Commit graph

68 commits

Author SHA256 Message Date
cdeef3cc1a Implement crash-safe streaming worker runtime 2026-07-17 18:51:44 +09:00
16cba3c317 Model checkpoint staging ownership transfer 2026-07-17 15:01:15 +09:00
ebf818d23c Add authenticated internal worker API 2026-07-17 09:16:46 +09:00
9d96c4d563 Add convergent recovery and exact staging cleanup 2026-07-17 08:36:39 +09:00
80c631f780 Add fenced attempt mutation and outcome publication 2026-07-17 07:40:36 +09:00
2db0e22232 Add crash-safe attempt authority lifecycle 2026-07-17 07:07:43 +09:00
e13c01441c Add bounded commit-pinned Hugging Face source streaming 2026-07-17 06:32:48 +09:00
0ad79c597f Add exact resumable object source streaming 2026-07-17 05:57:27 +09:00
5b43b6c660 Add exact resumable HTTP source streaming 2026-07-17 05:31:50 +09:00
3041257d78 Select TLS test crypto provider under workspace features 2026-07-17 04:06:56 +09:00
6a0cb43686 Merge durable job admission implementation
# Conflicts:
#	Dockerfile.test
#	Makefile
2026-07-17 04:02:47 +09:00
630a3970f4 Merge outbound policy transport implementation
# Conflicts:
#	Cargo.lock
#	Cargo.toml
#	Dockerfile.test
#	Makefile
2026-07-17 04:02:04 +09:00
24fa4f8379 Merge durable result inventory implementation 2026-07-17 04:00:32 +09:00
5cbb0364d2 Permit private IPv6 while redacting responses 2026-07-17 03:45:13 +09:00
7bd5316b1b Serialize the singleton kind fixture across worktrees 2026-07-17 03:41:52 +09:00
c4402985af Close outbound credential and metadata bypasses 2026-07-17 03:41:43 +09:00
d12543d730 Bind credential pins to immutable grants 2026-07-17 03:38:10 +09:00
b2afdfe97a Stabilize result ordering and streaming evidence 2026-07-17 03:36:41 +09:00
b00946625d Exercise result inventories across target peers 2026-07-17 03:27:08 +09:00
14988e7632 Add durable manifest-rooted result inventories 2026-07-17 03:26:57 +09:00
3088aa439e Run outbound transport tests in a dependency-free fixture lane 2026-07-17 03:22:15 +09:00
12c59ee70f Enforce outbound policy at each HTTP connection 2026-07-17 03:22:06 +09:00
9a305cad46 Exercise admission against durable PostgreSQL 2026-07-17 03:21:09 +09:00
b3e63b9e2b Add atomic durable job admission 2026-07-17 03:20:57 +09:00
be651d559c Exercise target adapter against supported S3 peers 2026-07-17 02:54:27 +09:00
854e6e1c17 Add exact-identity target storage adapter 2026-07-17 02:54:18 +09:00
f569707f97 Add bounded streaming execution kernel 2026-07-17 01:20:15 +09:00
ac2289bd0a Add durable credential registry and secret lifecycle 2026-07-17 00:18:02 +09:00
9b6c3dc71f Model durable ownership for credential secrets 2026-07-16 23:01:17 +09:00
bf028161ae Add identity and target authorization package
OIDC validation, principal mapping, remora:v1 roles, and current-authz
filtering with kind acceptance on Keycloak and ZITADEL.
2026-07-16 18:27:42 +09:00
91ac6dee85 Add Redis-compatible coordination substrate 2026-07-16 14:30:58 +09:00
182b4d58c7 Harden durable replay and lock recovery 2026-07-16 14:30:47 +09:00
20ea9557fd Add compatibility matrix fixture execution
Run package test jobs across every selected provider combination with isolated lane state, released-image canaries, controlled OIDC DNS, and deterministic cleanup.
2026-07-16 05:39:51 +09:00
957d170150 Add PostgreSQL DurableStore substrate for WP-03
Introduce remora-durable with pool/migrations, a RemoraApiMutation-shaped
ledger, claim-fenced outbox projection, CAS helpers, and keyset cursors,
plus a kind Job acceptance suite against the hermetic fixture.
2026-07-16 03:56:44 +09:00
af8bb1a03a Add reusable kind test job execution 2026-07-16 02:36:58 +09:00
3ed528b288 Default bounded verification to the nerdctl runtime 2026-07-16 00:22:31 +09:00
f42343855f Add a released-image dependency compatibility testbed 2026-07-16 00:22:02 +09:00
d07a4085db Validate shared contracts in bounded test lanes 2026-07-15 21:00:59 +09:00
fecb9a1a8d Add TypeScript domain and contract bindings 2026-07-15 21:00:44 +09:00
4da5a980ed Add Rust domain kernel and wire contracts 2026-07-15 21:00:33 +09:00
ff379fb002 Add resource-bounded local verification lanes
Run pinned Rust and browser toolchains in fast and full container lanes with explicit CPU and memory limits.
2026-07-15 19:51:53 +09:00
9156b75c62 Scaffold Svelte frontend and browser test matrix
Establish the TypeScript 7, Oxlint, Vitest, and Playwright workspace with an isolated Svelte diagnostics compatibility boundary.
2026-07-15 19:51:35 +09:00
66991b85b2 Scaffold Rust API and worker workspace
Pin the Rust toolchain and nextest profile so both service crates share a reproducible verification baseline.
2026-07-15 19:51:16 +09:00
0834f291d9 Require executing authority for lease renewal.
RenewLease now demands current durable authority, AttemptExecuting, and a
non-terminal phase so a live lease cannot be extended after authority loss.
Align the mutable API renew prose with that precondition.
2026-07-15 16:59:35 +09:00
75fd30674e Update gitignore 2026-07-15 15:19:59 +09:00
3062bf3d75 Tighten activation recovery and API contracts 2026-07-14 19:04:00 +09:00
033cfeaac6 Specify fenced activation and source credential contracts
Define bounded reservation recovery, exact activation replay fencing, immutable source identities, and deployment-owned secret and target policy boundaries. Align the OpenAPI contract and add a split-store activation safety refinement.
2026-07-14 18:12:28 +09:00
3881514e4b Expose committed result members and stable principals 2026-07-14 12:12:13 +09:00
dfd60cf104 Separate protocol authority from mutable API contracts
Move API artifacts out of docs/spec, define concrete execution and deletion refinements, and document TLA+ abstraction boundaries so architecture prose cannot become a competing protocol specification.
2026-07-14 11:50:10 +09:00
78be27871c Abstract endpoint-specific mutation rejections 2026-07-13 18:36:32 +09:00