Repository navigation

feat(pilot): installable workspace pilot (spec 006 T001–T009) - #91

Merged

wstein merged 51 commits into

mainfrom

pilot/installable-pilot-pr

Oct 16, 2026

Merged

feat(pilot): installable workspace pilot (spec 006 T001–T009)#91
wstein merged 51 commits into
mainfrom
pilot/installable-pilot-pr

Commits on Oct 16, 2026
- docs(spec006): distinguish lifecycle retries from agent input
  wstein
  committed
  0673e94
- docs(pilot): plan installable workspace and CLI work items
  wstein
  committed
  a183ad2
- docs(pilot): require terminal safety before attachment acceptance
  wstein
  committed
  016c4dc
- feat(pilot): scaffold pinned Phoenix and Go applications
  wstein
  committed
  c64c654
- docs(pilot): separate internal acceptance from signed release
  wstein
  committed
  65ec1b9
- fix(whr): return documented usage exit for unsupported commands
  wstein
  committed
  24d2ee3
- ci(pilot): enforce explicit Go and Phoenix acceptance
  
  wstein
  and
  codex
  committed
  cf98785
- test(migration): freeze selected Python wire and path contracts
  
  wstein
  and
  codex
  committed
  d366a23
- feat(migration): port strict JSON and lexical path primitives
  
  wstein
  and
  codex
  committed
  e24b08a
- docs(pilot): record accepted owner persistence contract
  
  wstein
  and
  codex
  committed
  a3b77b3
- feat(owner): persist scoped durable operation intent
  
  wstein
  and
  codex
  committed
  3fad697
- docs(auth): consolidate accepted browser security contract
  
  wstein
  and
  codex
  committed
  6d67699
- feat(auth): enforce scoped owner and browser authentication
  
  wstein
  and
  codex
  committed
  0a37257
- fix(test): reuse loaded authentication migration module
  
  wstein
  and
  codex
  committed
  c882e7e
- docs(protocol): consolidate accepted host validation contract
  
  wstein
  and
  codex
  committed
  c4bd81a
- feat(protocol): validate scoped immutable host messages
  
  wstein
  and
  codex
  committed
  af611cb
- test(security): pin HTTP1-only authenticated transport contract
  
  wstein
  and
  codex
  committed
  4b06a52
- fix(security): enforce HTTP1-only authenticated listener profile
  
  wstein
  and
  codex
  committed
  b39b13a
- docs(hosts): freeze reviewed enrollment and liveness contract
  
  wstein
  and
  codex
  committed
  3b37100
- feat(hosts): enroll and connect authenticated host identities
  
  wstein
  and
  codex
  committed
  8984da1
- fix(hosts): prove atomic identity persistence recovery
  
  wstein
  and
  codex
  committed
  c4365c0
- docs(hosts): record accepted enrollment transport evidence
  
  wstein
  and
  codex
  committed
  3822cb2
- docs(provider): consolidate T009 trust and Docker contract
  
  wstein
  and
  codex
  committed
  826048a
- docs(provider): record reviewed seed ownership and native evidence
  
  wstein
  and
  codex
  committed
  ebf2548
- feat(trust): persist exact revision and initial storage binding
  
  wstein
  and
  codex
  committed
  0c5b9e0
- feat(config): resolve and freeze approved container inputs
  
  wstein
  and
  codex
  committed
  ed90272
- feat(storage): publish initial project data atomically
  
  wstein
  and
  codex
  committed
  8c9a79a
- fix(config): check every ARG and canonical stage name
  
  wstein
  and
  codex
  committed
  1fede52
- fix(storage): resolve complete initial symlink chains
  
  wstein
  and
  codex
  committed
  4ab775c
- feat(provider): implement trusted Docker workspace primitives
  
  wstein
  and
  codex
  committed
  39f62cc
- fix(ci): retain schema-valid provider test identities
  
  wstein
  and
  codex
  committed
  08de861
- fix(provider): preserve official result and config boundaries
  
  wstein
  and
  codex
  committed
  10be1df
- test(provider): prove bounded real refusal coverage
  
  wstein
  and
  codex
  committed
  0532970
- fix(test): require exact source symlink refusal diagnostic
  
  wstein
  and
  codex
  committed
  e3d58cf
- fix(ci): isolate npm configs in distinct private files
  
  wstein
  and
  codex
  committed
  dc89e4d
- test(provider): require failed build to reach Docker
  
  wstein
  and
  codex
  committed
  cd926eb
- docs(pilot): record T009 canonical and runtime block
  
  wstein
  and
  codex
  committed
  a6cbf47
- docs(pilot): record bounded T009 fixture evidence
  
  wstein
  and
  codex
  committed
  a254519
- docs(pilot): correct T009 entry-policy provenance
  
  wstein
  and
  codex
  committed
  50b98db
- fix(storage): refuse link chains that leave and re-enter the source
  
  wstein
  and
  claude
  committed
  15f93c6
- fix(provider): decode embedded tool pins with non-string fields
  
  wstein
  and
  claude
  committed
  5fbd50b
- fix(hosts): keep a valid identity connected when renewal fails
  
  wstein
  and
  claude
  committed
  f687445
- fix(config): admit stage sources only from earlier stages
  
  wstein
  and
  claude
  committed
  515ba34
- docs(ci): describe application acceptance without stale counts
  
  wstein
  and
  claude
  committed
  ca70f9c
- ci(provider): compile real-Docker acceptance entrypoints in every run
  
  wstein
  and
  claude
  committed
  0152355
- docs(pilot): map rewritten evidence IDs and record review outcome
  
  wstein
  and
  claude
  committed
  4f4f547
- fix(hosts): retry failed renewal while connected
  
  wstein
  and
  claude
  committed
  0b15e78
- fix(config): parse Dockerfile sources as BuildKit does
  
  wstein
  and
  claude
  committed
  ef2d881
- docs(pilot): correct review-fix record and harness vet step
  
  wstein
  and
  claude
  committed
  bb3841f
- fix(config): detect git sources without a moby util import
  
  wstein
  and
  claude
  committed
  27386d6
- fix(config): make csvvalue direct and test isGitTransport
  
  wstein
  and
  claude
  committed
  2235c20

Commits

Commits on Oct 16, 2026