admin
e4b4fff83a
merge: a11y evidence via ariaSnapshot (PR #9 )
CI (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 27s
CI (SIAX Cloud) / quality (push) Successful in 55s
2026-09-16 23:36:19 +02:00
admin
8e0e2220c6
fix(capture): a11y evidence via ariaSnapshot (page.accessibility removed in playwright >=1.5x)
CI (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / security (pull_request) Successful in 46s
CI (SIAX Cloud) / contracts (push) Successful in 48s
CI (SIAX Cloud) / quality (push) Successful in 49s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m5s
2026-09-16 23:34:21 +02:00
admin
f5839b260a
merge: CL0UD_BASE_URL optional (PR #8 )
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 55s
2026-09-16 23:30:17 +02:00
admin
aacbf3c3d6
fix(config): CL0UD_BASE_URL optional (disabled state until CL0UD machine surface exists)
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / security (pull_request) Successful in 17s
CI (SIAX Cloud) / contracts (pull_request) Successful in 16s
CI (SIAX Cloud) / contracts (push) Successful in 45s
CI (SIAX Cloud) / quality (push) Successful in 57s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m21s
2026-09-16 23:28:19 +02:00
admin
06bbb7e7f9
merge: CL0UD probe + a11y/HAR evidence + worker scale toggle (PR #7 )
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 47s
2026-09-16 23:24:13 +02:00
admin
f6ff1396d8
feat(api): CL0UD capability probe + a11y/HAR evidence + worker scale toggle
...
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / contracts (push) Successful in 17s
CI (SIAX Cloud) / quality (pull_request) Successful in 54s
CI (SIAX Cloud) / quality (push) Successful in 56s
CI (SIAX Cloud) / security (pull_request) Successful in 1m7s
CI (SIAX Cloud) / security (push) Successful in 1m5s
- cl0ud client: contract-first probe of documented GET /capabilities/:id,
status connected/denied/unavailable/disabled surfaced in /health;
CL0UD_REQUIRED=true = fail-closed 503; full policy-decisions gated on
CL0UD B-4/ADR-0031 (deliberately not simulated)
- capture depth: accessibility tree + condensed HAR as evidence kinds
(null = explicit evidence gap)
- CAPTURE_WORKER=on/off for separate-scale deployments
- 34/34 tests
2026-09-16 23:21:54 +02:00
admin
5c62f32068
merge: docs — scan worker + AUD0 wire (PR #6 )
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 22s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 23:11:53 +02:00
admin
b8d1aca740
docs(deploy): scan worker + AUD0 wire + env contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 54s
CI (SIAX Cloud) / contracts (pull_request) Successful in 41s
CI (SIAX Cloud) / security (pull_request) Successful in 42s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
2026-09-16 23:07:47 +02:00
admin
80cb845e83
merge: fix capture page.evaluate as plain string (PR #5 )
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 20s
CI (SIAX Cloud) / quality (push) Successful in 1m13s
2026-09-16 23:04:15 +02:00
admin
1e74c69228
fix(capture): run page.evaluate as plain string (tsx/esbuild __name helpers break in browser context)
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 25s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / security (push) Successful in 18s
CI (SIAX Cloud) / quality (pull_request) Successful in 50s
CI (SIAX Cloud) / quality (push) Successful in 53s
2026-09-16 23:01:26 +02:00
admin
a4cdee7f64
merge: deterministic scan worker + AUD0 wire + tenant binding (PR #4 )
CI (SIAX Cloud) / security (push) Successful in 33s
CI (SIAX Cloud) / contracts (push) Successful in 37s
CI (SIAX Cloud) / quality (push) Successful in 58s
2026-09-16 22:56:25 +02:00
admin
12f6a65b80
feat(api): deterministic scan worker + AUD0 wire + tenant binding
...
CI (SIAX Cloud) / security (pull_request) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 17s
CI (SIAX Cloud) / quality (push) Successful in 1m9s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
- scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system
chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/
stylesheet/asset/network-request/screenshot), confidence=measured
- AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/
.scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org)
- tenant binding: resourceowner claim from introspection (deny-by-default 403),
migration 002 tenant_id on registries+scans, all queries tenant+owner scoped
- evidence gaps stay explicit (screenshot miss → no screenshot record)
- 30/30 tests, canonical validator OK
2026-09-16 22:53:55 +02:00
admin
7fb6043e34
merge: docs — migration procedure + endpoint contract (PR #3 )
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 19s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 22:41:20 +02:00
admin
3b98b9f5c8
docs(deploy): migration procedure + live endpoint contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
CI (SIAX Cloud) / security (pull_request) Successful in 11s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / quality (pull_request) Successful in 48s
2026-09-16 22:38:25 +02:00
admin
26df793884
merge: Postgres persistence for registries + scans (PR #2 )
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 19s
CI (SIAX Cloud) / quality (push) Successful in 53s
2026-09-16 22:35:16 +02:00
admin
9482a97795
feat(api): Postgres persistence for registries + scans (owner-scoped, fail-closed)
...
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
- schema migration 001 (registries, scans; owner_sub = introspected subject)
- pg pool + services; scan ownership enforced in SQL (INSERT ... SELECT WHERE owner_sub)
- real handlers: 201/400/404/500, owner-scoped GET/POST, listScans registryId filter
- graceful shutdown closes pool; 7 new persistence tests (21/21)
2026-09-16 22:32:48 +02:00
admin
72000b79ae
merge: docs(apex) — c0py.siax.io live via DNS-only sidestep + introspection env contract (PR #1 )
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 15s
CI (SIAX Cloud) / quality (push) Successful in 51s
2026-09-16 22:20:51 +02:00
admin
949e4ec816
docs(deploy): apex sidestep live (DNS-only + web domain), introspection env contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 18s
CI (SIAX Cloud) / contracts (pull_request) Successful in 19s
CI (SIAX Cloud) / security (pull_request) Successful in 43s
CI (SIAX Cloud) / quality (push) Successful in 54s
CI (SIAX Cloud) / quality (pull_request) Successful in 54s
2026-09-16 22:14:43 +02:00
admin
495050752a
feat(api): real Zitadel token introspection (fail-closed) + expected-audience enforcement
...
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 30s
CI (SIAX Cloud) / quality (push) Successful in 1m33s
- preHandler: Bearer tokens are introspected against Zitadel (RFC 7662)
- any introspection failure (unreachable, non-200, bad JSON, inactive) = 401
- asserted aud must include ZITADEL_EXPECTED_AUDIENCE (project id); absent aud accepted per RFC 7662
- config: ZITADEL_INTROSPECTION_CLIENT_ID/SECRET + ZITADEL_EXPECTED_AUDIENCE (optional; Bearer-presence fallback logs warn in prod)
- 13 new tests (introspection fail-closed matrix + preHandler flow)
2026-09-16 22:06:46 +02:00
admin
dac79054de
docs: CI jobs + manual-deploy doctrine in AGENTS.md
CI (SIAX Cloud) / contracts (push) Successful in 25s
CI (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / quality (push) Successful in 49s
2026-09-16 21:57:44 +02:00
admin
e66f101996
merge: canonical web product reconstruction engine (GitHub PR #1 )
...
CI (SIAX Cloud) / contracts (push) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 33s
CI (SIAX Cloud) / quality (push) Successful in 49s
Contracts-first architecture: typed evidence/reconstruction/fidelity
contracts, upstream provenance registry, deterministic fidelity release
gate, canonical architecture CI validator, MASTERPLAN/STANDARDS/
AUTOMATIONS/UPSTREAM-CAPABILITY-MATRIX docs. Rebased over prod cutover
state; broken Coolify auto-deploy removed (manual deploy per DEPLOY.md).
2026-09-16 21:54:30 +02:00
admin
29ee39311d
chore(ci): remove broken Coolify auto-deploy (git-buildpack broken for monorepo, manual deploy per DEPLOY.md)
2026-09-16 21:54:22 +02:00
admin
e26398c496
test(core): add fidelity gate coverage
2026-09-16 21:52:45 +02:00
admin
cfa9a05ad8
feat(core): export reconstruction and fidelity contracts
2026-09-16 21:52:45 +02:00
admin
52f5146940
feat(core): add deterministic fidelity release gate
2026-09-16 21:52:45 +02:00
admin
762b778ee2
feat(core): add reconstruction pipeline contracts
2026-09-16 21:52:45 +02:00
admin
ac797d3e4d
ci: enforce canonical architecture contracts
2026-09-16 21:52:45 +02:00
admin
cfac4cc913
ci: wire canonical architecture validation
2026-09-16 21:52:45 +02:00
admin
3687e87c75
ci: add canonical architecture policy validator
2026-09-16 21:52:45 +02:00
admin
35f1a3ca66
test(core): validate upstream provenance policy
2026-09-16 21:52:45 +02:00
admin
be942285b1
docs: align agent rules with canonical reconstruction architecture
2026-09-16 21:52:45 +02:00
admin
053b524fa4
docs: redefine c0py as canonical reconstruction engine
2026-09-16 21:51:03 +02:00
admin
56e4b696f4
feat(core): export provenance validation
2026-09-16 21:51:03 +02:00
admin
b885a160bd
feat(core): add upstream provenance registry validation
2026-09-16 21:51:03 +02:00
admin
1e3abaf824
feat(types): add canonical evidence and reconstruction contracts
2026-09-16 21:51:03 +02:00
admin
4a88f74627
docs: define c0py autonomous execution workflows
2026-09-16 21:51:03 +02:00
admin
982c7b19fc
docs: define c0py engineering and evidence standards
2026-09-16 21:51:03 +02:00
admin
8e44be0b69
docs: add upstream capability adoption matrix
2026-09-16 21:51:03 +02:00
admin
b7430f17cb
docs: establish canonical c0py reconstruction masterplan
2026-09-16 21:51:03 +02:00
admin
5522b3bd3b
docs: production deployment facts, DNS/TLS pattern, Coolify gotchas
CI (SIAX Cloud) / contracts (push) Successful in 15s
CI (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / quality (push) Successful in 49s
Deploy to Coolify / deploy (push) Failing after 1s
2026-09-16 21:47:07 +02:00
admin
0840daf5a8
fix: move web Dockerfile to repo root (Coolify build context = dockerfile dir)
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 50s
2026-09-16 19:08:27 +02:00
admin
16f4a5aaea
feat: add web Dockerfile for Next.js Coolify deploy
Deploy to Coolify / deploy (push) Failing after 5s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 18:49:30 +02:00
admin
bc36298b28
docs: update AGENTS.md with deployment findings
CI (SIAX Cloud) / quality (push) Successful in 1m11s
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 31s
2026-09-16 15:25:16 +02:00
admin
db3509ab4f
fix: add fail-closed preHandler auth check
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 49s
2026-09-16 15:13:13 +02:00
admin
64ff90517c
fix: tsx symlink after pnpm install for workspace devDeps
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 50s
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / security (push) Successful in 26s
2026-09-16 14:58:55 +02:00
admin
8b04583c4f
fix: run pnpm install in runtime stage for proper workspace symlinks
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 1m15s
2026-09-16 14:55:34 +02:00
admin
779b96391b
fix: copy api node_modules to runtime for workspace deps
Deploy to Coolify / deploy (push) Failing after 3s
CI (SIAX Cloud) / contracts (push) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 27s
CI (SIAX Cloud) / quality (push) Successful in 50s
2026-09-16 14:52:05 +02:00
admin
d473275a15
fix: dynamically link tsx from pnpm store for node --import resolution
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 48s
CI (SIAX Cloud) / quality (push) Successful in 53s
CI (SIAX Cloud) / contracts (push) Successful in 48s
2026-09-16 14:45:25 +02:00
admin
36a665c8e1
fix: symlink tsx in runtime stage to resolve module not found
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / contracts (push) Successful in 12s
CI (SIAX Cloud) / security (push) Successful in 37s
CI (SIAX Cloud) / quality (push) Successful in 1m48s
2026-09-16 14:42:11 +02:00
admin
c59fe4cfd4
fix: install tsx in runtime stage for node --import support
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 15s
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / quality (push) Successful in 51s
2026-09-16 14:37:13 +02:00
admin