-
sando: reconcile deploys against tier_state on startup
-
sando: adopt lint block, fix clippy, fmt
-
sando: remove the Prometheus exporter instead of deciding its auth posture
-
Format the tree with rustfmt and add the lint + supply-chain gates
-
gates: own the scratch cluster's privileges in code
-
sando: harden self-update against self-bricking
-
sando: restart reconcile + real metrics + split event bus (Perf A+, ultra-fuzz Run 2 deep Phase 4)
-
sando: seal self-update provenance + bearer-gate reads (Security A+, ultra-fuzz Run 2 deep Phase 1)
-
sando: close self-update/rebuild restart race; test CF2 startup guard (Run 2)
-
sando: refuse to build on a non-build host (ultra-fuzz structural, never build on prod)
-
sando: clear clippy lints from toolchain drift (rust 1.95)
-
sando+bento: remediate ultra-fuzz Run 1 (CF1-5, serious, minors)
-
ops-exec: trusted executor (E1+E2), Sando refactor, thin macOS driver
-
sando: typed gate outcomes and observability scaffolding
-
sando: WIP — backup automation, events streaming, observability fixes
-
launch-eve audit pass: Ultra Fuzz Runs #8-9 + cross-cutting sweeps
-
sando: MVP — daemon, gates, deploy, TUI
-
sando: scaffold deploy controller (daemon + TUI)