permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on claude/record-target

test(didbot-dev): keep the deployment's systemd unit and this binary's flags in step claude/record-target
permadeath.com committed
feat(infra)!: write the zone apex, and hand the server its address
permadeath.com committed
test(didbot-pds): pin both publish sites to the configured record target
permadeath.com committed
test(didbot-serve): fail a run that would publish loopback into a hosted zone
permadeath.com committed
feat(didbot-dev): give a real deployment an address to publish
permadeath.com committed
feat(didbot-dev): say at ERROR when a run has no e-stop surface at all
permadeath.com committed
fix(didbot-dev): check --tls acme's flags before opening the data directory
permadeath.com committed
fix(didbot-serve)!: shut down on SIGTERM, and bound the shutdown grace
permadeath.com committed
docs(didbot-pds): say that no deployment serves on NoPolicyGate
permadeath.com committed
feat(didbot-serve): judge writes through a real policy gate
permadeath.com committed
test(reconcile): teach the test double the CAA methods
permadeath.com committed
docs(reconcile): link the rate bounds to the builders that set them
permadeath.com committed
docs(plan): record the zone reconciler and what onboarding still owes it
permadeath.com committed
docs: write down what the zone reconciler repairs and what it leaves alone
permadeath.com committed
test(reconcile): prove the three things it must never do
permadeath.com committed
feat(reconcile): repair the DNS zones this deployment manages
permadeath.com committed
feat(dns): read back what a name says, not just that it has a record
permadeath.com committed
feat(fsm): bring three-valued gates back, with a caller in hand
permadeath.com committed
docs(plan): point the five policy epics at the model that settles them
permadeath.com committed
docs(plan): add the onboarding-policies epic
permadeath.com committed
docs(policy): what a rule is keyed on, and whether config may narrow
permadeath.com committed
test(didbot-pds): prove the policy path end to end through Provisioner
permadeath.com committed
feat(didbot-pds)!: connect policy loaders to the tree via TreePolicyGate
permadeath.com committed
refactor(didbot-policy-regex)!: depend on didbot-policy, delete local type copies
permadeath.com committed
feat(didbot-policy-source): resolve operator predicates from blobs, not the record
permadeath.com committed
build: restore the didbot-policy workspace entry
permadeath.com committed
fix(didbot-pds): make Ticket's Drop actually release a panicking write's turn
permadeath.com committed
fix(didbot-pds): a policy freeze syncs AccountState, and stays cheap after
permadeath.com committed
refactor(didbot-pds): align the seam's names with didbot-policy's Write shape
permadeath.com committed
feat(didbot-pds): supply attributes, deployment facts, now, and drive observe/lifecycle
permadeath.com committed
feat(didbot-pds): wire the policy gate into put_record and delete_record
permadeath.com committed
feat(didbot-pds): add the policy gate seam and a per-repository write queue
permadeath.com committed
docs(policy-regex): document that client_id must arrive normalized
permadeath.com committed
refactor(policy-regex): mirror didbot-policy's landed Subject shape
permadeath.com committed
docs(policy-regex): document the closed input set behind Linearized
permadeath.com committed
fix(policy-regex): drop intra-doc links to private types
permadeath.com committed
refactor(policy-regex): rework path rules around before/after values
permadeath.com committed
fix(policy-regex): satisfy cargo fmt and rustdoc private-link lints
permadeath.com committed
feat(policy-regex): add deterministic in-process regex evaluator
permadeath.com committed
feat(didbot-policy-source): add the three policy sources and their loader
permadeath.com committed
docs(didbot-policy): don't imply Cedar already has an evaluator
permadeath.com committed
feat(didbot-policy): make the evaluator language an open union
permadeath.com committed
feat(didbot-policy)!: give a policy's predicate and revision their own types
permadeath.com committed
feat(didbot-policy)!: treat account kind as an open union
permadeath.com committed
feat(didbot-policy)!: bound stateless evaluators to subject, kind and clock
permadeath.com committed
feat(didbot-policy)!: carry before/after values in a write's diff
permadeath.com committed
fix(didbot-policy): satisfy fmt, clippy and the doc build
permadeath.com committed
feat(didbot-policy): add the policy core crate
permadeath.com committed
style(pds): fix the indentation every agent's fmt hook keeps re-fixing
permadeath.com committed
docs: the order a write is checked in, and what each stage answers
permadeath.com committed
docs(onboarding): say what the bootstrap actually is
permadeath.com committed
docs(plan): add the policy epic
permadeath.com committed
refactor(site)!: one file per page, and sections with real subpages
permadeath.com committed
docs(plan): add the identifier and name-pool epics
permadeath.com committed
docs(onboarding): stop naming an attestation backend this workspace removed
permadeath.com committed
fix(didbot-pds): stop reporting a log failure as name exhaustion
permadeath.com committed
fix(didbot-serve): read only a RecordNotFound 400 as an absent operator claim
permadeath.com committed
test(didbot-serve): separate a RecordNotFound 400 from any other 400
permadeath.com committed
fix(deploy): give the data directory to the container's uid
permadeath.com committed
docs(plan): close the unit, the data directory and the secrets items
permadeath.com committed