Gunnar

nordisk/holger

Newest commits

535489e78553Merge relruna/slsa-doc into main (lane RELBUILD-RUNA): docs/SLSA.md, a release build is a Runa pipeline; the per-release verbs; one builder id. Docs only2026-10-29
54e91277865edocs/SLSA.md: a release build is a Runa pipeline (dwarves lane RELBUILD-RUNA): sealed containers on the forge's runner with CI's caps, the statement from the Runa run's record, the per-release verbs (release-build request, show <run-id>, attach; history), the signed bundle back through the server; one builder id; the runner's own account is in effect (the host step is done)2026-10-29
3794de2aee74Merge ra5sec/ds-relay-lazy-2026-10-29 into main (lane RA5-SEC): RA5-28 (leftover) the front opens the downstreams' interface and public udp/51830 only once main lists a WireGuard downstream; RA5-41 follow-up: Holger's buy Settings name card_check and beta_line in Holger's terms (monetize main 232b7275 needs them under metered); the estate and front locks follow edda's nornir-identity 0.2.3. RED 27a91e70, GREEN b016155f. Gate on the merged tree: lockcheck GREEN, holger-estate-front tests green (default and --features metered), clippy --all-targets --features metered -D warnings clean2026-10-29
5b2bcefbaaa5holger estate lock follows edda main (nornir-identity 0.2.3)2026-10-29
bd9b833a87c8holger-estate-front lock follows edda main (nornir-identity 0.2.3)2026-10-29
b91770f9bbf8RA5-41 follow-up: Holger's buy Settings name the free row's note, the card check and the beta line in Holger's terms (monetize-site-buy card_check, beta_line)2026-10-29
b016155f4f8bGREEN RA5-28: the front opens the downstreams' interface and its public udp/51830 only once main lists a WireGuard downstream (follow_lazily with an opener); a front whose main declares none listens on nothing2026-10-29
6e8598f05e39Merge relbuild/slsa-doc into main (lane RELBUILD-ACCT): docs/SLSA.md names the release runner's own account (relbuild on dwarf's host, dwarves 1712ad6) and how to read runnerAccount; docs only2026-10-29
cca020a2d27fdocs/SLSA.md: the release runner's own account (relbuild on dwarf's host; done in dwarves, waiting for the host step), and how to read runnerAccount from a statement (lane RELBUILD-ACCT)2026-10-29
cb9d3cad0ca3Merge smallrows/a29-11-oci-sources into main (lane SMALL-ROWS): an oci source asking auto_approve is refused when the config is read (A29-11)2026-10-29
27a91e70ee8dRED RA5-28: the front's downstreams relay (udp/51830) opens only once main lists a WireGuard downstream2026-10-29
c1a562e181cfMerge remote-tracking branch 'origin/main' into smallrows/a29-11-oci-sources2026-10-29
f9e5f201e2dfGREEN sources: an oci source asking auto_approve: when(...) is refused by name when the config is read, so no view shows an image that approves itself (A29-11)2026-10-29
ce68c7cec769RED tier1: an oci source asking auto_approve: when(...) beside a permissive floor still LOADS from sources: (A29-11)2026-10-29
249f95b02204Merge slsakey/front-release-signing into main (lane SLSA-KEY): holger.rs's front page names the release key (id d24d3785…8249e) under the credit and links slsa/ in holger and gunnar; the id lives once, in holger_front::RELEASE_KEY_ID. Gate (ci4, dwarf): holger-front 51/0 + release_signing 4/0, clippy -D warnings clean, no lock change2026-10-29
ed6178815d38CHANGELOG: the release key on holger.rs's front page (lane SLSA-KEY)2026-10-29
ab66879157f9holger-front: holger.rs's front page names the release key under the credit (lane SLSA-KEY)2026-10-29
ef7a146a8e47Merge cla/no-patch-mail-2026-10-29 into main (lane CLA): contributions only as pull requests on git.gunnar.rs, no patches by e-mail. Docs only2026-10-29
bf40a477adc9CONTRIBUTING: contributions come only as pull requests on git.gunnar.rs (lane CLA; owner 2026-10-29)2026-10-29
2677aef37645Merge cla/v1.1-2026-10-29 into main (lane CLA): CLA.md version 1.1, inbound = outbound for MIT OR Apache-2.0 parts, accepted only by one line in CLA-SIGNATURES.md in the first pull request. Docs only, no lock change2026-10-29