chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity
43 Commits 11 Branches 1 Tag 5.2 MiB
8aa533eecc
Commit Graph

43 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chris Christiansen
8aa533eecc feat(identity): add static workspace authority foundation 2026-09-19 17:18:38 +00:00
Chris Christiansen
e4ded2010e docs(handoff): record Emma session boundaries 2026-09-19 14:43:47 +00:00
Chris Christiansen
aa8612d03e docs(handoff): record Emma session continuity pass 2026-09-19 14:31:31 +00:00
Chris Christiansen
330e3ada1f docs(handoff): record Emma canonicalization baseline 2026-09-19 13:56:48 +00:00
Chris Christiansen
c7c96efd12 fix(deploy): include MCP requirements in Cloud Build context 2026-09-19 12:39:31 +00:00
Chris Christiansen
35254145ca fix(deploy): preserve OPAX MCP private Emma runtime contract 2026-09-19 12:30:01 +00:00
Chris Christiansen
4b01f4f754 chore(devex): add safe Gitea git wrapper 2026-09-19 00:54:59 +00:00
Chris Christiansen
3ddc0c50a6 chore(platform): configure OSVX MCP endpoint 2026-09-19 00:42:40 +00:00
Chris Christiansen
aee859b3ba feat(emma): add conversation history and release tooling 2026-09-19 00:38:43 +00:00
Chris Christiansen
2a48141b99 docs(incu): add constitution and manifest templates 2026-09-18 23:00:28 +00:00
Chris Christiansen
27f050e8e4 chore(session): logg 20260918-215724 — (ingen notat) 2026-09-18 21:57:32 +00:00
Chris Christiansen
aa90d13739 chore(session): logg 20260918-215541 — (ingen notat) 2026-09-18 21:55:48 +00:00
Chris Christiansen
97421374c2 feat(emma): bridge capability status into runtime 2026-09-18 15:58:04 +00:00
Chris Christiansen
4eacc756b0 feat(emma): add canonical capability registry 2026-09-18 15:34:46 +00:00
Chris Christiansen
e48f8390ed fix(emma): enforce user-facing capability boundaries 2026-09-18 14:46:32 +00:00
Chris Christiansen
d1864f1f55 feat(opax-mcp): add local gated call_emma integration 
Phase 2C adds a local Firestore-emulator-only call_emma path with server-injected test identity, deterministic local Emma execution, conversation/message persistence, and append-only audit logging.

The integration test verifies feature gating, persistence, audit correlation, client identity isolation, and controlled local process cleanup.
 2026-09-17 15:45:42 +00:00
Chris Christiansen
362fb9a7b4 fix(opax): restore persistence store compatibility 2026-09-16 18:35:06 +00:00
Chris Christiansen
f49cbc4612 fix(opax): restore literal tool risk policy 2026-09-16 17:38:39 +00:00
Chris Christiansen
3a2aae98aa feat(opax): add Firestore persistence foundation 2026-09-16 16:46:24 +00:00
Chris Christiansen
a777e4abaf feat(opax-mcp): add master hub contracts and policy foundation 2026-09-16 16:22:32 +00:00
Chris Christiansen
757508d2ba build(opax-mcp): add build-only Cloud Build pipeline 2026-09-16 15:35:10 +00:00
Chris Christiansen
e66b1a328e refactor(opax-mcp): introduce canonical Emma identity 2026-09-16 15:27:48 +00:00
Chris Christiansen
849ec9dea0 fix(opax-web): extend agent request timeout 2026-09-13 19:35:46 +00:00
Chris Christiansen
c646649a76 feat(opax-ui): make Emma a modern operator workspace 2026-09-13 16:26:04 +00:00
Chris Christiansen
8f1c501651 feat(emma): deploy browser-based Emma Local operator POC 2026-09-13 15:53:04 +00:00
Chris Christiansen
0b40d556cd style(opax-web): fix whitespace hygiene 2026-09-13 11:22:18 +00:00
Chris Christiansen
429cc95c9a feat(opax-web): import P1A Operations Console 2026-09-13 11:21:00 +00:00
Chris Christiansen
fceec08823 boot/opax: bruk samme oppstart som proof-of-curiosity (Fase 1)
Some checks failed
Check Python Version Consistency / Check Python Version (push) Has been cancelled
Details
2026-09-06 20:06:26 +00:00
Chris Christiansen
004267689c feat(a2h2a): auth, CSRF, logging fixes + test updates
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-04 20:38:37 +00:00
Chris Christiansen
422d280d52 chore(deploy): update image to v3.6.0
Some checks failed
Check Python Version Consistency / Check Python Version (push) Has been cancelled
Details
2026-09-04 20:30:59 +00:00
Chris Christiansen
0c94ed92cf chore(session): logg 20260904-190539 — (ingen notat)
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-04 19:06:30 +00:00
Chris Christiansen
32fa75a1e3 chore(session): logg 20260904-190543 — (ingen notat)
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-04 19:06:15 +00:00
Chris Christiansen
3e296673b2 test(a2h2a): add end-to-end test for approval flow 
Adds a test script that validates the entire A2H2A approval process, from ticket creation to final verification in Firestore.

- The server now supports a `test_mode` flag to facilitate testing.

- The test verifies ticket creation, review page access, approval, final ticket status, and audit log creation.
 2026-09-04 12:43:55 +00:00
Chris Christiansen
310dca2db5 feat(a2h2a): implement phase 1 approval flow 
Implements a secure, state-only approval workflow for A2H2A tickets.

- Adds single-use token generation and validation.

- Implements an IAP-gated HTML review page.

- Adds state-changing approve/reject endpoints with full validation.

- Introduces audit logging for ticket events.

- Execution of tools remains disabled.
 2026-09-04 12:23:59 +00:00
Chris Christiansen
3b6e4e4890 docs/code: clarify A2H2A prototype status and disable execution 
- Add Implementation Status section to A2H2A spec

- Clarify Google Chat is notification-only

- Add target approval architecture requirements

- Add critical A2H2A safety principle to RUNBOOK.md

- Remove unsafe approval/rejection endpoints from server.py

- Enforce server-side parameter_hash calculation

- Disable execution for all tools in A2H2A_TOOL_ALLOW_LIST
 2026-09-04 12:00:07 +00:00
Chris Christiansen
79b100caff docs(security): komplett sikkerhetsdokumentasjon med 7 manifestfiler
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details 
- SECURITY.md: Overordnet visjon med lenker til alle manifestfiler
- SECURITY_AUDITS.md: Historikk og To-Do liste
- RUNBOOK.md: 6 operasjonelle scenarier (ukjent bruker, eksponert secret, 401/403, 50x, VPC-SC, BinAuthz)
- INCIDENT_RESPONSE.md: PICERL-modell med eskaleringsmatrise
- SECRET_MANAGEMENT.md: Policy + lokal utvikling
- ACCESS_CONTROL.md: IAM-policy med service account-oversikt
- COMPLIANCE.md: TYR, Binary Auth, KMS-attestasjon

Opprydding:
- Slettet sensitive filer (test_secret.txt, final-secret-test.txt, tyr/certs/ca_password.txt)
- Slettet engangsskript og midlertidige filer
- Oppdatert .gitignore med *.txt
 2026-09-04 08:25:57 +00:00
Chris Christiansen
a5864f8584 chore(session): logg 20260904-074222 — (ingen notat)
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-04 07:43:31 +00:00
Chris Christiansen
8e3d8810e1 chore(session): logg 20260904-074226 — (ingen notat)
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-04 07:43:02 +00:00
Chris Christiansen
0d73a9c258 docs(security): oppdater med alle forbedringer og "ukjent bruker"-hendelse
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-03 19:46:03 +00:00
Chris Christiansen
86551f2def fix(mcp): use Cloud Run project URL and Streamable HTTP client
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details
2026-09-03 10:44:23 +00:00
Chris Christiansen
6670c2b67b chore(session): logg 20260903-052807 — (ingen notat) 2026-09-03 05:28:46 +00:00
Chris Christiansen
85ff5da05d chore(session): logg 20260903-052809 — (ingen notat) 2026-09-03 05:28:45 +00:00
Chris Christiansen
1ba991f582 feat(core): Fresh initialization - Deploy v3.6.1 Singularity Architecture 2026-09-03 04:03:09 +00:00