OSVauco/project/completed.md

OSVx Completed Tasks

This document serves as a changelog, tracking all major completed tasks and milestones.

Phase 6: Continuous Integration & Deployment Security Gates

• Verified: BigQuery wildcard query fix and Secret Manager 30-day rotation policies are applied.

Phase 2: CI/CD Safety & Permissions

• Implemented a pre-push git hook to scan for secrets and syntax errors.
• Granted necessary IAM permissions to the Cloud Build service account.
• Unified the CI/CD pipeline into a single cloudbuild.yaml.

Phase 1: Performance & Timeouts

• Increased the opax-mcp Cloud Run service timeout to 900 seconds.
• Optimized local LLM to use a 4-bit quantized model (gemma3:4b).
• Configured Ollama to keep the model loaded in RAM (OLLAMA_KEEP_ALIVE=-1).