Import existing pre-cutoff GitHub work into Gitea #5

Owner

Retain both existing Git histories on dependabot/github_actions/actions/setup-node-7.1.0: Gitea 9c439cfa69 and frozen GitHub bc2a75f99b. The GitHub source is already preserved under refs/heads/archive/qrun-github-cutover-20261101/bc2a75f99bdc/dependabot/github_actions/actions/setup-node-7.1.0. This imports existing work using a normal history-preserving merge, not new feature development, dependency upgrading, release publication, or CI qualification. No forced GitHub writes or branch-policy bypass. AI-assisted by Codex.

Retain both existing Git histories on dependabot/github_actions/actions/setup-node-7.1.0: Gitea 9c439cfa6998612e1bb37853c43dec931ffc9fbc and frozen GitHub bc2a75f99bdcfe574322403867537a762bebf866. The GitHub source is already preserved under refs/heads/archive/qrun-github-cutover-20261101/bc2a75f99bdc/dependabot/github_actions/actions/setup-node-7.1.0. This imports existing work using a normal history-preserving merge, not new feature development, dependency upgrading, release publication, or CI qualification. No forced GitHub writes or branch-policy bypass. AI-assisted by Codex.
forge-recovery added 29 commits 2026-11-02 00:34:29 +00:00
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
docs: record protocol compatibility verification
Protocol CI and release / verify (push) Failing after 14s
Protocol CI and release / release (push) Skipped
3bfd28e00f
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
feat: define branded test-document media profiles
Protocol CI and release / release (push) Skipped
Protocol CI and release / verify (push) Failing after 12s
f4f977ca4a
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Record final compatibility and security evidence while separating protocol publication from installed system qualification.

Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Keep documented same-commit job-level calls until released actionlint supports the new self-repository syntax; preserve all existing checks.

Co-authored-by: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
chore: release audited printing protocol (#2)
Protocol CI and release / verify (push) Failing after 13s
security / workflows (push) Canceled after 0s
security / sca (push) Canceled after 0s
security / secrets (push) Canceled after 0s
security / security (push) Canceled after 0s
Protocol CI and release / release-security (push) Canceled after 0s
codeql / analyze (javascript-typescript) (push) Canceled after 0s
codeql / analyze (actions) (push) Canceled after 0s
codeql / codeql (push) Canceled after 0s
Protocol CI and release / release-codeql (push) Canceled after 0s
Protocol CI and release / release (push) Canceled after 0s
23fbbaab1b
ci(release): verify and attest protocol artifacts
Update published release guidance and distinguish distribution versions from
runtime wire-major validation and currently unavailable capability discovery.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Merge pull request #7 from QRun-IO/docs/published-release-20261031
Protocol CI and release / release-security (push) Skipped
Protocol CI and release / release-codeql (push) Skipped
QRun-IO/ci-policy: ci / fork-guard (push) Skipped
QRun-IO/ci-policy: ci / java-maven-0 (push) Skipped
QRun-IO/ci-policy: ci / node-1 (push) Skipped
QRun-IO/ci-policy: ci / source-config-2 (push) Skipped
Protocol CI and release / verify (push) Failing after 13s
Protocol CI and release / release (push) Skipped
QRun-IO/ci-policy: ci / not-enrolled (push) Successful in 4s
QRun-IO/ci-policy: ci / ci-result (push) Successful in 3s
codeql / analyze (javascript-typescript) (push) Canceled after 0s
codeql / analyze (actions) (push) Canceled after 0s
codeql / codeql (push) Canceled after 0s
security / workflows (push) Canceled after 0s
security / sca (push) Canceled after 0s
security / secrets (push) Canceled after 0s
security / security (push) Canceled after 0s
c33244913d
docs: clarify published protocol and wire versions
Add bounded desired-state controls, command receipts and replay/expiry contracts.
Specify the standard QQQ semantic session transport and authoritative device
binding, preserving explicit legacy wire compatibility. Include shared fixtures
and package both consumer contracts in the 0.2.0-rc.1 candidate bundle.

Validation: 42 schema definitions and 54 fixtures pass, including invalid-input
and integrity checks; bundle contents and git diff --check verified. Consumers
and real browser/provider deployment remain separately qualified.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
feat: define native printing authentication and device controls
State that account-bound device tokens cannot authenticate through legacy routes,
and that native hosts disable legacy enrollment by default. Preserve only explicit
unbound-device migration and legacy-only host opt-in.

Validation: all 42 schema definitions and 54 fixtures still pass; schema and fixture
bytes are unchanged, so consumer pin cc3c4e5 remains valid. Clarification matches
reviewed real HTTP regressions in the server candidate.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
docs: clarify the native authentication boundary
Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Merge pull request #10 from QRun-IO/docs/release-020-20261031
Protocol CI and release / verify (push) Failing after 44s
security / workflows (push) Canceled after 0s
security / sca (push) Canceled after 0s
security / secrets (push) Canceled after 0s
security / security (push) Canceled after 0s
Protocol CI and release / release-security (push) Canceled after 0s
codeql / analyze (javascript-typescript) (push) Canceled after 0s
codeql / analyze (actions) (push) Canceled after 0s
codeql / codeql (push) Canceled after 0s
Protocol CI and release / release-codeql (push) Canceled after 0s
Protocol CI and release / release (push) Canceled after 0s
95f24a6c94
docs: prepare protocol 0.2.0 prerelease
Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
docs: document the published 0.2.0 prerelease
Specify authenticated outbound WebSockets, direct state and command delivery,
durable receipt replay and independent streamed document transfers. Add the
1.1 contract, strict fixtures and configurable operating policy for the
coordinated 0.3.0 prerelease.

Validation: 70 schema definitions and 72 fixtures; bundle and changed Markdown checks pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Advertise printing extension 2.0.0 because requiring a synchronized channel
breaks the published HTTP-only native claim contract. Preserve product0.3,
framework /qqq/v1 and wire/subprotocolv1. Add a strict standard extension
entry fixture and compatibility checks without redefining core discovery.

Validation: 71 schema definitions and73 fixtures, bundle and Markdown gates pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Document the coordinated 0.3.0-rc.1 release, server-first upgrade and wire-v1
compatibility without claiming installed or physical acceptance.

Validation: changed Markdown and diff checks pass; protocol schema and fixtures
are unchanged.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>
Merge pull request #12 from QRun-IO/feat/realtime-printing-20261031
Protocol CI and release / verify (push) Failing after 24s
security / workflows (push) Canceled after 0s
security / sca (push) Canceled after 0s
security / secrets (push) Canceled after 0s
security / security (push) Canceled after 0s
Protocol CI and release / release-security (push) Canceled after 0s
codeql / analyze (javascript-typescript) (push) Canceled after 0s
codeql / analyze (actions) (push) Canceled after 0s
codeql / codeql (push) Canceled after 0s
Protocol CI and release / release-codeql (push) Canceled after 0s
Protocol CI and release / release (push) Canceled after 0s
f3cbc02e9b
feat: define real-time printing API 2.0
* chore(standards): preserve owned-source copyright notices

Add accurate repository copyright and license comments to 14 owned source/build/configuration files. Preserve existing holders, upstream wrappers, legal payloads and schema/data exemptions. Exact inverse-byte reconstruction and applicable parser/token/AST checks prove comment-only changes; existing relevant regressions pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

* chore: enforce owned source copyright notices

Check real leading comments against explicit repository provenance and retain existing native style gates.

Co-Authored-By: Codex GPT-6 <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

---------

Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>
chore(deps): bump actions/setup-node from 6.2.0 to 7.1.0
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
QRun-IO/ci-policy: ci / gradle-0 (pull_request) Skipped
QRun-IO/ci-policy: ci / java-docker-1 (pull_request) Skipped
QRun-IO/ci-policy: ci / java-maven-2 (pull_request) Skipped
QRun-IO/ci-policy: ci / node-3 (pull_request) Skipped
QRun-IO/ci-policy: ci / source-config-5 (pull_request) Skipped
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
QRun-IO/ci-policy: Shared Node CI / verify (pull_request) Failing after 11s
QRun-IO/ci-policy: Shared Node CI / secrets (pull_request) Successful in 10s
QRun-IO/ci-policy: Shared Node CI / gate (pull_request) Failing after 11s
QRun-IO/ci-policy: ci / node-4 (pull_request) Failing after 2m33s
QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 4s
bc2a75f99b
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.2.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...949feb2413d6458794dcd2491c4babbbce0c15c1)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
james.maes added 1 commit 2026-11-02 00:55:46 +00:00
fix: preserve current release workflow while importing history
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
QRun-IO/ci-policy: ci / gradle-0 (pull_request) Skipped
QRun-IO/ci-policy: ci / java-docker-1 (pull_request) Skipped
QRun-IO/ci-policy: ci / java-maven-2 (pull_request) Skipped
QRun-IO/ci-policy: ci / node-3 (pull_request) Skipped
QRun-IO/ci-policy: ci / source-config-5 (pull_request) Skipped
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
QRun-IO/ci-policy: Shared Node CI / verify (pull_request) Failing after 11s
QRun-IO/ci-policy: Shared Node CI / secrets (pull_request) Successful in 13s
QRun-IO/ci-policy: Shared Node CI / gate (pull_request) Failing after 12s
QRun-IO/ci-policy: ci / node-4 (pull_request) Failing after 41s
QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 4s
58255a4c32
Retain the newer setup-node pin in verify and the existing release artifact download flow. Both source histories are preserved.

Co-Authored-By: OpenAI GPT-6 <noreply@openai.com>
forge-recovery merged commit ab0ac1bce9 into dependabot/github_actions/actions/setup-node-7.1.0 2026-11-02 00:55:59 +00:00
Sign in to join this conversation.