atlas
34bde7a5af
nix: allSwarmServices turns on the review classifier ...
deploy.review-classifier.enable now defaults to allSwarmServices, as the
other shared services do, but only where the host has the classifier's
store identity (deploy.bao.reviewClassifierClient{Cert,Key}File). The
classifier module asserts that pair; glue-bao-tls.nix mints it only on the
host that runs the store, so a services host with the store placed
elsewhere would otherwise fail eval. An explicit value still wins.
The operator still writes the Anthropic key by hand; until then each run
fails with "no API key…" while the service runs.
2026-10-12 13:11:21 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: accept the agent's live bao pair as a store path
2026-10-11 10:00:43 +02:00
agents: hand over the kept drop-in's cap, warn at boot without one
2026-10-12 10:59:12 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
matrix: drop the per-hive appservice and its unused token
2026-10-05 07:48:17 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
nix: run the review classifier in a container of its own when a host enables it
2026-10-12 13:11:21 +02:00
nix: the hive's leaf does not read every secret in the store
2026-10-12 01:37:46 +02:00
nix: finish the current-behaviour comment sweep in touched files
2026-10-05 09:58:57 +02:00
nix: hand the review classifier its store leaf as an nspawn credential
2026-10-12 13:11:21 +02:00
forge: fetch the OIDC client secret from bao instead of a host-side copy
2026-10-10 14:07:31 +02:00
agents: remove send(operator) and the operator inbox; alert on turn failures
2026-10-12 08:50:06 +02:00
module-eval/hive-otel: pin the fetch reviving a start-limited collector
2026-10-10 01:22:32 +02:00
hive-tls: the root fetch presents the hive identity, as on main
2026-10-06 14:54:07 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
hive telemetry collector: fetch its OIDC secret from the store under the hive's own leaf
2026-10-10 01:10:31 +02:00
module-eval/nats-tls: evaluate the no-URL leaf fixture with hive-c0re on
2026-10-10 01:05:33 +02:00
nix: run the review classifier in a container of its own when a host enables it
2026-10-12 13:11:21 +02:00
nix: follow-ups from the service/deploy split
2026-10-05 19:12:46 +02:00
hive-tls: a gateway host without the services-issuer pair evaluates and goes red at runtime
2026-10-06 14:54:07 +02:00
nix: allSwarmServices turns on the review classifier
2026-10-12 13:11:21 +02:00
34bde7a5af