Commits
-
Pins: openvibe-shared 1.16.1 -> 1.17.1 (release notifications)OpenVibers · 26 Sept 2026
6d81aa8 -
Pins: openvibe-shared 1.16.0 -> 1.16.1 (the OV mark stops animating when idle, hidden or off-screen)OpenVibers · 26 Sept 2026
f798f44 -
Pins: openvibe-shared 1.13.0 -> 1.16.0OpenVibers · 26 Sept 2026
c82abfa -
Pins: openvibe-contracts 0.44.0 → 0.49.0, openvibe-shared 1.12.0 → 1.13.0, openvibe-sdk 0.9.1 → 0.11.0OpenVibers · 25 Sept 2026
9bb7f93 -
Pins: openvibe-contracts 0.42.0 → 0.44.0 (Contracts 0.43.0 and 0.44.0 were released after the previous pin commit, leaving 0.42.0 two minors behind the pin-drift limit)OpenVibers · 25 Sept 2026
8996959 -
Pins: openvibe-contracts 0.38.0 → 0.42.0, openvibe-sdk 0.5.0 → 0.9.1; CI runs the pin-drift check (shared test and security workflows at 423fe51)OpenVibers · 25 Sept 2026
c2dc255 -
Staff powers from the contracts staff map (WS-D, ADR-022; Contracts 0.38.0): editors are staff.editorial.manage (admin, as before) or TRADE_EDITORS (the product's own role), not a role comparison. test/staff-map.test.js fails on raw role checksOpenVibers · 24 Sept 2026
d825075 -
The OpenVibe Frame from this site's own pinned copy: /shared/* is served by openvibe-shared/serve (1.12.0) and every page references it by content hash (/shared/<file>?v=<hash>), so this site's pin decides what its pages run and its navbar and footer keep working while openvibe.network is down; openvibe-publishing 0.4.0 (openvibe-shared as a peer: one copy, no lockstep releases)OpenVibers · 24 Sept 2026
c40092a -
The shared update system and one account UI, on the OpenVibe Frame (openvibe-shared 1.11.0, openvibe/frame): the home shows what shipped, /updates is the shared log and the footer links it; the shared navbar handles sign in and out (logoutUrl ends this site's session) and carries this site's account links in its menu, while the page's own account bar is only for no-JS visitorsOpenVibers · 24 Sept 2026
62e21fc -
CI calls the shared test workflow (Track Q): OpenVibe.Shared .github/workflows/test.yml@f5e7e73 (install, node --check over server/ and scripts/, npm test, openvibe-contracts-check) instead of a copy of those stepsOpenVibers · 24 Sept 2026
ff9afd0 -
openvibe-publishing v0.2.2 (shares the openvibe-shared v1.5.1 copy instead of installing v1.0.0 alongside)OpenVibers · 24 Sept 2026
7f418d2 -
SECURITY.md: how to report a vulnerability ([email protected], 7-day reply, scope, supported versions)OpenVibers · 24 Sept 2026
46f1eeb -
openvibe-shared v1.5.1, openvibe-contracts v0.33.0OpenVibers · 23 Sept 2026
62ea99c -
openvibe-shared v1.5.0 (Track R release manifest), openvibe-contracts v0.32.0, openvibe-sdk v0.5.0OpenVibers · 23 Sept 2026
b0012e9 -
CI: run the shared security workflow (gitleaks secret scan + dependency audit, Track Q)OpenVibers · 23 Sept 2026
ddbc60c -
Docs: STATUS.json and README match production (2026-09-23)OpenVibers · 23 Sept 2026
f314778 -
Events webhook requires signature v2 (replay window); openvibe-sdk v0.4.0OpenVibers · 23 Sept 2026
9a55644 -
App and module tokens act only for their on_behalf_of person; sandbox tokens refusedOpenVibers · 23 Sept 2026
0eb925f -
nginx: client address headers only from $remote_addr (realip). X-Forwarded-For was appended to and CF-Connecting-IP passed through from the client, so a request reaching the origin without Cloudflare (DNS-only host or the bare IP) chose the address the service bans and rate-limits byOpenVibers · 23 Sept 2026
3a25d07 -
openvibe-publishing v0.2.1 (ReDoS fixes in ssr markdown)OpenVibers · 23 Sept 2026
5cac5a8 -
openvibe-contracts v0.22.0 (trade manifest and capabilities released); contracts check is blockingOpenVibers · 23 Sept 2026
5267927 -
README (purpose, owns, does not own, depends on, acceptance, launch rule, threat review), STATUS alpha W19, .env.example, deploy (systemd unit, nginx vhost on 4860), CI on Node 22.22.1 (contracts check continue-on-error until release), capability and service manifest proposals, the marketplace open question (ADR-025)OpenVibers · 23 Sept 2026
2a9f446 -
OpenVibe.Trade service (Wave 19): informational only per ADR-025 — instruments and aliases with deterministic resolution, immutable timestamped observations (no observation, no number), per-source freshness with stale-since, SEC filings from OpenVibe.Sources, private watchlists, alert rules idempotent per triggering observation or document, reviewed context (AI drafts need a person), SSR pages, feeds, sitemaps, API v1, events through the SDK outbox; route-inventory test for ADR-025OpenVibers · 23 Sept 2026
4d40b52 -
Charter: OpenVibe.Trade as defined in the OpenVibe realignment plan (placeholder, no code yet)OpenVibers · 21 Sept 2026
998e3c8