Commit Graph

Select branches

Hide Pull Requests

backup/dbc-kms-main

backup/local-kms-fix-kms-v1-only

chore/deterministic-universe

feat/v1-sdk-secrets-plane

fix/iam-token-path-v1iam

fix/keys-gosum-retag

fix/keys-retag-hash

fix/kms-v1-only

fix/require-env-on-writes-clean

fix/validate-kid-first-no-spam

main

preserve/spark-local

ship/kms-oidc-derivation

#1

#10

#11

#12

#13

#2

#3

#4

#5

#6

#7

#8

#9

v1.11.0

v1.11.10

v1.11.11

v1.11.4

v1.11.5

v1.11.6

v1.11.7

v1.11.8

v1.11.9

v1.12.0

v1.12.1

v1.12.10

v1.12.3

v1.12.4

v1.12.5

v1.12.6

v1.12.7

v1.12.8

v1.12.9

v1.9.10

v1.9.13

v1.9.14

v1.9.15

Mono Color

• 7916df8c15 chore: sync working tree main zeekay 2026-07-26 10:13:52 -07:00
• fce2fe8f73 kms: root-level secrets were unfetchable — GET/DELETE now split path optionally v1.12.10 zeekayandHanzo Dev 2026-07-26 08:39:09 -07:00
• 525646f150 ci: restore the kms build workflow v1.12.9 zeekayandHanzo Dev 2026-07-26 01:14:27 -07:00
• cea13fa073 docs: record the v1.12.9 HTTP list route zeekay 2026-07-26 01:04:49 -07:00
• c199becfe4 kms: HTTP secret list — surface parity with the ZAP wire zeekayandHanzo Dev 2026-07-26 01:04:30 -07:00
• baecefad0d converge: delete the legacy luxfi/kms-operator, and the Infisical NOTICE zeekayandHanzo Dev 2026-07-25 17:51:02 -07:00
• 299b2307bf build via platform.hanzo.ai, not GitHub Actions zeekayandHanzo Dev 2026-07-25 17:45:07 -07:00
• e5efff89ca ci: drop build-server-self.yml — it builds a deleted Dockerfile zeekayandHanzo Dev 2026-07-25 17:44:14 -07:00
• 1c8b627a25 build: resync vendor/ so the kms-operator image can build again v1.12.8 zeekayandHanzo Dev 2026-07-25 17:39:26 -07:00
• d333c66bae kms: JSON only — HTML is not reachable on this listener zeekayandHanzo Dev 2026-07-25 17:30:37 -07:00
• a6a933dd92 kms is the Go service on /v1/kms — delete the Infisical console zeekayandHanzo Dev 2026-07-25 17:21:38 -07:00
• 56debeba46 keys: verify the threshold a generated key actually has, and fail closed v1.12.7 zeekayandHanzo Dev 2026-07-25 16:42:10 -07:00
• 0c3eca807e fix(kms): self-heal go.sum re-tag in Dockerfile.server (match main Dockerfile) v1.12.6 zeekayandHanzo Dev 2026-07-21 15:38:04 -07:00
• 6609a93178 fix(docker): regenerate go.sum after COPY so force-moved luxfi tags don't break the build v1.12.5 zeekayandHanzo Dev 2026-07-21 10:24:26 -07:00
• 7116f60fc6 fix(kms): delete unwrapped /v1/kms/secrets/{name} env-leak route (HIGH/CRITICAL) zeekayandHanzo Dev 2026-07-21 09:30:20 -07:00
• 41d2b14198 fix(kms): propagate recovery id v and canonical signature on /sign zeekayandHanzo Dev 2026-07-21 08:32:55 -07:00
• 3a37dde138 fix(kms): fail-closed app-layer auth on validator-key routes (sign/keygen/rotate) zeekayandHanzo Dev 2026-07-20 15:20:32 -07:00
• ec832e1465 chore(deps): bump geth v1.20.1 + luxfi deps — stack unification zeekay 2026-07-15 11:12:35 -07:00
• 947419bf28 chore: complete go.sum module hashes Hanzo Dev 2026-07-19 19:51:55 -07:00
• e102fa55fc chore(deps): bump geth v1.20.1 + luxfi deps — stack unification v1.12.4 zeekay 2026-07-15 11:12:35 -07:00
• 051a078025 docs(LLM): KMS<->MPC wire fix (v1.12.3) proven + authorizer-coupling deploy caveat zeekayandHanzo Dev 2026-07-14 18:04:59 -07:00
• 7a677ae571 fix(docker): GOSUMDB=off + in-build go.sum regen for re-published luxfi modules v1.12.3 zeekayandHanzo Dev 2026-07-14 16:37:34 -07:00
• e361c1258d fix(deps): post-re-tag coherent luxfi set (geth v1.17.12), re-vendor zeekayandHanzo Dev 2026-07-14 16:26:04 -07:00
• 7377ad63d2 fix(mpc): realign KMS↔MPC ZAP signing wire to mpcd contract; kill false-green zeekayandHanzo Dev 2026-07-14 14:15:05 -07:00
• 415097f535 fix(kms): accept multiple white-label issuers (lux.id + hanzo.id) v1.11.10 zeekayandHanzo Dev 2026-07-14 10:15:00 -07:00
• f4a941391f fix(kms): accept multiple white-label issuers (lux.id + hanzo.id) v1.11.11 zeekayandHanzo Dev 2026-07-14 10:09:50 -07:00
• 8d066a99ae ci: route linux/amd64 jobs to lux-build-amd64 ARC scale set hanzo-dev 2026-07-10 21:54:20 -07:00
• 2707692bc8 fix(kms): require explicit env on secret writes (no silent default) (#13) 3 people 2026-07-08 07:21:43 -07:00
• 7f1a22ac93 fix(kms): require explicit env on secret writes (no silent default) fix/require-env-on-writes-clean hanzo-dev 2026-07-08 07:17:40 -07:00
• 61ec351a1a fix(kms): require explicit env on secret writes (no silent default) preserve/spark-local hanzo-dev 2026-07-08 07:17:40 -07:00
• b54c590a1e fix(deps): luxfi/keys@v1.1.0 go.sum = current proxy/sumdb hash (re-tag) (#12) v1.11.9 3 people 2026-07-04 11:51:03 -07:00
• ea6d043405 fix(deps): luxfi/keys@v1.1.0 go.sum = current proxy/sumdb hash (re-tag) (#12) 3 people 2026-07-04 11:51:03 -07:00
• 23a3780d06 fix(deps): luxfi/keys@v1.1.0 go.sum = current proxy/sumdb hash (re-tag) fix/keys-retag-hash hanzo-dev 2026-07-04 11:50:55 -07:00
• 141642e54b fix(auth): kid-first JWT verification, drop per-attempt debug logging (#11) 3 people 2026-07-04 11:50:16 -07:00
• 9b0d48d836 fix(auth): kid-first JWT verification, drop per-attempt debug logging (#11) 3 people 2026-07-04 11:50:16 -07:00
• a5076ef112 fix(auth): kid-first JWT verification, drop per-attempt debug logging (#10) 3 people 2026-07-04 11:28:28 -07:00
• ec13c353fb fix(auth): kid-first JWT verification, drop per-attempt debug logging (#10) 3 people 2026-07-04 11:28:28 -07:00
• b0ab0ce92f fix(auth): kid-first JWT verification, drop per-attempt debug logging fix/validate-kid-first-no-spam fix/keys-gosum-retag hanzo-dev 2026-07-04 11:28:21 -07:00
• ca9332b9f0 feat(kms): consume per-authority path scopes in consensus snapshot feat/v1-sdk-secrets-plane zeekay 2026-07-03 11:42:39 -07:00
• d5575761cd feat: native /v1/sdk enveloped secrets + threshold-sign plane (red-approved) (#9) 3 people 2026-07-03 10:37:07 -07:00
• 343872f5da feat: native /v1/sdk enveloped secrets + threshold-sign plane (red-approved) (#9) 3 people 2026-07-03 10:37:07 -07:00
• 4ab2015197 fix(kms): close RED CRITICAL/HIGH/MEDIUM/LOW on the /v1/sdk secrets plane zeekayandHanzo Dev 2026-07-03 10:21:56 -07:00
• e3ddfdf3ac test(zapserver): red-team proofs — identity impersonation + future-dated replay zeekayandHanzo Dev 2026-07-03 09:54:08 -07:00
• 44e392e273 docs(llm): document /v1/sdk enveloped secrets+sign surface zeekayandHanzo Dev 2026-07-03 09:39:05 -07:00
• 17402c5884 feat(kms): mount /v1/sdk enveloped secrets+sign surface in kmsd zeekayandHanzo Dev 2026-07-03 09:36:30 -07:00
• d0c47bcb51 fix(gomod): realign age@v1.5.0 + keys@v1.1.0 go.sum to re-tagged hashes zeekayandHanzo Dev 2026-07-03 09:36:22 -07:00
• b86f20a25a feat(sdksign): keys.Manager -> zapserver.SignBackend adapter zeekayandHanzo Dev 2026-07-03 09:32:03 -07:00
• bb3c4287ba feat(zapserver): expose enveloped secret+sign plane over HTTP /v1/sdk zeekayandHanzo Dev 2026-07-03 09:28:43 -07:00
• 46757d7893 test(zapserver): fix e2e seed/assert mismatch (secret-value vs sk_live_real) zeekayandHanzo Dev 2026-07-03 09:19:39 -07:00
• e1ca641b19 docs(LLM): finished web UI reality + canonical image (#7) 3 people 2026-07-01 10:35:21 -07:00
• f9d4832cdf docs(LLM): finished web UI reality + canonical image (#7) 3 people 2026-07-01 10:35:21 -07:00
• c6fa81a432 feat(mnemonic): canonical BIP-39 bootstrap-mnemonic loader over native ZAP zeekayandClaude Opus 4.8 2026-06-30 16:00:59 -07:00
• 3b9334e26f feat(mnemonic): canonical BIP-39 bootstrap-mnemonic loader over native ZAP v1.12.1 zeekayandHanzo Dev 2026-06-30 16:00:59 -07:00
• 983cced0f4 feat(mnemonic): add pkg/mnemonic.Load — cycle-free KMS bootstrap mnemonic loader zeekayandClaude Opus 4.8 2026-06-30 15:56:29 -07:00
• 95cdad9ee5 feat(mnemonic): add pkg/mnemonic.Load — cycle-free KMS bootstrap mnemonic loader v1.12.0 zeekayandHanzo Dev 2026-06-30 15:56:29 -07:00
• 6dabf30f38 docs(brand): add hero banner z 2026-06-28 20:36:07 -07:00
• 888d5f5a78 docs(brand): add hero banner z 2026-06-28 20:36:07 -07:00
• e7995cac26 chore(brand): dynamic hero banner z 2026-06-28 20:36:06 -07:00
• 91a16411a9 chore(brand): dynamic hero banner z 2026-06-28 20:36:06 -07:00
• 73e179d713 build: drop GOPRIVATE from Dockerfiles — use immutable public proxy+sumdb hanzo-dev 2026-06-28 14:15:10 -07:00
• a20bc707f1 build: drop GOPRIVATE from Dockerfiles — use immutable public proxy+sumdb v1.11.8 hanzo-dev 2026-06-28 14:15:10 -07:00
• 106987aefd fix(deps): sync go.sum to canonical public sumdb hashes (no GOPRIVATE/sum hacks) hanzo-dev 2026-06-28 14:08:08 -07:00
• 5ac2347a04 fix(deps): sync go.sum to canonical public sumdb hashes (no GOPRIVATE/sum hacks) hanzo-dev 2026-06-28 14:08:08 -07:00
• 73cf450890 build: fix keys@v1.1.0 go.sum to authoritative direct hash (unblocks KMS build) (#8) 3 people 2026-06-28 13:48:55 -07:00
• 1cffefaa57 build: fix keys@v1.1.0 go.sum to authoritative direct hash (unblocks KMS build) (#8) 3 people 2026-06-28 13:48:55 -07:00
• 935bfb88b0 build: fix keys@v1.1.0 go.sum to authoritative direct hash (unblocks KMS build) ship/kms-oidc-derivation hanzo-dev 2026-06-28 13:45:32 -07:00
• 13620fa22b feat(oidc): derive KMS SSO client id+secret from brand (zero env, matches IAM) hanzo-dev 2026-06-28 13:35:04 -07:00
• 00c5b6b6c6 feat(oidc): derive KMS SSO client id+secret from brand (zero env, matches IAM) hanzo-dev 2026-06-28 13:35:04 -07:00
• 8cf94900b1 feat(oidc): derive KMS SSO client id+secret from brand (zero env, matches IAM) chore/deterministic-universe hanzo-dev 2026-06-28 13:35:04 -07:00
• 5b7dafb178 docs(LLM): state finished web UI reality + canonical image hanzo-dev 2026-06-28 06:20:17 -07:00
• 745a1f96a4 build: correct go.sum to authoritative direct-from-GitHub hashes backup/local-kms-fix-kms-v1-only hanzo-dev 2026-06-28 01:13:06 -07:00
• b270acfda4 build: correct go.sum to authoritative direct-from-GitHub hashes fix/kms-v1-only hanzo-dev 2026-06-28 01:13:06 -07:00
• 4eb1123e63 kms: finish the web-UI API surface — 16 swarm-built areas on ZapDB + e2e hanzo-dev 2026-06-28 01:05:47 -07:00
• 0a67ea90e5 kms: finish the web-UI API surface — 16 swarm-built areas on ZapDB + e2e hanzo-dev 2026-06-28 01:05:47 -07:00
• 47c9cdb93f kms: Playwright e2e harness for the web UI hanzo-dev 2026-06-28 00:42:10 -07:00
• a4a177c504 kms: Playwright e2e harness for the web UI hanzo-dev 2026-06-28 00:42:10 -07:00
• 222224941a kms: web-UI folders + secrets CRUD (Tier 3) — the secrets-manager core hanzo-dev 2026-06-28 00:24:28 -07:00
• 810ae2eb7b kms: web-UI folders + secrets CRUD (Tier 3) — the secrets-manager core hanzo-dev 2026-06-28 00:24:28 -07:00
• 4cbb13a8ef kms: web-UI projects + environments (Tier 2) hanzo-dev 2026-06-28 00:18:33 -07:00
• 6903511951 kms: web-UI projects + environments (Tier 2) hanzo-dev 2026-06-28 00:18:33 -07:00
• 27e27c9848 kms: web-UI core API — bootstrap + first-admin signup + login (Tier 0+1) hanzo-dev 2026-06-28 00:15:47 -07:00
• f3abc55420 kms: web-UI core API — bootstrap + first-admin signup + login (Tier 0+1) hanzo-dev 2026-06-28 00:15:47 -07:00
• 6bafbafafc build: fix go.sum re-tag drift (age@v1.5.0, keys@v1.1.0) + document finish-lux-kms plan hanzo-dev 2026-06-28 00:08:40 -07:00
• 4d10bb0d3e build: fix go.sum re-tag drift (age@v1.5.0, keys@v1.1.0) + document finish-lux-kms plan hanzo-dev 2026-06-28 00:08:40 -07:00
• 9f696f2f28 kms-ui: /v1-only API — drop the /api/ prefix from all KMS call-sites hanzo-dev 2026-06-27 23:42:19 -07:00
• 27dfa5ad7b kms-ui: /v1-only API — drop the /api/ prefix from all KMS call-sites hanzo-dev 2026-06-27 23:42:19 -07:00
• b7b8f5b892 remove Stripe from CSP + de-brand test fixtures (Stripe account disabled) zeekay 2026-06-24 12:36:52 -07:00
• 50ad9fbd51 remove Stripe from CSP + de-brand test fixtures (Stripe account disabled) v1.11.7 zeekay 2026-06-24 12:36:52 -07:00
• d72d99d444 rebrand: neutralize legacy upstream brand across UI, backend, docs; add NOTICE Hanzo 2026-06-24 11:19:41 -07:00
• 6dd26decd0 rebrand: neutralize legacy upstream brand across UI, backend, docs; add NOTICE Hanzo 2026-06-24 11:19:41 -07:00
• 6f34be8aa8 docs(kms): record go.sum re-tag fix + keys↔kms phantom-cycle analysis in LLM.md zeekay 2026-06-24 10:32:58 -07:00
• 944e8a3462 docs(kms): record go.sum re-tag fix + keys↔kms phantom-cycle analysis in LLM.md zeekay 2026-06-24 10:32:58 -07:00
• 2eab116901 fix(kms): re-tag go.sum for luxfi/age@v1.5.0 (second re-tagged dep) zeekay 2026-06-24 10:31:23 -07:00
• 2e949dfbf3 fix(kms): re-tag go.sum for luxfi/age@v1.5.0 (second re-tagged dep) v1.9.15 zeekay 2026-06-24 10:31:23 -07:00
• 68cd7d8f8a fix(kms): re-tag go.sum for keys@v1.1.0 + org sub-scope auth (lux→lux-infra) zeekay 2026-06-24 10:14:53 -07:00
• 1889442402 fix(kms): re-tag go.sum for keys@v1.1.0 + org sub-scope auth (lux→lux-infra) v1.9.14 zeekay 2026-06-24 10:14:53 -07:00
• 7f69f926f3 ci(kms): build-lux-kms runs-on lux-build (ARC scale-set label) z 2026-06-24 09:40:47 -07:00
• 7b37424326 ci(kms): build-lux-kms runs-on lux-build (ARC scale-set label) v1.9.10 z 2026-06-24 09:40:47 -07:00
• 10bd7f8aca fix(kms): post client_credentials/auth_code to /v1/iam/oauth/token zandzeekay 2026-06-24 09:34:56 -07:00
• 61770f655f fix(kms): post client_credentials/auth_code to /v1/iam/oauth/token zandzeekay 2026-06-24 09:34:56 -07:00