m57s
CI (SIAX Cloud) / quality (push) Canceled after 2m26s
CI (SIAX Cloud) / integration (push) Canceled after 2m22s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 2m16s
Deploy to Coolify / deploy (push) Successful in 3m7s
|
||
|
admin
|
54ff8a3958 | ci: re-trigger efter serveromstart (statusuppdatering avbröts) | ||
|
admin
|
869218fb8b |
Merge pull request #533
Deploy to Coolify / deploy (push) Canceled after 0s
CI (SIAX Cloud) / quality (push) Canceled after 0s
CI (SIAX Cloud) / integration (push) Canceled after 0s
CI (SIAX Cloud) / security (push) Canceled after 0s
CI (SIAX Cloud) / sonar (push) Canceled after 0s
CI (SIAX Cloud) / Component conformance (blocking) (push) Canceled after 0s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Canceled after 0s
Security Scan (SIAX Cloud) / security (push) Canceled after 0s
masterplan-lock / check (push) Successful in 9s
|
||
|
admin
|
1e79d0c4cf |
chore(doctor): exempt generated artifacts and mirror prose from REPO-01
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 15s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 30s
CI (SIAX Cloud) / security (pull_request) Successful in 52s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m46s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m54s
Varför: REPO-01 (inga github.com-remotes eller -referenser i json/md) stod som BLOCK även efter att de felaktiga lokala github-remoterna tagits bort. De kvarvarande träffarna var av två slag: genererade artefakter (SBOM, release-artefakter, package-lock.json) som listar tredjepartsberoendens metadata, och dokumentationsprosa som antingen beskriver GitHub som read-only spegel av kanoniska git.siax.io, länkar tredjepartsprojekt, eller citerar GitHubs egna produkt-/inställningssidor i historiska driftsanteckningar. Ändring: ny .siax-doctor.json med två smala REPO-01-undantag — ett för de genererade artefakterna, ett för de namngivna dokumentationsfilerna — med motivering per kategori. Där en dokumentationslänk pekade på en SIAX-repo via GitHub-spegeln och raden inte handlade om spegeln i sig, är länken omskriven till kanoniska https://git.siax.io/. Inga genererade filer är redigerade. Verifiering: node packages/doctor/src/doctor.mjs --repo . ger REPO-01 PASS ("N träff(ar) undantagna via .siax-doctor.json"). |
||
|
admin
|
72d5876d23 |
docs(policy): SIAX Agent Execution Policy i AGENTS.md + CLAUDE.md
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
masterplan-lock / check (pull_request) Successful in 11s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 18s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m17s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m52s
masterplan-lock / check (push) Successful in 5s
|
||
|
admin
|
596ca3f90e |
docs(production): standardiserad produktionsberedskap och gap-analys
CI (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 17s
Security Scan (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / integration (push) Successful in 1m5s
CI (SIAX Cloud) / sonar (push) Successful in 1m10s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m29s
Deploy to Coolify / deploy (push) Successful in 1m35s
CI (SIAX Cloud) / quality (push) Successful in 12m2s
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 10s
masterplan-lock / check (pull_request) Successful in 10s
CI (SIAX Cloud) / security (pull_request) Successful in 18s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 21s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m1s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m35s
|
||
|
admin
|
66a7e253eb |
docs(production): standardiserad produktionsberedskap och gap-analys
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
masterplan-lock / check (push) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 23s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m59s
CI (SIAX Cloud) / quality (pull_request) Successful in 11m30s
Lägger docs/production-readiness.md och siax/production-gaps.json enligt SIAX Master Definition of Done. Underlag: git-, kod- och live-evidens 2026-11-09. Nivån är evidensbaserad, inte ett leveransgodkännande. |
||
|
admin
|
a4e6d7d8e2 |
Merge pull request 'chore(manifest): registrera saknade surface-poster (surfaces-fasen)' (#530) from chore/surface-posts-20261110 into main
CI (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 23s
masterplan-lock / check (push) Successful in 11s
Security Scan (SIAX Cloud) / security (push) Successful in 37s
CI (SIAX Cloud) / sonar (push) Successful in 1m23s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m45s
Deploy to Coolify / deploy (push) Successful in 3m0s
CI (SIAX Cloud) / quality (push) Canceled after 6m41s
CI (SIAX Cloud) / integration (push) Canceled after 6m39s
|
||
|
admin
|
416d00fc46 |
chore(manifest): registrera saknade surface-poster (surfaces-fasen)
masterplan-lock / check (push) Successful in 10s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
masterplan-lock / check (pull_request) Successful in 25s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 35s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m56s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m18s
Varje capability deklarerar i `surfaces[]` vilka ytor den ska ha (api, cli, mcp, ui, job, sdk). Fram till nu saknades `siax.surface`-poster för många av dem, vilket gjorde `siax-doctor surfaces` röd över estaten. Denna commit lägger posterna. ÄRLIGHETSREGEL: status sätts till `live` ENDAST där exponeringen kan påvisas i repot — operationId finns i committad OpenAPI, i genererad SDK, eller i ett CLI-/MCP-paket. Övriga poster skrivs som `planned`: deklarationen finns kvar men posten påstår inte att ytan är byggd. Ingen yta har påhittats och ingen deklaration har tagits bort. |
||
|
admin
|
d3b1964d3a |
feat(capabilities): registrera capability-ägare med verifierat kontrakt (#529)
masterplan-lock / check (push) Successful in 14s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 18s
CI (SIAX Cloud) / security (push) Successful in 26s
Security Scan (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m31s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m44s
Deploy to Coolify / deploy (push) Successful in 2m9s
CI (SIAX Cloud) / integration (push) Successful in 10m12s
CI (SIAX Cloud) / quality (push) Successful in 11m26s
|
||
|
Claude Code
|
59c0e008f5 |
Merge pull request #528
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 19s
Security Scan (SIAX Cloud) / security (push) Successful in 22s
CI (SIAX Cloud) / security (push) Successful in 24s
CI (SIAX Cloud) / sonar (push) Successful in 1m39s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m58s
Deploy to Coolify / deploy (push) Successful in 2m23s
CI (SIAX Cloud) / integration (push) Successful in 9m55s
CI (SIAX Cloud) / quality (push) Successful in 10m12s
masterplan-lock / check (push) Successful in 7s
|
||
|
admin
|
20d66ea40d |
feat(capabilities): bind operationId for API-surface capability records
masterplan-lock / check (push) Successful in 8s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
masterplan-lock / check (pull_request) Successful in 14s
CI (SIAX Cloud) / security (pull_request) Successful in 26s
CI (SIAX Cloud) / integration (pull_request) Successful in 37s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 32s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m26s
Records with an api surface but no operationId cannot be attested against the implementation (doctor CAP-OPID-MISSING). Each operationId here is taken verbatim from this repo's own contract file and matches the capability one-to-one; no operationId was guessed. |
||
|
Claude Code
|
7ce87ffa01 |
Merge pull request #527
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 13s
CI (SIAX Cloud) / security (push) Successful in 19s
Security Scan (SIAX Cloud) / security (push) Successful in 19s
CI (SIAX Cloud) / integration (push) Successful in 45s
CI (SIAX Cloud) / sonar (push) Successful in 1m28s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m35s
Deploy to Coolify / deploy (push) Successful in 1m44s
CI (SIAX Cloud) / quality (push) Successful in 10m24s
|
||
|
admin
|
d81325f27c |
Merge pull request 'feat(auth): dual-accept CL0UD workload identity on the machine routes' (#525) from feat/workload-identity-dual-accept-20261108 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 9s
CI (SIAX Cloud) / security (push) Successful in 14s
Security Scan (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / sonar (push) Successful in 1m38s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m58s
Deploy to Coolify / deploy (push) Successful in 2m2s
CI (SIAX Cloud) / quality (push) Successful in 10m14s
CI (SIAX Cloud) / integration (push) Successful in 10m18s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 8s
masterplan-lock / check (push) Successful in 11s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 16s
CI (SIAX Cloud) / security (pull_request) Successful in 27s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 33s
CI (SIAX Cloud) / integration (pull_request) Successful in 9m58s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m43s
|
||
|
admin
|
d40360aabc |
feat(auth): dual-accept CL0UD workload identity on the machine routes
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 7s
masterplan-lock / check (push) Successful in 7s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 18s
CI (SIAX Cloud) / integration (pull_request) Successful in 27s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m5s
The internal machine routes (`quality/bridge-run`, `canonical/facts`, `internal/evidence-outbox/dispatch`, `internal/er/candidates`, `search/definitions`) trusted a shared `X-Internal-Token` with NO tenant authority: middleware let it through without setting any verified tenant, so `assertTenantMatchesVerified` was a no-op and a caller-chosen `tenant_id` in the body was authoritative. This closes that gap while keeping the engine working during the transition to CL0UD workload tokens: - `src/auth/internal-service-tenant.ts` — the server-configured `INTERNAL_SERVICE_TENANTS` scope, a scope header that only middleware may set, and a parser that strips/ignores client values. - `src/auth/cl0ud-workload.ts` — a real `jose`/JWKS verifier for CL0UD workload JWTs (`iss`/`aud`/`exp`), deriving `tenant_id` and `capabilities` from verified claims only. Fail-closed when a token is presented but the issuer/JWKS/audience/tenant claim does not verify. - `middleware.ts` — strips every `x-0pt-verified-*` header on all forwarded paths. Legacy internal tokens get the single configured tenant as scope (an ambiguous multi-tenant list is refused with 401 instead of widened); a Bearer CL0UD workload token is verified and its claims become the verified tenant/subject/capabilities. - `src/http/tenant-guard.ts` — enforces the service scope on tenant-scoped writes (deny when the tenant is outside the scope) and adds `assertWorkloadCapabilities` for capability-scoped principals. - `quality/bridge-run` now calls `assertTenantMatchesVerified` like `canonical/facts` already did. Tests: `tests/auth/workload-identity-dual-accept.test.ts` (10 cases) covers forged-header stripping, ambiguous-scope refusal, wrong audience, missing tenant claim, cross-tenant denial and missing-capability denial. Real CL0UD provisioning (service accounts + published JWKS) is still required before a workload token exists in production; until then the legacy token path is the only one that authenticates, now tenant-scoped. |
||
|
siax-bot
|
c6a5102a2a |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-62517aca49
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / sonar (pull_request) Skipped
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 24s
masterplan-lock / check (pull_request) Successful in 29s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 38s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m27s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m46s
|
||
|
admin
|
62517aca49 |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#523) from fix/prod-restore-2026-09-29 into main
masterplan-lock / check (push) Successful in 6s
CI (SIAX Cloud) / Component conformance (blocking) (push) Failing after 10s
CI (SIAX Cloud) / security (push) Successful in 14s
Security Scan (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / quality (push) Successful in 42s
CI (SIAX Cloud) / sonar (push) Successful in 53s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 49s
CI (SIAX Cloud) / integration (push) Successful in 9m56s
|
||
|
admin
|
db26daa979 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
Security Scan (SIAX Cloud) / security (pull_request) Failing after 20s
CI (SIAX Cloud) / security (pull_request) Successful in 31s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 31s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m7s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m27s
|
||
|
admin
|
c532cedb5e |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (38ae3ddf0b)' (#522) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / security (push) Successful in 15s
Security Scan (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / quality (push) Canceled after 16s
CI (SIAX Cloud) / integration (push) Canceled after 15s
CI (SIAX Cloud) / sonar (push) Canceled after 15s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 1m12s
|
||
|
siax-bot
|
40202178a3 |
fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-38ae3ddf0b
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Failing after 18s
masterplan-lock / check (pull_request) Failing after 18s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 25s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m19s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m27s
|
||
|
admin
|
38ae3ddf0b |
Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#521) from fix/prod-restore-2026-09-29 into main
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / quality (push) Failing after 9s
CI (SIAX Cloud) / security (push) Failing after 9s
CI (SIAX Cloud) / sonar (push) Failing after 9s
Security Scan (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / integration (push) Successful in 1m6s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 59s
Deploy to Coolify / deploy (push) Successful in 1m23s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 4s
masterplan-lock / check (pull_request) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 13s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 19s
CI (SIAX Cloud) / integration (pull_request) Successful in 1m12s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m27s
|
||
|
admin
|
a7a4295043 |
Merge branch 'main' into fix/prod-restore-2026-09-29
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (push) Successful in 5s
masterplan-lock / check (pull_request) Successful in 4s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Failing after 20s
CI (SIAX Cloud) / quality (pull_request) Failing after 20s
CI (SIAX Cloud) / security (pull_request) Failing after 20s
CI (SIAX Cloud) / integration (pull_request) Successful in 10m18s
|
||
|
admin
|
f1d47ffb2e |
Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b1ae910d64)' (#520) from fix/prod-evidence-2026-09-29 into main
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / Component conformance (blocking) (push) Successful in 8s
CI (SIAX Cloud) / quality (push) Canceled after 15s
CI (SIAX Cloud) / integration (push) Canceled after 14s
CI (SIAX Cloud) / security (push) Canceled after 14s
CI (SIAX Cloud) / sonar (push) Canceled after 14s
Security Scan (SIAX Cloud) / security (push) Canceled after 14s
Release chain (G17, ADR-W16-003) / Build, push, G17 (SBOM/scan/attest/verify/evidence) (push) Successful in 1m5s
Deploy to Coolify / deploy (push) Successful in 1m20s
|