Commit Graph

Select branches

Hide Pull Requests

285

backup/173-unpushed

bug_fix_2

chore/bootstrap-seed-gitlawb-nodes

ci/targeted-pr-checks

codex/b1a-mirror-persistence

feat/admin-purge-spam

feat/commit-status-surface

feat/real-node-deny-harness

feat/repos-search-sort

feat/storage-abstraction

feat/ucan-push-authorization

feat/upstream-mirror-worker

feat/write-sink-brake-coverage

fix/227-icaptcha-insecure-parse

fix/234-release-publish-environment-gate

fix/341-bounty-mutation-gates

fix/344-remove-label-canonicalization

fix/350-timestamp-slice-panics

fix/357-gl-doctor-exit-status

fix/360-attest-didkey-bound

fix/477-bounty-stats-visibility

fix/bound-preauth-signature-body

fix/claim-task-assignee-integrity

fix/doctor-probes-transport-node

fix/fork-repo-path-validation

fix/gossip-replay-bound

fix/graphql-mutation-fence

fix/graphql-query-cost-bounds

fix/h2-unbounded-data-frames

fix/helper-refuses-plaintext-remote-node

fix/icaptcha-insecure-seam-coverage

fix/issue-115-sign-gated-reads

fix/issue-117-multiround-fetch-deadlock

fix/issue-123-client-read-status-check

fix/issue-218-reconciliation-sweep-v2

fix/issue-26-split-2-arweave-transport

fix/issue-26-split-3-cert-compat

fix/issue-26-split-4-config-policy

fix/issue-338-public-read-messaging

fix/issue-345-icaptcha-stdin-overflow

fix/issue-358-check-created-overflow

fix/issue-369-delete-push-hang

fix/issue-370-view-url-404

fix/issue-398-hex-sha-validation

fix/issue-400-silent-empty-results

fix/issue-413-gl-scheme-check

fix/issue-417-nonutf8-mirror-path

fix/issue-419-recipient-scan-cap

fix/issue-426-issue-read-errors

fix/issue-435-replica-visibility

fix/issue-496-create-task-repo-gate

fix/issue-509-cert-threshold-did-canonical

fix/list-refs-canonical-slug

fix/node-add-response-missing-hash

fix/p2p-key-ownership

fix/path-traversal-codeql-4

fix/peers-ledger-248-writers

fix/reject-small-order-ed25519-keys

fix/satisfies-threshold-tolerant-scan

fix/sweep-sourceless-legacy-pins

fix/task-read-visibility-gate

fix/triage-detect-namespaced-test-attrs

fix/verify-all-lenient-require-all

fix/zeroize-seed-bytes

infra-fly-node-configs

infra-node3-fly

main

pr-219

recreate-376-fix-git-clone-positional-delimiter

recreate-409-codex-fix-federated-response-bounds

recreate-410-codex/fix-identify-address-bounds

release-please--branches--main--components--gitlawb-node

test/replay-guards-253

#1

#10

#103

#105

#107

#108

#109

#11

#111

#113

#119

#12

#122

#125

#127

#128

#129

#13

#130

#131

#132

#133

#134

#137

#138

#139

#14

#140

#141

#142

#143

#145

#146

#148

#148/merge

#149

#15

#150

#151

#152

#154

#155

#156

#157

#158

#159

#159/merge

#16

#161

#163

#165

#168

#169

#170

#173

#174

#180

#181

#182

#184

#186

#188

#19

#192

#193

#193/merge

#194

#194/merge

#195

#196

#196/merge

#198

#20

#200

#202

#209

#21

#213

#214

#215

#219

#22

#221

#223

#224

#229

#23

#230

#233

#235

#236

#237

#24

#240

#241

#243

#244

#245

#246

#247

#248

#249

#25

#254

#255

#261

#261/merge

#262

#267

#27

#274

#275

#276

#276/merge

#277

#28

#280

#281

#285

#286

#290

#292

#297

#297/merge

#298

#3

#30

#304

#304/merge

#306

#307

#307/merge

#309

#311

#312

#314

#318

#320

#321

#324

#325

#326

#327

#33

#330

#331

#331/merge

#332

#333

#334

#335

#337

#34

#346

#347

#35

#36

#362

#362/merge

#363

#363/merge

#365

#366

#368

#37

#372

#372/merge

#375

#376

#377

#379

#38

#381

#382

#383

#384

#384/merge

#385

#386

#388

#39

#390

#391

#392

#392/merge

#394

#394/merge

#396

#4

#40

#401

#402

#402/merge

#403

#403/merge

#404

#405

#405/merge

#406

#407

#408

#409

#410

#412

#414

#414/merge

#433

#434

#437

#437/merge

#438

#438/merge

#439

#440

#441

#442

#443

#443/merge

#444

#445

#447

#448

#453

#455

#456

#457

#458

#458/merge

#459

#459/merge

#46

#460

#462

#463

#464

#465

#466

#483

#495

#497

#498

#498/merge

#5

#512

#514

#515

#516

#517

#518

#519

#519/merge

#52

#520

#521

#523

#524

#525

#526

#527

#528

#529

#530

#532

#533

#535

#536

#537

#538

#539

#54

#540

#541

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#551/merge

#552

#553

#553/merge

#554

#554/merge

#555

#555/merge

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#68

#69

#7

#70

#72

#73

#75

#78

#79

#79/merge

#8

#80

#83

#84

#87

#9

#90

#91

#92

v0.3.9

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.7.0

v0.7.1

Mono Color

• 68edeb40ed Merge remote-tracking branch 'origin/main' into tmp-456-merge beardthelion 2026-11-04 23:26:28 -06:00
• e1dc42a73a Merge remote-tracking branch 'origin/main' into tmp-440-merge fix/issue-419-recipient-scan-cap beardthelion 2026-11-04 22:50:28 -06:00
• c1b34027d0 ci: trigger the PR checks on a new head fix/graphql-mutation-fence beardthelion 2026-11-04 22:21:38 -06:00
• c69640818a ci: trigger the PR checks on a new head fix/issue-123-client-read-status-check beardthelion 2026-11-04 21:56:29 -06:00
• 6cc97e48f2 Merge remote-tracking branch 'origin/main' into tmp-412-merge fix/fork-repo-path-validation beardthelion 2026-11-04 21:20:46 -06:00
• eb200e461b test(node): give the unresolvable-DID middleware test the signature body limit state fix/bound-preauth-signature-body beardthelion 2026-11-04 20:26:53 -06:00
• 6fb74a99d3 Merge remote-tracking branch 'origin/main' into tmp-262-merge beardthelion 2026-11-04 20:21:22 -06:00
• 0f88fee0b1 chore: sync Cargo.lock after merging main (ed25519-dalek edge for gl) fix/reject-small-order-ed25519-keys beardthelion 2026-11-04 17:07:51 -06:00
• 5938ad1ddf Merge remote-tracking branch 'origin/main' into tmp-314-merge beardthelion 2026-11-04 17:07:16 -06:00
• f577142a35 ci: trigger the PR checks on the retargeted base fix/gossip-replay-bound beardthelion 2026-11-04 16:48:32 -06:00
• 5d182be9c8 test(node): pass a libp2p identity to p2p::start in the gossip delivery tests beardthelion 2026-11-04 16:24:34 -06:00
• 955023e328 fix(node): dedupe the ref-update row on the replay key, not on a random id beardthelion 2026-09-10 18:22:07 -05:00
• c65bd616d5 fix(node): harden the gossip rejection path against unauthenticated bytes beardthelion 2026-09-10 17:51:57 -05:00
• 8dcb4934ff test(node): drive the live-mesh publish and refusal path end to end beardthelion 2026-09-10 17:38:12 -05:00
• c7e8293aeb test(node): pass the replay guard to the post-fork shed tests beardthelion 2026-09-10 17:19:34 -05:00
• 904e49f3bb fix(node): render rejected gossip timestamps bounded before logging Kevin Codex 2026-08-31 14:11:47 +08:00
• 16adbd8ade fix(review): reconcile the replay guard with the unsigned-admission split beardthelion 2026-08-17 08:03:39 -05:00
• 70cefe3b0c fix(core): stop an attacker-supplied created timestamp from overflowing the window check beardthelion 2026-08-14 11:58:36 -05:00
• ccebc3fa54 test(node): close the replay guard's remaining proof gaps, and fix the sibling window beardthelion 2026-08-14 10:58:53 -05:00
• 04ba7a6792 fix(review): bound the saturated guard's rescan and the log it writes beardthelion 2026-08-14 02:54:29 -05:00
• 46474bcd23 fix(node): bound replay of authenticated gossip ref-update events beardthelion 2026-08-14 01:08:56 -05:00
• 9f4efcc90b feat(node): add the freshness check and replay guard, not yet wired beardthelion 2026-08-14 00:24:41 -05:00
• e3aee00e9d ci: feed ci-surfaces NUL-delimited paths and pin its mapping in a test ci/targeted-pr-checks jatmnandClaude Opus 5.5 2026-11-04 10:08:10 -08:00
• 91adb5c863 ci: test gitlawb-node when bootstrap-peers.json changes jatmnandClaude Opus 5.5 2026-11-04 09:18:43 -08:00
• 37a0f60afc docs: say which changes widen PR CI to the whole workspace jatmnandClaude Opus 5.5 2026-11-04 08:55:40 -08:00
• 888c4fd9dc ci: run PR checks and CodeQL only for the surfaces a PR touches jatmnandClaude Opus 5.5 2026-11-04 08:38:29 -08:00
• 7a1f644859 test(node): address beardthelion round-eight P3 findings on task cursor Marlowe 2026-10-01 12:12:43 -04:00
• 408d588aaa fix(node): address beardthelion round-seven P3 findings on task cursor Marlowe 2026-10-01 08:35:52 -04:00
• daa3e982ec fix(node): address beardthelion round-six P3 findings on task cursor cairn-intern 2026-09-30 03:07:15 -04:00
• 7ad01befb7 fix(node): pad sealed task cursor to fixed width Marlowe 2026-09-27 22:42:53 -04:00
• 3d4ac67ab4 fix(node): fail closed on claim for unresolvable repo cairn-intern 2026-09-27 02:04:11 -04:00
• 4f12e15e17 fix(node): pin declared-length byte-budget arm in oversized content-length test Marlowe 2026-09-26 17:28:15 -04:00
• 96726a33ee test(node): exercise streamed byte-budget guard with chunked body Marlowe 2026-09-26 13:52:01 -04:00
• e394f90e61 test(node): pin the delegator deny on a pre-assigned claim Marlowe 2026-09-26 13:51:59 -04:00
• 7a98ab1558 fix(node): address #464 review findings cairn-intern 2026-09-25 00:53:24 -04:00
• 29fbec5962 docs(db): remove stray dedup comment escapes euxarist 2026-09-12 02:27:21 -04:00
• 7527be870b test(db): verify scoped lookup work in prepared plans euxarist 2026-09-12 02:27:21 -04:00
• 6ebf754e09 fix(node,gl): bound scoped repo lookup and validate MCP cursor euxarist 2026-09-10 17:14:28 -04:00
• 8b0a8cb9e6 docs(node): clarify the shared task-read budget euxarist 2026-09-09 01:28:30 -04:00
• b7bd1083c0 fix(node): Batch task quarantine checks to bound read costs. euxarist 2026-09-08 20:32:52 -04:00
• ac0cac12e3 docs: Distinguish task list and get behavior in rate-limit guidance. euxarist 2026-09-06 22:30:49 -04:00
• 43b34ad3e7 docs: Align task-read documentation with enforced visibility and rate limits. euxarist 2026-09-06 21:39:53 -04:00
• e864f92dbb Withhold quarantined-repo tasks on all read surfaces before party checks. euxarist 2026-09-05 00:27:54 -04:00
• 16d2466164 Accumulate forged WebSocket handshake response until headers terminate. euxarist 2026-09-04 19:48:56 -04:00
• fc4fa033b1 Reject forged signatures during WebSocket authentication upgrade. euxarist 2026-09-04 17:28:00 -04:00
• 36a2748557 Address review feedback on quarantined task claims, WebSocket auth, and MCP limit parsing. euxarist 2026-09-04 16:18:43 -04:00
• a0eac9947e Address review feedback on task-read authorization gating, WebSocket budgets, and test framing. euxarist 2026-09-04 15:35:08 -04:00
• 7c3969f7c0 Address review feedback on task-read authorization gating and client safety. euxarist 2026-09-02 02:26:24 -04:00
• deaee40df0 Enforce task page limits on legacy responses and drop redundant single-column indexes. euxarist 2026-09-01 22:39:43 -04:00
• f0a001a4de Reject oversized task pages so list never returns more than the requested limit. euxarist 2026-08-31 04:23:06 -04:00
• eebcfd8881 Index task keyset pages so the scan ceiling bounds database work. euxarist 2026-08-31 04:23:02 -04:00
• 1c6d67ae0f fix(node): Document and pin the bound on the task scan-ceiling probe euxarist 2026-08-24 10:42:25 -04:00
• a60272fb10 fix(node): Check database continuation when scan budget ends on exact batch boundary euxarist 2026-08-22 22:02:27 -04:00
• 585b33534d fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows euxarist 2026-08-22 21:50:13 -04:00
• 58bce06cc2 fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC euxarist 2026-08-22 17:08:22 -04:00
• 2a646d1e9e fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket euxarist 2026-08-21 20:17:50 -04:00
• 2445f7869e fix(node): Bind task cursors to the caller and brake the task read routes euxarist 2026-08-21 15:41:16 -04:00
• 8f202b660e fix(gl): Reject a non-positive task-list limit and fault the write under test euxarist 2026-08-21 14:34:31 -04:00
• b175fdb5df fix(node): End the candidate stream only after the batch is examined euxarist 2026-08-20 21:51:53 -04:00
• 7c2741ecf4 fix(node)!: Replace task cursors with opaque continuation tokens euxarist 2026-08-20 21:39:44 -04:00
• 1a89c0eed6 fix(node): check task creation status and add assignee expression index euxarist 2026-08-31 04:05:27 -04:00
• ffe87c6f6b fix(node): match bare and did:key assignee forms in claim and list euxarist 2026-08-18 04:34:33 -04:00
• b054189453 fix(node): pin claim guards and map mutation errors through AppError euxarist 2026-08-17 20:24:01 -04:00
• 86c1dc7a75 Keep task-list incomplete for the scan ceiling only. euxarist 2026-08-16 19:27:32 -04:00
• f15ca136f2 Hide unauthorized claim and keep assigned tasks from being stolen euxaristandcairn-code 2026-08-16 17:53:00 -04:00
• e6efc9e3bb Remove unused mut binding on visible_newer in GraphQL query test. euxarist 2026-08-15 19:24:28 -04:00
• 536ffb4c32 Match on Value::Object to extract task ID in GraphQL continuation test. euxarist 2026-08-15 18:44:18 -04:00
• 7d481660f3 Preserve timestamp fractional width and anchor continuation tests on legitimate cursors. euxarist 2026-08-15 18:14:12 -04:00
• 21b576a413 Bind task to repo id in complete_task test in test_support. euxarist 2026-08-15 16:40:05 -04:00
• 4f58cddce5 Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks. euxarist 2026-08-15 16:28:42 -04:00
• d4b5e99c99 Normalize task cursors and gate mutation endpoints behind visibility. euxarist 2026-08-15 16:18:27 -04:00
• c268c03b26 Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state. euxarist 2026-08-14 22:05:24 -04:00
• f0f031f73c Signal incomplete task scans with recoverable cursors and map read errors to AppError. euxarist 2026-08-14 00:40:49 -04:00
• 7149a37d77 Bound denied task history scans. euxarist 2026-08-12 22:46:04 -04:00
• 8d5adeeb06 Preserve authorized task reads across shipped clients. euxarist 2026-08-12 22:27:31 -04:00
• f22ebacf79 fix(node): scope task visibility lookups to the page's repos euxarist 2026-08-12 19:20:42 -04:00
• 171a4342ec fix(node): query the task limit-clamp test as the delegator euxarist 2026-08-12 18:40:10 -04:00
• e1ca1b6d10 fix(node): gate agent-task reads behind the same visibility rules as repo data euxarist 2026-08-12 15:45:57 -04:00
• 2baaf27892 test(node): pin stored-verbatim repo_id on GraphQL gate arms Gravirei 2026-10-29 10:58:50 +06:00
• 10645adae9 fix(node): mirror AppError's 503 split and opaque INSERT in create_task Gravirei 2026-10-28 15:14:56 +06:00
• 2f826d5693 fix(core): reject zero threshold, canonicalize did:key, document replay (#509) Gravirei 2026-10-28 14:38:10 +06:00
• 37764c7ddb docs(node): stop claiming caller-scoped task reads in #496 gate comments Gravirei 2026-10-27 08:10:40 +06:00
• be55f8bd46 fix(node): address P3 review on #496 gate — shared denial text, honest oracle wording, db-fault pins Gravirei 2026-10-27 07:49:36 +06:00
• abc03d65c7 fix(node): address review on #496 gate — opaque lookup errors, no-persist asserts, GraphQL arm pins, honest oracle comment Gravirei 2026-10-01 10:02:13 +06:00
• 64ef51d775 fix(node): owner-gate create_task repo_id against hosted repos (#496) Gravirei 2026-09-29 13:28:21 +06:00
• 7afd30bcfd fix(#477): scope bounty aggregates to anonymously-listable repos Mystic 2026-09-28 09:24:14 +05:30
• cf06b4f644 fix: strengthen federated response bound tests per review Marlowe 2026-09-27 03:06:10 -04:00
• b1a2b64025 fix(node): pin federated response contract end to end (#466 review) Marlowe 2026-09-25 00:48:01 -04:00
• d67c981f7e fix(gl): bound truncate by bytes, not chars (#460) beardthelion 2026-09-15 11:47:46 -05:00
• 895dc1b830 fix(gl): truncate node-supplied display strings at a char boundary (#350) beardthelion 2026-09-15 10:37:32 -05:00
• aa30de332d fix(core): compute created-skew in checked arithmetic (#358) beardthelion 2026-09-15 10:06:21 -05:00
• 0e0495606f fix(attest): bound did:key method-id length before base58 decode (#360) beardthelion 2026-09-15 10:03:54 -05:00
• dc3ed80360 test(node): return real CIDs from the add-response test mocks beardthelion 2026-09-14 16:46:48 -05:00
• 8dc6c26190 fix(node): reject a non-CID Hash in the add response beardthelion 2026-09-14 16:29:47 -05:00
• 63e6e3f34b fix(node): fail pin_git_object when the add response carries no Hash beardthelion 2026-09-14 16:01:46 -05:00
• 2f04ac1560 ci(release): floor the moving tags against the releases list beardthelion 2026-09-13 15:04:32 -05:00
• d2d6660a91 ci(release): close the review-found evasions in the release checks beardthelion 2026-09-13 14:42:04 -05:00
• ef4d29aee1 ci(release): share the image output and bound the step scanners to jobs beardthelion 2026-09-13 13:59:57 -05:00
• e455db10de ci(release): document the concurrency group's pending-slot replacement beardthelion 2026-09-13 13:45:03 -05:00
• 13a1fff8d6 ci(release): consume resolver outputs instead of release-please outputs post-resolve beardthelion 2026-09-13 13:44:40 -05:00