Import existing pre-cutoff GitHub work into Gitea #4

Merged

forge-recovery merged 16 commits from migration/cutoff-798e81e8e9bc-01a662 into dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1 2026-11-02 00:34:26 +00:00

Conversation 0 Commits 16 Files Changed 79

+3296 -23

forge-recovery commented 2026-11-02 00:34:23 +00:00

Owner

Copy link

Copy source

Retain both existing Git histories on dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1: Gitea 4579d91675 and frozen GitHub 798e81e8e9. The GitHub source is already preserved under refs/heads/archive/qrun-github-cutover-20261101/798e81e8e9bc/dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1. This imports existing work using a normal history-preserving merge, not new feature development, dependency upgrading, release publication, or CI qualification. No forced GitHub writes or branch-policy bypass. AI-assisted by Codex.

Retain both existing Git histories on dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1: Gitea 4579d91675ee91f872e43297176496d4402f6a3e and frozen GitHub 798e81e8e9bcaea0c0d7f3ea8bff64ce63bd572e. The GitHub source is already preserved under refs/heads/archive/qrun-github-cutover-20261101/798e81e8e9bc/dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1. This imports existing work using a normal history-preserving merge, not new feature development, dependency upgrading, release publication, or CI qualification. No forced GitHub writes or branch-policy bypass. AI-assisted by Codex.

forge-recovery added 16 commits 2026-11-02 00:34:23 +00:00

docs: clarify published protocol and wire versions ... 84145d96a2

Update published release guidance and distinguish distribution versions from
runtime wire-major validation and currently unavailable capability discovery.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #7 from QRun-IO/docs/published-release-20261031 ... c33244913d

docs: clarify published protocol and wire versions

feat: define native printing authentication and device controls ... cc3c4e50e8

Add bounded desired-state controls, command receipts and replay/expiry contracts.
Specify the standard QQQ semantic session transport and authoritative device
binding, preserving explicit legacy wire compatibility. Include shared fixtures
and package both consumer contracts in the 0.2.0-rc.1 candidate bundle.

Validation: 42 schema definitions and 54 fixtures pass, including invalid-input
and integrity checks; bundle contents and git diff --check verified. Consumers
and real browser/provider deployment remain separately qualified.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #8 from QRun-IO/feat/server-device-controls-20261031 ... 5671275b5e

feat: define native printing authentication and device controls

docs: clarify the native authentication boundary ... 97405c7ea8

State that account-bound device tokens cannot authenticate through legacy routes,
and that native hosts disable legacy enrollment by default. Preserve only explicit
unbound-device migration and legacy-only host opt-in.

Validation: all 42 schema definitions and 54 fixtures still pass; schema and fixture
bytes are unchanged, so consumer pin cc3c4e5 remains valid. Clarification matches
reviewed real HTTP regressions in the server candidate.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #9 from QRun-IO/docs/native-auth-boundary-20261031 ... 32247b5049

docs: clarify the native authentication boundary

docs: prepare protocol 0.2.0 prerelease ... 86b78fbad2

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #10 from QRun-IO/docs/release-020-20261031 ... 95f24a6c94

docs: prepare protocol 0.2.0 prerelease

docs: document the published 0.2.0 prerelease ... 45ca5483b2

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #11 from QRun-IO/docs/published-020-20261031 ... a35c083db7

docs: document the published 0.2.0 prerelease

feat(protocol): define realtime printing transport and configurable limits ... 67be986cb7

Specify authenticated outbound WebSockets, direct state and command delivery,
durable receipt replay and independent streamed document transfers. Add the
1.1 contract, strict fixtures and configurable operating policy for the
coordinated 0.3.0 prerelease.

Validation: 70 schema definitions and 72 fixtures; bundle and changed Markdown checks pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

fix(protocol): use major version for mandatory realtime claims ... df3729ac63

Advertise printing extension 2.0.0 because requiring a synchronized channel
breaks the published HTTP-only native claim contract. Preserve product0.3,
framework /qqq/v1 and wire/subprotocolv1. Add a strict standard extension
entry fixture and compatibility checks without redefining core discovery.

Validation: 71 schema definitions and73 fixtures, bundle and Markdown gates pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

docs(release): prepare realtime API 2.0 candidate notes ... b33c7c4cf3

Document the coordinated 0.3.0-rc.1 release, server-first upgrade and wire-v1
compatibility without claiming installed or physical acceptance.

Validation: changed Markdown and diff checks pass; protocol schema and fixtures
are unchanged.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #12 from QRun-IO/feat/realtime-printing-20261031 ... f3cbc02e9b

feat: define real-time printing API 2.0

chore: enforce owned source copyright notices (#13) ... eea7f23556

* chore(standards): preserve owned-source copyright notices

Add accurate repository copyright and license comments to 14 owned source/build/configuration files. Preserve existing holders, upstream wrappers, legal payloads and schema/data exemptions. Exact inverse-byte reconstruction and applicable parser/token/AST checks prove comment-only changes; existing relevant regressions pass.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

* chore: enforce owned source copyright notices

Check real leading comments against explicit repository provenance and retain existing native style gates.

Co-Authored-By: Codex GPT-6 <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

---------

Signed-off-by: James Maes <james@kof22.com>
Co-authored-by: Codex (GPT-6) <noreply@openai.com>

chore(deps): bump KofTwentyTwo/standards/.github/workflows/security.yml ... 798e81e8e9

Bumps [KofTwentyTwo/standards/.github/workflows/security.yml](https://github.com/koftwentytwo/standards) from 0.1.2 to 1.2.1.
- [Release notes](https://github.com/koftwentytwo/standards/releases)
- [Changelog](https://github.com/KofTwentyTwo/standards/blob/main/CHANGELOG.md)
- [Commits](https://github.com/koftwentytwo/standards/compare/fdf5ed029603c938615a32b1beca3628b8787945...70b555bd5658273090769991bfc4c9b6681dde18)

---
updated-dependencies:
- dependency-name: KofTwentyTwo/standards/.github/workflows/security.yml
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

forge-recovery merged commit 23964852c1 into dependabot/github_actions/KofTwentyTwo/standards/dot-github/workflows/security.yml-1.2.1 2026-11-02 00:34:26 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

secuurity

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qqq-print-protocol#4