permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on claude/estop-admin-surface

docs(plan): write down the options for the relay commands on the e-stop socket claude/estop-admin-surface
permadeath.com committed
fix(infra): wire the durable e-stop latch the deployment was missing
permadeath.com committed
docs(serve): say in --help that an unparsable e-stop file revokes
permadeath.com committed
fix(serve)!: refuse to start when a named e-stop socket cannot be bound
permadeath.com committed
fix(infra)!: give the e-stop socket its own directory on the data volume
permadeath.com committed
fix(config)!: refuse a directory this process does not own, rather than chmod it
permadeath.com committed
fix(oauth): accept an IPv6 loopback redirect URI from a bare localhost client_id
permadeath.com committed
feat(config): give the write log its own retention setting
permadeath.com committed
fix(policy): bound the operator poll, key denial hashes, pin a batch's set
permadeath.com committed
fix(policy): compare old and new where a policy says a field may not change
permadeath.com committed
fix(policy)!: hand the engine the record, not one rebuilt from its diff
permadeath.com committed
feat(serve)!: bound a stream's life and the reading of a request's headers
permadeath.com committed
perf(policy-site): load the checks in the background instead of waiting on them
permadeath.com committed
fix(oauth)!: spell the blob scope the way the spec does
permadeath.com committed
docs: say how an upload is scoped and judged
permadeath.com committed
feat(serve)!: hold uploadBlob to the uploading token's blob scope
permadeath.com committed
feat(oauth)!: let an app be granted a blob: scope
permadeath.com committed
docs(serve): name which layer the loopback refusal sits under
permadeath.com committed
fix(policy-site)!: close four gaps in the recommended policies
permadeath.com committed
fix(agentd): say a login is issued at what was approved
permadeath.com committed
fix(pds): announce both ways into provisioning
permadeath.com committed
fix(pds): refuse a deletion hold once the erasure is already running
permadeath.com committed
feat(policy-site): link back to did.bot from the masthead
permadeath.com committed
feat(site): link the policy dashboard from did.bot
permadeath.com committed
docs: say what a write now costs, and what it holds while it commits
permadeath.com committed
perf(pds)!: give each repository its own write lock
permadeath.com committed
perf(pds): commit a write against the repository held at its head
permadeath.com committed
feat(repo): change a signed repository one record at a time
permadeath.com committed
feat(data): insert and remove one key of a built Merkle search tree
permadeath.com committed
fix(serve)!: close every route that names the accounts when listAgents closes
permadeath.com committed
fix(pds): mint a revision above every revision this repository already has
permadeath.com committed
feat(serve): send frame, sniffing and referrer headers with every response
permadeath.com committed
fix(serve)!: log a panicked blocking task rather than answering with it
permadeath.com committed
fix: unwrap the log lines that were emitting runs of spaces
permadeath.com committed
fix(pds): tear down on the revoke itself, not on the next request
permadeath.com committed
fix(oauth)!: check a DPoP proof's ath, and bound what an unauthenticated proof costs
permadeath.com committed
fix(oauth)!: ask the gate before fetching a client_id, and bound the metadata cache
permadeath.com committed
fix(oauth)!: displace an account's oldest pending sign-in, not its newest
permadeath.com committed
fix(oauth): name the scope ceiling as what allows the scopes on the consent page
permadeath.com committed
fix(oauth)!: issue a login at what the agent approved, not at the whole request
permadeath.com committed
build: turn incremental compilation off
permadeath.com committed
perf(hooks): lint through one script so hand runs share its cache
permadeath.com committed
fix(policy-site): offer blob.write, and write maxSize as a number
permadeath.com committed
feat(policy-site): try a policy from its own card and from the catalog
permadeath.com committed
feat(policy-site): add a simulator that says what the policies do to a request
permadeath.com committed
feat(policy-check): add simulate, which judges one request against the records
permadeath.com committed
refactor(policy-records): move the diff and the binding reach out of didbot-pds
permadeath.com committed
refactor(policy-site)!: state twelve recommended policies in Cedar
permadeath.com committed
test(policy-check): build the actions check its own one-statement policy
permadeath.com committed
feat(policy-site): start a new policy in Cedar
permadeath.com committed
feat(policy-site): make leaving a policy unbound a deliberate choice
permadeath.com committed
feat(policy-site): add an Unbound page and a Rollouts page
permadeath.com committed
feat(policy-site): decide in one place which policies apply to nobody
permadeath.com committed
fix(policy-site): refuse only-one-client's other apps at the write too
permadeath.com committed
feat(policy-site)!: tabs, recommended pages, and flows that fill the batch
permadeath.com committed
feat(policy-site): batch writes, and deploy them as one applyWrites
permadeath.com committed
feat(infra): serve policy.did.bot's app routes from index.html
permadeath.com committed
feat(policy-site): recommend four Cedar policies
permadeath.com committed
feat(policy-site)!: offer the recommended policies from policy-site/recommended/
permadeath.com committed
test(pds): judge each recommended policy by the cases beside it
permadeath.com committed