permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on claude/agentd-node-key

feat(agentd): sign each context's provisioning with the node key claude/agentd-node-key
permadeath.com committed
feat(agentd): reserve a host identity with `didbot become-host`
permadeath.com committed
feat(agentd): mint and hold one node key in the daemon's state directory
permadeath.com committed
test(didbot): drop the README release-line guard
permadeath.com committed
feat(config): apply the [capacity] max_accounts section
permadeath.com committed
feat(serve): rate-limit provisionAgent and count its cap cheaply
permadeath.com committed
feat(serve): cap live accounts before provisioning mints another
permadeath.com committed
test(serve): prove /health answers while provisioning is in flight
permadeath.com committed
test(dns): pin down why publish's callers must cross spawn_blocking
permadeath.com committed
perf(serve): cross spawn_blocking in the --demo startup task too
permadeath.com committed
perf(serve): bound Argon2id hashing to a fixed pool of workers
permadeath.com committed
perf(serve): move provisioning and record writes off the async workers
permadeath.com committed
docs(infra-review): repoint every line citation at what it names
permadeath.com committed
docs(agentd): draw the daemon on an agent host
permadeath.com committed
fix(agentd): give the confirmer's client a connect and total timeout
permadeath.com committed
docs(setup): say why the loopback check client keeps its own timeout
permadeath.com committed
fix(dns): give the Route53 API client a connect and total timeout
permadeath.com committed
fix(serve): move the relay and client-metadata clients onto didbot-http
permadeath.com committed
fix(verify): give the verifier's HTTP client a connect and total timeout
permadeath.com committed
fix(claim): give the operator CLI's HTTP clients a timeout
permadeath.com committed
fix(swarm): give the load generator's client a connect and total timeout
permadeath.com committed
fix(agentd): give the registrar client a connect and total timeout
permadeath.com committed
fix(policy-source): bound the operator did.json and record-page bodies
permadeath.com committed
fix(http): move the ACME client and ownership poll onto didbot-http
permadeath.com committed
feat(http): add a shared outbound client with connect and total timeouts
permadeath.com committed
docs: remove stale release reference from README
permadeath.com committed
docs: document build-brand.sh check in DEVELOPING.md
permadeath.com committed
docs: fix inaccurate module reference in overview.md
permadeath.com committed
docs(readme): add --all-features flag to cargo doc command
permadeath.com committed
feat(pds): put the account lifecycle on didbot-fsm and the locks on the wire
permadeath.com committed
feat(pds)!: reserve, provision, activate, decommission: one-way account states
permadeath.com committed
feat(pds): refuse erasure while an operator's PreventDataDeletion hold is set
permadeath.com committed
feat(pds)!: hang locks on an account instead of moving its state
permadeath.com committed
feat(pds)!: declare the lock and hold entries the account lifecycle writes
permadeath.com committed
feat(pds): key the account store by a DID in a zone this deployment serves
permadeath.com committed
docs(account-lifecycle): state is data existence, serving is a set of locks
permadeath.com committed
docs(account-lifecycle): propose the account state machine for review
permadeath.com committed
docs(infra-review): close the two findings that held up an apply
permadeath.com committed
docs(local-dev): drop a binary, a switch and a field that are not here
permadeath.com committed
docs(dns-providers): say what a resync removes, and which zone shape a page draws
permadeath.com committed
docs(auth-types): name the credential the repo write routes take
permadeath.com committed
fix(deploy): point the healthcheck at the listener the deployment serves on
permadeath.com committed
build(docker): trim the image and add a healthcheck
permadeath.com committed
docs(deny): name the upgrade that lifts each ignored advisory
permadeath.com committed
build: forbid unsafe code in the policy crates
permadeath.com committed
build: add a release profile with LTO, strip and overflow checks
permadeath.com committed
fix(infra): find the data volume by id and never format on a failed probe
permadeath.com committed
fix(serve): bound the identifier a login refusal logs
permadeath.com committed
fix(pds): refuse an account with no app password after one verification
permadeath.com committed
test(oauth): drive the refresh_token grant through the real router
permadeath.com committed
feat(setup): give each personal data server its own state directory
permadeath.com committed
feat(dev)!: keep the development server's accounts across a restart
permadeath.com committed
fix(setup): treat a variable set to nothing as set
permadeath.com committed
fix(tls): replace certificate files atomically
permadeath.com committed
fix(serve): apply the concurrency cap on the TLS listener
permadeath.com committed
docs(plan): say the OAuth hooks permit until a denial is loaded
permadeath.com committed
feat(oauth)!: permit every client, scope and consent until a policy denies
permadeath.com committed
fix(node)!: read a message that predates the `asks` tag
permadeath.com committed
fix(stats): stop the health line growing with what is stored
permadeath.com committed
feat(node): confirm an authorization for an account a caller names
permadeath.com committed