15 Commits

Include renames

Author	SHA1	Message	Date
forge-recoveryandCodex	570f8965f3	ci: add the approved one-shot encrypted npm recovery ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-03 15:49:48 +00:00
forge-recoveryandCodex	5b0fbc2a27	ci: remove the completed one-shot credential recovery workflow ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 17:16:49 +00:00
forge-recoveryandCodex	6863530dc7	ci: recover approved release credentials through one encrypted job ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 17:07:37 +00:00
james.maesandCodex	c288a8864f	ci: centralize branch-aware QBit source scanning (#63) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 09:36:07 -05:00
james.maesandCodex	cc30f599e6	fix(ci): provide a stable verification gate across branches (#59) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 03:12:12 -05:00
james.maesandCodex	7d73ac90b6	fix: distinguish missing RC refs from GitHub error bodies (#57) ... * fix: distinguish missing rc refs from github error bodies Co-Authored-By: Codex <noreply@openai.com> * fix: reject empty ref responses across jq versions Co-Authored-By: Codex <noreply@openai.com> --------- Co-authored-by: Codex <noreply@openai.com>	2026-10-21 02:15:32 -05:00
james.maesandCodex	edc1365ac9	fix: recover verified rc uploads after publisher timeout (#56) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 02:02:14 -05:00
james.maesandCodex	6318d90e96	feat: centralize lightweight GitOps rendering validation (#50) ... Add a read-only native worker and canonical consumer bridge. Verify the pinned Kustomize binary, render every configuration without logging resources, and audit adoption. Behavioral and audit tests pass; all five marketing GitOps configurations render successfully. Co-authored-by: Codex <noreply@openai.com>	2026-10-20 21:54:25 -05:00
james.maesandCodex	83611872a3	fix: verify public All smoke evidence without secret export (#44) ... Allow unauthenticated Circle API reads for public projects, preserve optional authentication and all fail-closed provenance checks. Co-authored-by: Codex <noreply@openai.com>	2026-10-20 21:12:00 -05:00
james.maesandCodex	bcab95daa8	feat: centralize aggregate release callers and IntelliJ plugin CI ... Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 07:12:46 -05:00
james.maesandOpenAI Codex	33a35a0dfa	ci: preserve combined CodeQL language coverage centrally ... Add Actions and Python alongside Java and JavaScript before retiring duplicate default setup after hosted proof. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 07:03:25 -05:00
james.maesandOpenAI Codex	071dc3ae29	feat: centralize remaining release gates and estate policy ... Preserve aggregate-app GA/RC validators in the shared worker, add exact-source Circle evidence, and own business E2E and workflow lint centrally. Audit explicit managed branches and verified no-CI exceptions without inventing merge checks. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:59:42 -05:00
james.maesandOpenAI Codex	58b064d51d	feat: centralize MCP and business database workflows ... Preserve native publication and database checks while removing POM-proven duplicate MCP compilation. Retain the disabled E2E exception and require credential equivalence before Circle retirement. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:45:46 -05:00
james.maesandOpenAI Codex	f2749a71f9	feat: own asynchronous QBit release coordination in the orb ... Keep release cuts short, validate exact publisher and Maven Central provenance before signed tags, and reconcile pending releases without paid polling runners. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:43:01 -05:00
james.maesandOpenAI Codex	26b0a3a18b	feat: centralize QQQ pipeline profiles and release coordination [minor] ... Own canonical consumer validation, selective workflow generation, Maven caching and RC completion in the shared orb. Centralize native workers and preserve acceptance/publication contracts with packed-output, behavioral and estate-audit tests. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:35:13 -05:00