permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on claude/zone-depth-predicate

test(didbot-identity): pin label alignment in the wildcard depth predicate claude/zone-depth-predicate
permadeath.com committed
refactor: share the RFC 1034 wildcard depth rule across dns and pds
permadeath.com committed
chore: merge dns-wildcard-depth into apex-boundary
permadeath.com committed
fix(didbot-pds): let the zone apex reach the handle-collision check claude/apex-boundary
permadeath.com committed
fix(didbot-dns): apply the same wildcard-depth fix to Route53Dns
permadeath.com committed
fix(didbot-dns): key DNS bookkeeping on the case-folded hostname
permadeath.com committed
fix(didbot-dns): refuse a host more than one label below the wildcard zone
permadeath.com committed
fix(didbot-pds): refuse a caller-asserted handle more than one label below the zone
permadeath.com committed
docs(plan): record the provisioning race attack, held cases and open leads
permadeath.com committed
fix(didbot-pds): close a caller-asserted-handle race under concurrency
permadeath.com committed
test(reconcile): teach the test double the CAA methods
permadeath.com committed
docs(reconcile): link the rate bounds to the builders that set them
permadeath.com committed
docs(plan): record the zone reconciler and what onboarding still owes it
permadeath.com committed
docs: write down what the zone reconciler repairs and what it leaves alone
permadeath.com committed
test(reconcile): prove the three things it must never do
permadeath.com committed
feat(reconcile): repair the DNS zones this deployment manages
permadeath.com committed
feat(dns): read back what a name says, not just that it has a record
permadeath.com committed
feat(fsm): bring three-valued gates back, with a caller in hand
permadeath.com committed
docs(plan): point the five policy epics at the model that settles them
permadeath.com committed
docs(plan): add the onboarding-policies epic
permadeath.com committed
docs(policy): what a rule is keyed on, and whether config may narrow
permadeath.com committed
test(didbot-pds): prove the policy path end to end through Provisioner
permadeath.com committed
feat(didbot-pds)!: connect policy loaders to the tree via TreePolicyGate
permadeath.com committed
refactor(didbot-policy-regex)!: depend on didbot-policy, delete local type copies
permadeath.com committed
feat(didbot-policy-source): resolve operator predicates from blobs, not the record
permadeath.com committed
build: restore the didbot-policy workspace entry
permadeath.com committed
fix(didbot-pds): make Ticket's Drop actually release a panicking write's turn
permadeath.com committed
fix(didbot-pds): a policy freeze syncs AccountState, and stays cheap after
permadeath.com committed
refactor(didbot-pds): align the seam's names with didbot-policy's Write shape
permadeath.com committed
feat(didbot-pds): supply attributes, deployment facts, now, and drive observe/lifecycle
permadeath.com committed
feat(didbot-pds): wire the policy gate into put_record and delete_record
permadeath.com committed
feat(didbot-pds): add the policy gate seam and a per-repository write queue
permadeath.com committed
docs(policy-regex): document that client_id must arrive normalized
permadeath.com committed
refactor(policy-regex): mirror didbot-policy's landed Subject shape
permadeath.com committed
docs(policy-regex): document the closed input set behind Linearized
permadeath.com committed
fix(policy-regex): drop intra-doc links to private types
permadeath.com committed
refactor(policy-regex): rework path rules around before/after values
permadeath.com committed
fix(policy-regex): satisfy cargo fmt and rustdoc private-link lints
permadeath.com committed
feat(policy-regex): add deterministic in-process regex evaluator
permadeath.com committed
feat(didbot-policy-source): add the three policy sources and their loader
permadeath.com committed
docs(didbot-policy): don't imply Cedar already has an evaluator
permadeath.com committed
feat(didbot-policy): make the evaluator language an open union
permadeath.com committed
feat(didbot-policy)!: give a policy's predicate and revision their own types
permadeath.com committed
feat(didbot-policy)!: treat account kind as an open union
permadeath.com committed
feat(didbot-policy)!: bound stateless evaluators to subject, kind and clock
permadeath.com committed
feat(didbot-policy)!: carry before/after values in a write's diff
permadeath.com committed
fix(didbot-policy): satisfy fmt, clippy and the doc build
permadeath.com committed
feat(didbot-policy): add the policy core crate
permadeath.com committed
style(pds): fix the indentation every agent's fmt hook keeps re-fixing
permadeath.com committed
docs: the order a write is checked in, and what each stage answers
permadeath.com committed
docs(onboarding): say what the bootstrap actually is
permadeath.com committed
docs(plan): add the policy epic
permadeath.com committed
refactor(site)!: one file per page, and sections with real subpages
permadeath.com committed
docs(plan): add the identifier and name-pool epics
permadeath.com committed
docs(onboarding): stop naming an attestation backend this workspace removed
permadeath.com committed
fix(didbot-pds): stop reporting a log failure as name exhaustion
permadeath.com committed
fix(didbot-serve): read only a RecordNotFound 400 as an absent operator claim
permadeath.com committed
test(didbot-serve): separate a RecordNotFound 400 from any other 400
permadeath.com committed
fix(deploy): give the data directory to the container's uid
permadeath.com committed
docs(plan): close the unit, the data directory and the secrets items
permadeath.com committed