aa90d13739
chore(session): logg 20260918-215541 — (ingen notat)
2026-09-18 21:55:48 +00:00
97421374c2
feat(emma): bridge capability status into runtime
2026-09-18 15:58:04 +00:00
4eacc756b0
feat(emma): add canonical capability registry
2026-09-18 15:34:46 +00:00
e48f8390ed
fix(emma): enforce user-facing capability boundaries
2026-09-18 14:46:32 +00:00
d1864f1f55
feat(opax-mcp): add local gated call_emma integration
...
Phase 2C adds a local Firestore-emulator-only call_emma path with server-injected test identity, deterministic local Emma execution, conversation/message persistence, and append-only audit logging.
The integration test verifies feature gating, persistence, audit correlation, client identity isolation, and controlled local process cleanup.
2026-09-17 15:45:42 +00:00
362fb9a7b4
fix(opax): restore persistence store compatibility
2026-09-16 18:35:06 +00:00
f49cbc4612
fix(opax): restore literal tool risk policy
2026-09-16 17:38:39 +00:00
3a2aae98aa
feat(opax): add Firestore persistence foundation
2026-09-16 16:46:24 +00:00
a777e4abaf
feat(opax-mcp): add master hub contracts and policy foundation
2026-09-16 16:22:32 +00:00
757508d2ba
build(opax-mcp): add build-only Cloud Build pipeline
2026-09-16 15:35:10 +00:00
e66b1a328e
refactor(opax-mcp): introduce canonical Emma identity
2026-09-16 15:27:48 +00:00
849ec9dea0
fix(opax-web): extend agent request timeout
2026-09-13 19:35:46 +00:00
c646649a76
feat(opax-ui): make Emma a modern operator workspace
2026-09-13 16:26:04 +00:00
8f1c501651
feat(emma): deploy browser-based Emma Local operator POC
2026-09-13 15:53:04 +00:00
0b40d556cd
style(opax-web): fix whitespace hygiene
2026-09-13 11:22:18 +00:00
429cc95c9a
feat(opax-web): import P1A Operations Console
2026-09-13 11:21:00 +00:00
fceec08823
boot/opax: bruk samme oppstart som proof-of-curiosity (Fase 1)
Check Python Version Consistency / Check Python Version (push) Has been cancelled
2026-09-06 20:06:26 +00:00
004267689c
feat(a2h2a): auth, CSRF, logging fixes + test updates
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-04 20:38:37 +00:00
422d280d52
chore(deploy): update image to v3.6.0
Check Python Version Consistency / Check Python Version (push) Has been cancelled
2026-09-04 20:30:59 +00:00
0c94ed92cf
chore(session): logg 20260904-190539 — (ingen notat)
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-04 19:06:30 +00:00
32fa75a1e3
chore(session): logg 20260904-190543 — (ingen notat)
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-04 19:06:15 +00:00
3e296673b2
test(a2h2a): add end-to-end test for approval flow
...
Adds a test script that validates the entire A2H2A approval process, from ticket creation to final verification in Firestore.
- The server now supports a `test_mode` flag to facilitate testing.
- The test verifies ticket creation, review page access, approval, final ticket status, and audit log creation.
2026-09-04 12:43:55 +00:00
310dca2db5
feat(a2h2a): implement phase 1 approval flow
...
Implements a secure, state-only approval workflow for A2H2A tickets.
- Adds single-use token generation and validation.
- Implements an IAP-gated HTML review page.
- Adds state-changing approve/reject endpoints with full validation.
- Introduces audit logging for ticket events.
- Execution of tools remains disabled.
2026-09-04 12:23:59 +00:00
3b6e4e4890
docs/code: clarify A2H2A prototype status and disable execution
...
- Add Implementation Status section to A2H2A spec
- Clarify Google Chat is notification-only
- Add target approval architecture requirements
- Add critical A2H2A safety principle to RUNBOOK.md
- Remove unsafe approval/rejection endpoints from server.py
- Enforce server-side parameter_hash calculation
- Disable execution for all tools in A2H2A_TOOL_ALLOW_LIST
2026-09-04 12:00:07 +00:00
79b100caff
docs(security): komplett sikkerhetsdokumentasjon med 7 manifestfiler
...
Check Python Version Consistency / Check Python Version (push) Waiting to run
- SECURITY.md: Overordnet visjon med lenker til alle manifestfiler
- SECURITY_AUDITS.md: Historikk og To-Do liste
- RUNBOOK.md: 6 operasjonelle scenarier (ukjent bruker, eksponert secret, 401/403, 50x, VPC-SC, BinAuthz)
- INCIDENT_RESPONSE.md: PICERL-modell med eskaleringsmatrise
- SECRET_MANAGEMENT.md: Policy + lokal utvikling
- ACCESS_CONTROL.md: IAM-policy med service account-oversikt
- COMPLIANCE.md: TYR, Binary Auth, KMS-attestasjon
Opprydding:
- Slettet sensitive filer (test_secret.txt, final-secret-test.txt, tyr/certs/ca_password.txt)
- Slettet engangsskript og midlertidige filer
- Oppdatert .gitignore med *.txt
2026-09-04 08:25:57 +00:00
a5864f8584
chore(session): logg 20260904-074222 — (ingen notat)
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-04 07:43:31 +00:00
8e3d8810e1
chore(session): logg 20260904-074226 — (ingen notat)
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-04 07:43:02 +00:00
0d73a9c258
docs(security): oppdater med alle forbedringer og "ukjent bruker"-hendelse
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-03 19:46:03 +00:00
86551f2def
fix(mcp): use Cloud Run project URL and Streamable HTTP client
Check Python Version Consistency / Check Python Version (push) Waiting to run
2026-09-03 10:44:23 +00:00
6670c2b67b
chore(session): logg 20260903-052807 — (ingen notat)
2026-09-03 05:28:46 +00:00
85ff5da05d
chore(session): logg 20260903-052809 — (ingen notat)
2026-09-03 05:28:45 +00:00
1ba991f582
feat(core): Fresh initialization - Deploy v3.6.1 Singularity Architecture
2026-09-03 04:03:09 +00:00
