acd0b4cc8c
Default profiles to persistent system paths
2026-07-22 03:23:38 +09:00
7aff8e542e
Restore persistent system path composition
2026-07-22 03:07:42 +09:00
31e9ab0f2d
Replace external reachability with an owned canary
2026-07-19 22:39:31 +09:00
1c86e1aa0e
Reserve an explicit Lazaret network topology
...
Launch slirp4netns on 10.137.54.0/24, update its gateway and DNS routes, and refuse configured allows or specific denies that collide with the enclosing Lazaret /23 while preserving broad RFC 1918 denial.
2026-07-19 19:52:14 +09:00
6fcadf7547
Cover State Reset scope in enum shape authority
2026-07-19 05:55:42 +09:00
77ba5319ce
Make core serialized enum shapes exhaustive
2026-07-19 05:48:19 +09:00
247819250b
Replace lexical Rust fragments with real modules
2026-07-19 05:12:57 +09:00
54cc167f81
Make codec shape authority compile-time and fixed
2026-07-19 04:33:43 +09:00
03bfe92ca0
Retire the mutable design schema
...
Make Rust records and fixed codec tests the implementation-shape owner, remove the Mermaid category registry, and state the ownership boundary in the authoritative specification.
2026-07-19 02:45:32 +09:00
e7dd95aea6
Remove phase vocabulary from Lazaret interfaces
2026-07-18 22:35:48 +09:00
3f9b1b3543
Close hostile recovery and concurrency gaps
2026-07-18 05:47:15 +09:00
6816f0632e
Add interactive client terminal transport
2026-07-17 23:23:19 +09:00
2bc5982a62
Enforce exact recovery ownership before cold start
2026-07-17 23:23:19 +09:00
f21a847991
Integrate exact production recovery before cold start
2026-07-17 23:23:19 +09:00
d25942596f
Implement exact bootstrap recovery and artifact GC
2026-07-17 23:23:19 +09:00
4dd2b150d2
Compose selected State Anchor paths over prepared roots
2026-07-17 23:23:19 +09:00
71b0266cf2
Run non-interactive sessions through production coordination
2026-07-17 23:23:19 +09:00
fbd332c31f
Require explicit canonical network readiness targets
2026-07-17 23:23:19 +09:00
c3a76ec8c4
Add generation-bound TLS control face
...
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00
27bc3d835e
Validate persisted network readiness fingerprints
2026-07-15 17:12:07 +09:00
304fb225d6
Implement canonical network readiness derivation
2026-07-15 16:58:30 +09:00
d274e1835d
Pin protocol claim and signing vectors
2026-07-15 16:18:38 +09:00
af8669c165
Implement generation-bound protocol cryptography
2026-07-15 15:56:31 +09:00
5458460717
Implement verified OCI prepared-lower lifecycle
2026-07-15 15:48:46 +09:00
e4d9cc2dc9
Add the lock-owned transactional Domain Store
2026-07-15 14:10:50 +09:00
2d4ec2ed8b
Generalize benchmark qualification environment
2026-07-15 02:49:39 +09:00
6301eeba3e
Split record modules without changing wire behavior
2026-07-15 02:09:18 +09:00
f9eb966341
Implement trusted-host configuration resolution
2026-07-15 00:43:42 +09:00
f106a9f636
Classify serialized and runtime schema records
2026-07-14 23:34:56 +09:00
de57e77dc8
Add phase-aware pidfs process ownership records
2026-07-14 01:47:53 +09:00
16defc768a
Add typed schema records and strict version checks
2026-07-13 04:05:12 +09:00
