Gabriel Brown
dce00e45d1
Docs: Pin the verified Panama bootstrap
2026-08-27 10:14:55 -04:00
Gabriel Brown
0d1841cf86
Fix: Verify the initial Panama revision
2026-08-27 10:06:13 -04:00
Gabriel Brown
ba4e5e6677
Fix: Lock installer input state
2026-08-27 09:48:28 -04:00
Gabriel Brown
1ffd05f0e1
Fix: Re-run verified installer inputs
2026-08-27 09:34:20 -04:00
Gabriel Brown
92c60c3ecd
Fix: Close runtime provenance residuals
2026-08-27 09:22:17 -04:00
Gabriel Brown
31fc1d3eaa
Fix: Harden pinned runtime activation
2026-08-27 08:32:44 -04:00
Gabriel Brown
8264ca6320
Fix: Pin runtime and agent artifacts
2026-08-27 07:49:12 -04:00
Gabriel Brown
eab4280969
Fix: Parse complete Terra repository state
2026-08-27 07:25:25 -04:00
Gabriel Brown
1c3cd7ac72
Fix: Enforce effective repository trust preflight
2026-08-27 07:10:11 -04:00
Gabriel Brown
8652f92aae
Fix: Validate existing package repositories
2026-08-27 06:46:36 -04:00
Gabriel Brown
4abf3f8acd
Fix: Verify third-party package repositories
2026-08-27 06:27:35 -04:00
Gabriel Brown
3f8539176a
Test: Strengthen ambient GPG isolation contract
2026-08-27 06:10:32 -04:00
Gabriel Brown
18ecc2244f
Fix: Isolate installer GPG inspection
2026-08-27 06:05:42 -04:00
Gabriel Brown
94a4314730
Fix: Harden installer provenance boundary
2026-08-27 05:56:46 -04:00
Gabriel Brown
27acbe7a95
Test: Add installer provenance boundary
2026-08-27 05:43:26 -04:00
Gabriel Brown
fc8f226747
Fix: Complete SSH bootstrap hardening
2026-08-27 05:19:58 -04:00
Gabriel Brown
98e29eb8f3
Test: Strengthen SSH bootstrap documentation contract
2026-08-27 04:35:45 -04:00
Gabriel Brown
00e11e0b8d
Docs: Explain transactional SSH hardening
2026-08-27 04:25:05 -04:00
Gabriel Brown
ac25fd776c
Fix: Clean interrupted SSH candidates
2026-08-27 04:12:45 -04:00
Gabriel Brown
51e2c8418a
Fix: Complete SSH hardening recovery
2026-08-27 04:06:54 -04:00
Gabriel Brown
d267da58ad
Fix: Roll back failed SSH hardening
2026-08-27 03:44:57 -04:00
Gabriel Brown
20b41c3976
Fix: Gate SSH hardening on a verified key
2026-08-27 03:28:42 -04:00
Gabriel Brown
12b858371e
Fix: Close verification gate review findings
2026-08-27 00:21:45 -04:00
Gabriel Brown
e19fb00276
Test: Harden dock fixture cleanup
2026-08-26 23:22:26 -04:00
Gabriel Brown
37688f702a
Test: Isolate dock geometry fixtures
2026-08-26 23:12:14 -04:00
Gabriel Brown
71f4f0d24b
Test: Guard settings docs contract cleanup
2026-08-26 23:05:14 -04:00
Gabriel Brown
3839183401
Test: Isolate generated docs and settings fixtures
2026-08-26 22:59:28 -04:00
Gabriel Brown
68b6664111
Test: Propagate update fixture failures
2026-08-26 22:53:39 -04:00
Gabriel Brown
803362ebad
Test: Exercise updates through the real command
2026-08-26 22:46:46 -04:00
Gabriel Brown
6a7bdcb835
Test: Harden compose secret fixtures
2026-08-26 22:38:00 -04:00
Gabriel Brown
37fd5e890e
Test: Scan compose secrets by data shape
2026-08-26 22:31:22 -04:00
Gabriel Brown
a19c6dc3ef
Test: Make agent usage fixtures date independent
2026-08-26 22:26:19 -04:00
Gabriel Brown
6d71a77798
Test: Cover contract runner consent
2026-08-26 22:22:57 -04:00
Gabriel Brown
d8144a66c1
Fix: Make contract execution safe and diagnostic
2026-08-26 22:11:56 -04:00
Gabriel Brown
43d1e15858
Test: Harden manifest validation
2026-08-26 22:00:52 -04:00
Gabriel Brown
1192ad64dc
Test: Classify every contract capability
2026-08-26 21:52:16 -04:00
Gabriel Brown
f33da41cc6
Panama learns what a server is: from a root login to running containers
...
A machine's role is now the interview's first question and the one answer
Panama records. Servers get the same shell minus the screen: core packages,
nvm, Bun, Claude Code and Codex (desktops get Codex too), linger, rootless
ports from 80, firewalld, the nginx-bridge network, and a nightly image
updater that replaced watchtower for cause.
server/containers/ carries junior's 23 compose services -- secrets moved to
per-machine .env files that never enter this public repo, every transformed
compose proven to render byte-identical to what is live. 'panama server'
enables, disables and relinks them; nothing here restarts a running service.
'boot --server' walks a fresh VPS from its root login to a normal install.
Five new contracts pin the secrets rule, the catalog's shape, panama-server's
behavior, the role plumbing, and the dotfile classification.
Claude-Session: https://claude.ai/code/session_01NU5JGiN3JfzqrLQB6wmJ1E
2026-08-25 23:11:49 -04:00
Gabriel Brown
cc7d91d09c
No error is a dead end: crash, click, and your agent is already looking
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 12:50:09 -04:00
Gabriel Brown
045a774847
The machine now carries its own manual for AI hands
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 10:09:38 -04:00
Gabriel Brown
beed44dd87
panama update: one command, no questions, and no gap it cannot see
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 07:22:12 -04:00
Gabriel Brown
8105849151
The last two stale needles the great respelling left behind
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 02:31:59 -04:00
Gabriel Brown
bd2fd12de2
Coherence: one component per idea, one spelling per word, one truth per claim
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 02:21:45 -04:00
Gabriel Brown
06c53d6c21
Shortcuts you invent, rules you write, gestures you own - all still just data
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 01:51:59 -04:00
Gabriel Brown
88371d19f0
The safety layer: two presses for anything you cannot take back
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 00:39:07 -04:00
Gabriel Brown
8b1205e4b8
Tier 0: render what the services already decided, honestly
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-25 00:24:30 -04:00
Gabriel Brown
be0e55214b
Finish the wonderland: System told truthfully, in eight tabs instead of ten
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-24 23:31:52 -04:00
Gabriel Brown
9ffaf45a4d
Make every settings row reachable, and every accessibility switch honest
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-24 21:03:36 -04:00
Gabriel Brown
e1ff25fc66
Draw idle as one timeline, and let the power button answer to its owner
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-24 20:33:44 -04:00
Gabriel Brown
6f0ce639d9
Show every answer the portal remembers, and give SSH keys their missing half
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-24 19:26:56 -04:00
Gabriel Brown
4ec8bd94d9
Give identity its due: native enrollment, honest deletion, and sign-in that stays home
...
Claude-Session: https://claude.ai/code/session_01Ms2FbjQy31TVf3CEvQhGM8
2026-08-24 18:55:38 -04:00
Gabriel Brown