permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on claude/workflow-rules

docs: carve out retargeting from the no-second-pull-request rule claude/workflow-rules
permadeath.com committed
docs: state the pull-request and documentation rules for agents
permadeath.com committed
build: cache the crates.io graph in a layer of its own
permadeath.com committed
test(serve): cover the SIGTERM shutdown, and drop two stale doc claims
permadeath.com committed
fix(serve): shut down on SIGTERM, not only on Ctrl-C
permadeath.com committed
docs(build): correct two Dockerfile comments that no longer hold
permadeath.com committed
build: send only what the image build reads as build context
permadeath.com committed
docs(adversarial): record the policy-engine attack pass
permadeath.com committed
fix(policy): tell evaluators about freeze, unfreeze, and deletion
permadeath.com committed
style(test): clippy cleanups in the backpressure suite
permadeath.com committed
test(subscribe): a cursor from before a restart is outdated, not refused
permadeath.com committed
test(subscribe): a live subscriber must not hold a request permit
permadeath.com committed
test(subscribe): assert subscribeRepos survives a consumer that stops reading
permadeath.com committed
test(subscribe): pin the firehose's behaviour under a reader that stalls
permadeath.com committed
refactor(test): share the subscribeRepos harness between test binaries
permadeath.com committed
docs(didbot-pds): say that no deployment serves on NoPolicyGate
permadeath.com committed
feat(didbot-serve): judge writes through a real policy gate
permadeath.com committed
fix(didbot-dns): apply the same wildcard-depth fix to Route53Dns
permadeath.com committed
fix(didbot-dns): key DNS bookkeeping on the case-folded hostname
permadeath.com committed
fix(didbot-dns): refuse a host more than one label below the wildcard zone
permadeath.com committed
fix(identity)!: bind a document's key and service to its own did
permadeath.com committed
fix(verify)!: compare service endpoints by origin, not by spelling
permadeath.com committed
fix(identity)!: give a did:web port exactly one spelling
permadeath.com committed
docs(reconcile): say what a refresh hook has to be, and that resync is not it
permadeath.com committed
test(reconcile): pin crash recovery, hostile-state convergence and idempotence
permadeath.com committed
fix(reconcile): clamp the rate bounds away from never repairing at all
permadeath.com committed
fix(reconcile)!: stop quarantining a name for a fault that was the provider's
permadeath.com committed
fix(serve): bound what the rate limiter retains per anonymous caller
permadeath.com committed
test(didbot-serve): pin the duplicate mapping apart from a failing store
permadeath.com committed
fix(didbot-serve)!: answer a duplicate account with 409 rather than 500
permadeath.com committed
docs(plan): describe the compile step and last-good-revision in policy.md
permadeath.com committed
feat(didbot-policy-source)!: compile via Evaluator, add last-good-revision
permadeath.com committed
docs(conformance): describe the lexicon document suite
permadeath.com committed
test(conformance): run the vendored lexicon document vectors
permadeath.com committed
test(handshake): hold the writer and the reader to one record key
permadeath.com committed
fix(claim)!: key bot.did.operator by the server's decoded authority
permadeath.com committed
test(reconcile): teach the test double the CAA methods
permadeath.com committed
docs(reconcile): link the rate bounds to the builders that set them
permadeath.com committed
docs(plan): record the zone reconciler and what onboarding still owes it
permadeath.com committed
docs: write down what the zone reconciler repairs and what it leaves alone
permadeath.com committed
test(reconcile): prove the three things it must never do
permadeath.com committed
feat(reconcile): repair the DNS zones this deployment manages
permadeath.com committed
feat(dns): read back what a name says, not just that it has a record
permadeath.com committed
feat(fsm): bring three-valued gates back, with a caller in hand
permadeath.com committed
docs(plan): point the five policy epics at the model that settles them
permadeath.com committed
docs(plan): add the onboarding-policies epic
permadeath.com committed
docs(policy): what a rule is keyed on, and whether config may narrow
permadeath.com committed
test(didbot-pds): prove the policy path end to end through Provisioner
permadeath.com committed
feat(didbot-pds)!: connect policy loaders to the tree via TreePolicyGate
permadeath.com committed
refactor(didbot-policy-regex)!: depend on didbot-policy, delete local type copies
permadeath.com committed
feat(didbot-policy-source): resolve operator predicates from blobs, not the record
permadeath.com committed
build: restore the didbot-policy workspace entry
permadeath.com committed
fix(didbot-pds): make Ticket's Drop actually release a panicking write's turn
permadeath.com committed
fix(didbot-pds): a policy freeze syncs AccountState, and stays cheap after
permadeath.com committed
refactor(didbot-pds): align the seam's names with didbot-policy's Write shape
permadeath.com committed
feat(didbot-pds): supply attributes, deployment facts, now, and drive observe/lifecycle
permadeath.com committed
feat(didbot-pds): wire the policy gate into put_record and delete_record
permadeath.com committed
feat(didbot-pds): add the policy gate seam and a per-repository write queue
permadeath.com committed
docs(policy-regex): document that client_id must arrive normalized
permadeath.com committed
refactor(policy-regex): mirror didbot-policy's landed Subject shape
permadeath.com committed