permadeath.com / didbot
Identities for entities did.bot
agent llm did
Star
Fork 0
Watch

Commits on main

docs(oauth): say a code is exchanged only under its sign-in's DPoP key main
permadeath.com committed
feat(oauth)!: bind a sign-in's code to the DPoP key it started with
permadeath.com committed
docs: say which scopes a sign-in drops, and how each scope form reads
permadeath.com committed
feat(oauth): warn when an app asks for a scope form the spec does not define
permadeath.com committed
feat(oauth)!: drop scopes this server never grants
permadeath.com committed
feat(scope): read every permission spec form, and warn on the rest
permadeath.com committed
docs: add revoke-tokens to the operator's verbs and check off operator-ledger
permadeath.com committed
test(scenarios): end a leaked pipeline session with didbot account revoke-tokens
permadeath.com committed
feat(lexicon): declare the loginsEnded and tokensRevoked ledger entries
permadeath.com committed
feat(cli): add didbot account revoke-tokens
permadeath.com committed
feat(dashboard): add revoke-tokens, and an entry per account to end-logins
permadeath.com committed
feat(pds)!: name the operator in the ledger when logins or tokens end
permadeath.com committed
docs(plan): regenerate the register after the rebase
permadeath.com committed
docs(plan): propose what a boot and a restore tell relays
permadeath.com committed
docs: say a build reads the layout before its own
permadeath.com committed
feat(pds): read the layout before this one, pin history included
permadeath.com committed
docs: say every account stays until the operator deletes it
permadeath.com committed
docs(auth): say what the disabled schemes list refuses
permadeath.com committed
fix(dashboard): refuse the server's own account before taking its subtree
permadeath.com committed
feat(pds)!: keep every account until someone deletes it, and drop pins
permadeath.com committed
feat(xrpc)!: drop bot.did.setAccountPinned and the listAccounts pin
permadeath.com committed
test(oauth): expect a web client's held sign-in to be refused
permadeath.com committed
docs(plan): regenerate the register after the rebase
permadeath.com committed
docs(plan): propose binding a web sign-in to the agent's own browser
permadeath.com committed
refactor(onboarding): drop the operator a native environment never has
permadeath.com committed
docs(plan): say what the onboarding list answers with now
permadeath.com committed
refactor(onboarding): remove the browser runner nothing calls
permadeath.com committed
docs(plan): end an account's sessions when its credentials change
permadeath.com committed
fix(oauth): refuse a request carrying more than one DPoP proof
permadeath.com committed
fix(oauth): mark every PAR and token answer uncacheable
permadeath.com committed
docs(oauth): say how DPoP nonces and the push's proof are checked
permadeath.com committed
feat(oauth)!: check the DPoP proof on a pushed authorization request
permadeath.com committed
feat(oauth)!: require a server nonce in every DPoP proof
permadeath.com committed
docs(agentd): say what pending lists, and how long a report is kept
permadeath.com committed
feat(agentd)!: list only the sign-ins a context reported, unless --all
permadeath.com committed
feat(agentd): remember a reported request until its record arrives
permadeath.com committed
docs(agentd): say a context is shown only the sign-ins it saw
permadeath.com committed
feat(agentd): offer a context only the sign-ins it saw
permadeath.com committed
docs: say what bounds the data volume and what /health reports of it
permadeath.com committed
feat(infra): hold every account's blobs to half the data volume
permadeath.com committed
feat(pds): say the volume is full when a boot cannot write
permadeath.com committed
feat(pds): report the data volume's free space on /health
permadeath.com committed
feat(pds): bound what every account's blobs come to together
permadeath.com committed
docs(conformance): say a batch's frame names each key once
permadeath.com committed
fix(pds): count a batch's blob references once per key
permadeath.com committed
fix(sync): frame a batch as its net change to each key
permadeath.com committed
docs(conformance): say which writes commit nothing and which are refused
permadeath.com committed
fix(sync)!: refuse a batch that deletes a record that is not there
permadeath.com committed
fix(sync): leave a record a batch did not change out of its frame
permadeath.com committed
fix(sync): make no commit for a put that changes no record
permadeath.com committed
test(sync): check each commit's signature against the account's key
permadeath.com committed
fix(sync): carry every record a commit writes in its frame
permadeath.com committed
test(sync): check every commit frame the way a strict relay does
permadeath.com committed
build(docs): run the doc paths check on every commit
permadeath.com committed
build(docs): check spans that start at a workspace member
permadeath.com committed
docs(config): point the section list at routes/mod.rs
permadeath.com committed
docs(plan): correct four epics' paths that no longer resolve
permadeath.com committed
build(docs): check that the paths docs and plans name exist
permadeath.com committed
test(scenarios): end an app's logins that the server cannot write down
permadeath.com committed
fix(dashboard): fail end-logins when pds.grants does not take the ending
permadeath.com committed