Commit f39e4c1
- .github/workflows/build-multi-arch.yml+7-5
- .github/workflows/ci.yml+1-1
- .github/workflows/contract-tests.yml+10-3
- .github/workflows/flake-check.yml+5-3
- .github/workflows/image-scan.yml+8-8
- .github/workflows/invariants.yml+2-2
- .github/workflows/manifest-validate.yml+5-5
- .github/workflows/nix-flake-update.yml+7-4
- .github/workflows/release.yml+3-3
- .github/workflows/secret-scan.yml+1-1
- .github/workflows/shellcheck.yml+2-2
- .github/workflows/tui-tests.yml+4-4
- agentbox.toml+2
- config/egress-policy.json+3-3
- config/entrypoint-unified.sh+24-19
- config/hooks/lib/egress-policy.cjs+4-1
- config/hooks/nostr-live-mirror.cjs+15-12
- config/npm-locks/README.md+24
- config/npm-locks/agentic-qe-3.13.12.package-lock.json+11.8k
- config/npm-locks/codebase-memory-mcp-0.10.8.package-lock.json+29
- config/npm-locks/deepsec-2.3.9.package-lock.json+3.1k
- config/npm-locks/mermaid-js-mermaid-cli-11.16.0.package-lock.json+10.0k
- config/npm-locks/metaharness-0.3.2.package-lock.json+2.1k
- config/npm-locks/metaharness-darwin-0.8.3.package-lock.json+1.5k
- config/npm-locks/ruflo-3.38.20.package-lock.json+9.0k
- config/npm-locks/ruvector-0.3.0.package-lock.json+2.7k
- config/npm-locks/wrangler-4.125.0.package-lock.json+1.4k
- docs/LAN-door-threat-model.md+25
- docs/LEARNING-memory.md+15
- docs/adr/ADR-2002-aoe-token-auth-boundary.md+41-2
- docs/adr/ADR-2009-nip98-proxy-identity-boundary.md+28-1
- docs/adr/ADR-2010-bearer-gated-behind-nip98.md+1-1
- docs/adr/ADR-2012-relay-allowlist-only-ingress.md+36-1
- docs/adr/ADR-2013-loopback-publish-except-9096.md+36-1
- docs/adr/ADR-2019-model-lifecycle-384-dim-freeze.md+9-1
- docs/adr/ADR-2020-capability-gating.md+9-1
- docs/adr/ADR-2022-governed-ontology-writes.md+9-1
- docs/adr/ADR-2023-loom-facade.md+14-1
- docs/adr/ADR-2026-session-mirror-egress-boundary.md+21-2
- docs/adr/ADR-2027-secret-custody-rotation-break-glass.md+47-2
- docs/adr/ADR-2030-permissive-licensing-for-publishable-service-crates.md+1-1
- docs/adr/ADR-2031-consultant-model-manifest-projection.md+6-1
- docs/adr/ADR-2033-deepsec-security-gate.md+36-1
- docs/adr/ADR-2040-no-unauthenticated-supervised-listener.md+23
- docs/adr/ADR-2075-loom-attested-generation-identity.md+32-3
- docs/adr/ADR-2081-annexe-depth-law-and-honest-evaluator-receipts.md+55
- docs/adr/PREAMBLE.md+2
- docs/adr/README.md+6-3
- docs/developer/backlog.md+32
- docs/developer/dream-engine.md+5-1
- docs/developer/governance-operation-receipts.md+13
- docs/dream-cycle/LEDGER.md+9-1
- docs/dream-cycle/evaluator-status-20260906.md+53
- docs/user/multi-user-pods.md+1-1
- dream.config.json+21-3
- flake.nix+17-6
- lib/npm-cli.nix+4-1
- lib/secret-backup.nix+18
- management-api/lib/authority-consumer.js+17-19
- management-api/lib/authority.js+25-19
- management-api/lib/governance-application-receipts.js+59
- management-api/lib/governance-correlation.js+44
- management-api/lib/governance-decision-waiter.js+13-22
- management-api/routes/broker-bridge.js+51-15
- management-api/routes/llm-marketplace.js+2
- management-api/tests/broker-bridge.test.js+36-8
- management-api/tests/governance-application-receipts.test.js+46
- management-api/tests/governance-correlation.test.js+52
- mcp/servers/lib/ontology-retrieval.js+77-7
- scripts/dream-hooks-syntax.sh+25-3
- services/dream-engine/src/dispatch.rs+3-1
- services/dream-engine/src/engine.rs+93-26
- services/dream-engine/src/gate.rs+20-4
- services/dream-engine/src/runner.rs+31-3
- services/dream-engine/src/verdict.rs+117
- services/secret-backup/src/main.rs+85-17
- tests/integration/identity-entrypoint.test.mjs+25
- tests/integration/loom-served-identity.test.mjs+51
- tests/sovereign/authority.test.js+7-7
- tests/sovereign/egress-boundary.test.js+16-3
0 commit comments