james.maes and Codex
357aba57bc
fix: check every branch before enabling project cancellation ( #142 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-22 02:02:23 -05:00
james.maes and Codex
fb86d1a4a7
fix: avoid SIGPIPE in CLI capability checks ( #140 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-22 01:39:24 -05:00
james.maes and Codex
e9eb225480
feat: reconcile native CircleCI cost settings ( #138 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-22 01:28:10 -05:00
james.maes and Codex
09dac40a1e
feat: recognize and enforce shared native consumers ( #136 )
...
* feat: recognize and enforce shared native consumers
Co-Authored-By: Codex <noreply@openai.com >
* fix: keep qctl required gates appropriate for pull requests
Co-Authored-By: Codex <noreply@openai.com >
---------
Co-authored-by: Codex <noreply@openai.com >
2026-10-22 00:36:08 -05:00
james.maes and Codex
c4f7b5ba76
feat: verify generated applications through the orb ( #132 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 23:57:19 -05:00
james.maes and Codex
3fd8baeda9
feat: validate Homebrew distribution through the orb ( #130 )
...
* feat: validate Homebrew distribution through the orb
Co-Authored-By: Codex <noreply@openai.com >
* test: declare Homebrew inputs in fleet fixtures
Co-Authored-By: Codex <noreply@openai.com >
---------
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 23:32:41 -05:00
james.maes and Codex
1334ababf1
feat: validate repository shell automation centrally ( #128 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 23:10:56 -05:00
james.maes and Codex
3ca2b71ffa
fix: audit catalog as an enforced orb consumer ( #127 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 23:04:14 -05:00
james.maes and Codex
df9113296e
feat: reconcile shared native GitOps consumers ( #125 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 22:46:56 -05:00
james.maes and Codex
9b73a4ed5f
feat: complete centralized marketing validation ( #123 )
...
* feat: complete centralized marketing validation
Co-Authored-By: Codex <noreply@openai.com >
* fix: declare shell fixtures and clean readiness loop lint
Co-Authored-By: Codex <noreply@openai.com >
---------
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 22:23:30 -05:00
james.maes and Codex
aa865fefd5
feat: expose Voyage through the shared verification gate ( #121 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 21:59:52 -05:00
james.maes and Codex
a5d10e8c1c
fix: verify marketing PR branches and require concrete Node images ( #119 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 21:51:20 -05:00
james.maes and Codex
898862a095
feat: centralize Node test and artifact pipelines ( #115 )
...
* feat: centralize Node test and artifact pipelines
Co-Authored-By: Codex <noreply@openai.com >
* test: supply artifact policy in fleet enrollment fixtures
Co-Authored-By: Codex <noreply@openai.com >
---------
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 21:30:11 -05:00
james.maes and Codex
21403d2287
feat: recognize orb-owned native Next verification ( #114 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 21:20:58 -05:00
james.maes and Codex
2675bb7a36
feat: enforce shared branch workflows across five more profiles ( #112 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 21:09:13 -05:00
james.maes and Codex
12eccc9e7d
feat: preserve combined hotfix and integration test filter ( #110 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 20:55:00 -05:00
james.maes and Codex
9e2652d735
fix: pin a compatible GitHub CLI for reconciliation ( #108 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 20:38:20 -05:00
james.maes and Codex
c4e41dea6b
ci: add bounded central enrollment runner ( #106 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 20:27:54 -05:00
james.maes and Codex
4562d5c2d2
fix: compare required checks independently of API order ( #105 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 20:24:18 -05:00
james.maes and Codex
322a194c05
ci: submit enrollment with GitHub-signed API commits ( #104 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 20:18:40 -05:00
james.maes and Codex
9772090684
feat: enforce CI without changing branch access
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:52:42 -05:00
james.maes and Codex
fc39293b9d
feat: verify existing orb gate rulesets
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:47:45 -05:00
james.maes and Codex
e4ecae6294
feat: qualify and finish shared enrollment
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:40:48 -05:00
james.maes and Codex
c30d821f7e
feat: discover current consumer enrollment targets
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:30:56 -05:00
james.maes and Codex
78207c16be
feat: reconcile signed remote enrollment submissions
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:25:53 -05:00
james.maes and Codex
6dd473be25
feat: enroll consumers with one validated batch
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 19:15:56 -05:00
james.maes and Codex
09046d45b0
feat(ci): centralize orb branch-check enforcement
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-21 18:55:40 -05:00
james.maes and Codex
ab77962b6a
fix(audit): discover current organization repositories ( #89 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 16:59:04 -05:00
james.maes and Codex
72f5f4d4e7
fix: allow managed orb tracks during QBit onboarding ( #85 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 16:26:12 -05:00
james.maes and Codex
45bab9d960
feat: support managed patch tracks [minor] ( #80 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 15:06:44 -05:00
james.maes and Codex
2debeada5d
feat(ci): centralize opt-in QBit feature tag publication ( #72 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 12:52:18 -05:00
james.maes and Codex
6febeff590
fix(audit): verify release and hotfix branch enforcement ( #71 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 12:30:59 -05:00
james.maes and Codex
bd5ee3bec5
ci: centralize policy-only branches and shared scanner enforcement ( #65 )
...
Add the repository-policy profile, validate actual legacy policy trees, normalize packed resource line endings, and scope maintenance requirements to branch source. Preserve canonical scanner enforcement for qqq-all and policy-only main branches.
Validation: 32 audit tests, 7 policy tests, all four target source trees, and Linux packed-generator check pass. Replaces this PR's unrecognized-email signatures using the established verified identity; signature enforcement remains enabled.
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 11:21:15 -05:00
james.maes and Codex
c288a8864f
ci: centralize branch-aware QBit source scanning ( #63 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 09:36:07 -05:00
james.maes and Codex
9906c8f120
fix: audit explicitly selected repository branches ( #62 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 09:15:33 -05:00
james.maes and Codex
4dcf2c1891
fix: preserve legacy qbit hotfix publication policies ( #61 )
...
* fix: preserve legacy qbit hotfix publication policies
Co-Authored-By: Codex <noreply@openai.com >
* fix: regenerate packed profiles with Linux zlib
Co-Authored-By: Codex <noreply@openai.com >
---------
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 09:00:43 -05:00
james.maes and Codex
05a2a5217a
fix: audit rc worker pins independently of native workers ( #58 )
...
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 02:23:51 -05:00
james.maes and Codex
5e9bbb54ec
ci: add batch version rollout for canonical consumers ( #54 )
...
Validate every checkout before updating its orb pin. Preserve publication policy, filters, credentials contexts and forwarded parameters; reject custom callers and mismatched declarations. Cover all 12 profiles, dry runs, no-op repeats, invalid batches and duplicate input with six new tests in the existing contract job. Existing migration and standard tests pass; Linux packed generator check passes.
Co-authored-by: Codex <noreply@openai.com >
2026-10-21 00:45:50 -05:00
james.maes and Codex
6318d90e96
feat: centralize lightweight GitOps rendering validation ( #50 )
...
Add a read-only native worker and canonical consumer bridge. Verify the pinned Kustomize binary, render every configuration without logging resources, and audit adoption. Behavioral and audit tests pass; all five marketing GitOps configurations render successfully.
Co-authored-by: Codex <noreply@openai.com >
2026-10-20 21:54:25 -05:00
james.maes and Codex
42e0be02c9
fix: enforce Maven publication gate in orb audit
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-20 18:35:53 -05:00
james.maes and Codex
bcab95daa8
feat: centralize aggregate release callers and IntelliJ plugin CI
...
Co-Authored-By: Codex <noreply@openai.com >
2026-10-20 07:12:46 -05:00
james.maes and OpenAI Codex
071dc3ae29
feat: centralize remaining release gates and estate policy
...
Preserve aggregate-app GA/RC validators in the shared worker, add exact-source Circle evidence, and own business E2E and workflow lint centrally. Audit explicit managed branches and verified no-CI exceptions without inventing merge checks.
Co-Authored-By: OpenAI Codex <noreply@openai.com >
Signed-off-by: James Maes <james@kof22.com >
2026-10-20 06:59:42 -05:00
james.maes and OpenAI Codex
64e8d68cb3
fix: preserve QBit publication policies during fleet migration
...
Keep audited main-push release paths, bounded tag policies and test exclusions. Reject unknown filters and retain 630 original-to-generated publication comparisons across all 42 QBits.
Co-Authored-By: OpenAI Codex <noreply@openai.com >
Signed-off-by: James Maes <james@kof22.com >
2026-10-20 06:53:01 -05:00
james.maes and OpenAI Codex
848210d9f6
feat: generate and audit pinned QBit release callers
...
Preserve explicit release opt-outs while checking callback and manual retry bridges against the immutable orb worker.
Co-Authored-By: OpenAI Codex <noreply@openai.com >
Signed-off-by: James Maes <james@kof22.com >
2026-10-20 06:44:31 -05:00
james.maes and OpenAI Codex
26b0a3a18b
feat: centralize QQQ pipeline profiles and release coordination [minor]
...
Own canonical consumer validation, selective workflow generation, Maven caching and RC completion in the shared orb. Centralize native workers and preserve acceptance/publication contracts with packed-output, behavioral and estate-audit tests.
Co-Authored-By: OpenAI Codex <noreply@openai.com >
Signed-off-by: James Maes <james@kof22.com >
2026-10-20 06:35:13 -05:00