Commits

main

Register: C-73 steps 1-2 done (no Live reads or writes of the frozen tables, deployed); drop not before 2026-10-23OpenVibers · 23 Sept 2026 03dfcb3
Register: C-80 retired (analytics module in openvibe-shared 1.4.0, verified on production)OpenVibers · 23 Sept 2026 ea99b50
D41 proof passed on production (sources: deploy, rollback, redeploy; 37 other units untouched); register C-83 (media webhook → Events, both since 20:00 UTC), C-84 (deploy notice bridge), C-85 (go-live push → Network)OpenVibers · 23 Sept 2026 12067f6
Stage B launch readiness: threat review, launch release steps with verification and rollback, and the launch-rule evidence per itemOpenVibers · 23 Sept 2026 2bfc62d
Stage B abuse limits from the threat review: deploys stop before the shared disk fills, one person owns at most 10 projects, a takedown clears what the site left in visitors' browsersOpenVibers · 23 Sept 2026 0ff29d5
D41 proof artifact: scripts/d41-proof.sh deploys, rolls back and redeploys one service through ovhost and proves from systemctl that every other unit kept its process (written and tested, not run on the host)OpenVibers · 23 Sept 2026 cd2fc63
Restore drills for Tools and Games: one unit of a multi-unit service, data-directory databases, bind mounts for checkout-relative files, and a check that the deployed checkout has the drill switchesOpenVibers · 23 Sept 2026 8575c91
Stage B launch readiness: staff takedowns, bounded uploads, no CA validation files, realip-only nginx headers, a launch that removes the pending vhost in the same changeOpenVibers · 23 Sept 2026 1e48cb2
CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 23 Sept 2026 4276812
Restore drills: openre passed (OPENRE_DRILL, first run)OpenVibers · 23 Sept 2026 82575b9
OpenRe on ovhost: workerUnits and a restore drill.OpenVibers · 23 Sept 2026 ed7de69
Scheduled, root-only and off-host backups: ovhost backup --all (every service with databases, failure-isolated, 7 daily + 4 weekly retention, JSON run summary), encrypted off-host copies to S3-compatible storage (Node crypto AES-256-GCM, @aws-sdk/client-s3, 30-day remote retention), restore-download, and a daily openvibe-backup.timerOpenVibers · 23 Sept 2026 34d706c
Pending-tenant vhost: *.openvibe.host answers 404 over the wildcard certificate until Stage B launches (it fell through to nginx's default server)OpenVibers · 23 Sept 2026 5d5036f
Register: C-73 step 1 done (Live f936ab3)OpenVibers · 23 Sept 2026 4eb0435
W22 docs: C-58 and C-59 removed, C-73 step 1 in part; Games and Chat readiness now check their stores; inventory polls Games /api/readyOpenVibers · 23 Sept 2026 cfd4401
ovhost release layout: current must resolve under releases/ and be owned by root or the checkout owner (OpenRe's deploy script installs releases as ubuntu, like every checkout on the host)OpenVibers · 23 Sept 2026 30f08d6
ovhost: release-layout services (root-owned releases/<id> behind current, installed by their own deploy script) are validated by their current release instead of as a git checkout and are never managed; OpenRe uses itOpenVibers · 23 Sept 2026 93f2de7
Inventory: Network, Media and Tools are checked on /api/ready (not health); AI and OpenRe get entries (backups; drills not yet, with the reason); Tools backs up its three jobs.db (Wave 22 storage-state findings)OpenVibers · 23 Sept 2026 f0dbd0c
Wave 22 operator docs: compatibility register, storage state, final cutover runbookOpenVibers · 23 Sept 2026 67db00a
nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose the address the service bans and rate-limits byOpenVibers · 23 Sept 2026 30592c0
Refuse FedCM ID assertions as user tokens; cap archive unpacking at HOST_MAX_UNPACKED_BYTESOpenVibers · 23 Sept 2026 3d7375b
Restore drills on the host: 18 services passed with ovhost drill (2026-09-23)OpenVibers · 23 Sept 2026 d96a09e
ovhost drill: restore drills (Wave 22)OpenVibers · 23 Sept 2026 80d5522
Restore drill log: community restored from ovhost backup and matched production (2026-09-23)OpenVibers · 23 Sept 2026 2586be6
openvibe-contracts v0.24.0 (host.* released, contracts check blocking); STATUS/README: ovhost is installed on the host (read-only use)OpenVibers · 23 Sept 2026 9cdccae
Stage B docs, deploy and CI: README Stage B section (model, uploads, serving, API, events, grants, operator steps incl. DNS and the wildcard certificate; Stage C not started), STATUS, systemd unit, CI syntax check of server/ and a non-blocking contract check until the host.* capabilities are releasedOpenVibers · 23 Sept 2026 a157b8f
ovhost nginx tenants: vhosts for the dashboard, *.openvibe.host and verified custom domainsOpenVibers · 23 Sept 2026 5512cf7
Stage B tenant static hosting: the Host API service on port 4910OpenVibers · 23 Sept 2026 cf7cfcc
CI: drop the stale placeholder noteOpenVibers · 23 Sept 2026 fdab675
openvibe-contracts v0.10.0 (host manifest published); contracts check is a hard CI gateOpenVibers · 23 Sept 2026 6df4b11

More commits