Brad Groux
1c5d44a2af
feat: add durable phase transition controls ( #1038 )
2026-07-25 01:36:06 -05:00
Brad Groux
4aba9229c9
feat: gate agent launches on workspace trust ( #1031 )
2026-07-25 00:48:28 -05:00
Brad Groux
f7aea9a4d4
feat: execute durable retry and fallback policy ( #1017 )
...
* feat: execute durable retry and fallback policy
* fix: declare recovery control permissions
* fix: make recovery fail closed and durable
* test: preserve workflow recovery revision
2026-07-24 20:37:08 -05:00
Brad Groux
0fbd9ee428
feat: add run-scoped tool control plane ( #959 )
...
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
* feat: add run-scoped tool control plane (#857 )
* test: align provider capability fixtures
2026-07-24 05:10:20 -05:00
Brad Groux
6b9510c58f
feat: add provider-neutral conversation lifecycle ( #856 ) ( #958 )
2026-07-24 04:07:40 -05:00
Brad Groux
2c76424b6a
feat: add provider-native interactive approval broker ( #953 )
...
* feat: add provider-native approval broker
* fix: register approval broker permission surfaces
2026-07-24 02:28:18 -05:00
Brad Groux
b0f4ea88a2
fix: classify durable agent websocket events ( #950 )
2026-07-24 00:10:26 -05:00
Brad Groux
9f51d78c50
feat: add immutable run launch manifests ( #926 )
...
Closes #854 .
2026-07-23 16:00:23 -05:00
Brad Groux
44d1611741
feat: add governed SQLite journal maintenance ( #884 )
...
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
* feat: add governed SQLite journal maintenance
* fix: update permission coverage for SQLite maintenance
---------
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-15 20:00:58 -05:00
Brad Groux
1bbd3739e0
Prepare Veritas Kanban 5.1.0 release
2026-06-18 17:01:39 -05:00
Brad Groux
ca2dd7ef23
Add shared live run sessions ( #731 )
2026-06-18 16:49:55 -05:00
Brad Groux
4a0c66d331
Add reusable agent profile packages ( #729 )
...
* Add reusable agent profile packages
* Add profile CLI permission coverage
2026-06-18 15:53:47 -05:00
Brad Groux
1c96a326aa
Enforce v5 password-session boundary
...
Limit password-session cookies to local-owner loopback clients and document device/session-token requirements for remote and multi-user v5 GA access.
2026-06-05 14:53:17 -05:00
Brad Groux
0b33699684
Add editable time breakdown exports ( #635 )
2026-06-05 09:43:04 -05:00
Brad Groux
f6f0bd31ca
Add source-backed evidence timeline ( #634 )
2026-06-05 09:24:54 -05:00
Brad Groux
f7d442595b
Add operations digest UI and filters ( #632 )
2026-06-05 08:45:15 -05:00
Brad Groux
bd60860681
Narrow production CSP style policy
...
Closes #396
2026-06-03 17:11:11 -07:00
Brad Groux
7fac1b8977
Add skill risk gates
2026-06-03 07:02:44 -07:00
Brad Groux
a9217784b3
Add skill security scanner ( #538 )
2026-06-03 06:33:05 -07:00
Brad Groux
fd96f73408
Harden v5 security review surfaces ( #531 )
2026-06-03 03:55:22 -07:00
Brad Groux
0676970825
Harden realtime sync delivery
...
Harden realtime sync delivery for v5 remote multi-client use.
2026-06-03 03:31:29 -07:00
Brad Groux
522162ae89
test: add v5 permission coverage manifest gate
...
## Summary
- adds a v5 permission coverage manifest with classifications, required permissions, denial reasons, and review justifications across REST, WebSocket, CLI, MCP, workflow, transition hook, command palette, and background job surfaces
- adds a Node-based coverage checker that fails when tracked surfaces are missing from the manifest or when REST route prefixes drift from the shared permission map
- wires the checker into CI and documents the manifest gate in the security guide
Closes #420 .
## Verification
- `node scripts/check-permission-coverage.mjs`
- `./node_modules/.bin/prettier --check package.json .github/workflows/ci.yml scripts/check-permission-coverage.mjs docs/security/permission-coverage.json docs/security.md`
- `git diff --check`
- `pnpm lint:budget`
- `pnpm build`
- `pnpm audit --prod --audit-level=high` (passes high gate; 3 existing moderate findings)
- GitHub Actions: Build, Lint & Type Check, Security Audit, Workspace Unit Tests
2026-05-31 05:02:26 -05:00
Brad Groux
c89c5e5d7e
docs: add v4 governance security audit ( #265 )
...
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-03-23 20:16:41 -05:00
