Commit Graph

837 Commits

Author SHA1 Message Date
Jakub Zych
6ca9e1706d docs(19.7-06): complete lane A gap-closure plan in pier 2026-10-23 16:10:52 +02:00
Jakub Zych
d18d8f0dc2 docs(19.7): ban and password reset revoke OIDC grants as well as MCP grants (user decision) 2026-10-23 15:46:44 +02:00
Jakub Zych
d763e92650 docs(19.7): gap-closure plans 06-09 for the review findings and the sm-servers-app escalations 2026-10-23 15:44:15 +02:00
Jakub Zych
2527498d03 docs(19.7): gap-closure plan split and release order 2026-10-23 15:03:52 +02:00
Jakub Zych
cee58c0f65 docs(19.7): gap-closure inputs: review findings and two sm-servers-app escalations 2026-10-23 15:02:44 +02:00
Jakub Zych
fef1cbbbbd docs(19.7): add code review report 2026-10-23 14:54:54 +02:00
Jakub Zych
d9d2acae88 docs(19.7-05): plan 05 summary; phase gate green, security review done, plugin test commits local 2026-10-23 14:41:38 +02:00
Jakub Zych
4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed
- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes
2026-10-23 14:29:56 +02:00
Jakub Zych
d621ef1b41 docs(19.7-05): validation map filled, Wave 0 complete, Nyquist compliant 2026-10-23 14:24:13 +02:00
Jakub Zych
81266de77d docs(19.7-04): plan 04 summary; oauthserver v0.1.2 and Journal v0.2.3 released, pinned in the demo
- SUMMARY with every deviation from the checkpoint report
- deferred items: sm-demo-app push and deploy wait for the user, release
  builds on summercms v0.4.4 lack the cabana subject-event fix, Redis for a
  second instance, the real-client check, the retracted mimetype
2026-10-23 13:17:36 +02:00
Jakub Zych
9550fe0a9f docs(19.7-04): deferred items from the oauthserver, Journal and demo MCP wiring 2026-10-23 12:56:08 +02:00
Jakub Zych
7c43820afe docs(19.7): cabana subject-event bug resolved 2026-10-23 12:44:09 +02:00
Jakub Zych
607658599f docs(19.7-03): sm-user-plugin v0.1.10 released and pinned in five apps; cabana subject-event bug deferred
Plan 03 summary: verified account link, Administrators-screen link actions, plugin frontend permissions, user MCP guard and user_me in sm-user-plugin v0.1.10 (requires SummerCMS v0.4.4). deferred-items: cabana fires pact.MCPSubjectChanged as a value inside the transaction while pier listens for a pointer; fix before v0.5.0.
2026-10-23 12:30:15 +02:00
Jakub Zych
eadd58414d docs(19.7-02): close plan without a release 2026-10-23 00:23:08 +02:00
Jakub Zych
1aff96f58a docs(19.7-02): record deferred items from the pier session router 2026-10-22 18:36:23 +02:00
Jakub Zych
3746675c72 docs(19.7-01): complete framework seams plan 2026-10-22 16:45:12 +02:00
Jakub Zych
b28800ad39 docs(phase-19.6.1): add/update security threat verification 2026-10-22 15:27:39 +02:00
Jakub Zych
0a5945d681 test(19.6.1): mark verification passed after UAT retest 2026-10-22 15:24:11 +02:00
Jakub Zych
19c6a65575 test(19.6.1): pass UAT test 2 after relation-label remount fix 2026-10-22 15:24:01 +02:00
Jakub Zych
49ffb395c0 docs(19.7): add pattern map, mark D-36 informational, drop session path from plan 02 2026-10-22 14:59:54 +02:00
Jakub Zych
2f496f6200 test(19.6.1): re-verify after relation-label gap closure 2026-10-22 14:59:34 +02:00
Jakub Zych
43d0f4622c docs(19.7): revise plans after plan check 2026-10-22 14:57:52 +02:00
Jakub Zych
587f9ddf2f docs(19.6.1): review persist relation labels
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-22 14:51:39 +02:00
Jakub Zych
007c68bab2 docs(19.6.1-05): complete persist relation labels plan 2026-10-22 14:43:34 +02:00
Jakub Zych
d47d6182f0 docs(19.7): create phase plans (5 plans: seams, pier, user plugin, oauthserver+journal+demo, tests and security review) 2026-10-22 14:41:30 +02:00
Jakub Zych
ba0501c274 test(19.6.1): complete UAT - 25 passed, 1 issue 2026-10-22 14:30:13 +02:00
Jakub Zych
a97743a39f test(19.6.1): persist human verification items as UAT 2026-10-22 13:48:03 +02:00
Jakub Zych
d7dc2a385a docs(19.6.1): record gap-closure code review 2026-10-22 13:44:02 +02:00
Jakub Zych
6bd2506db6 docs(19.6.1-04): complete gap-closure plan 2026-10-22 13:37:26 +02:00
Jakub Zych
422bd1e01f test(19.6.1): complete UAT - 24 passed, 1 issue 2026-10-22 13:17:34 +02:00
Jakub Zych
eadc7810be docs(19.6.1): create gap-closure plan 2026-10-22 13:05:53 +02:00
Jakub Zych
cfebbacc3d docs(19.6.1): verification report, gaps found (22/25) 2026-10-22 12:45:01 +02:00
Jakub Zych
d6a6e7ac60 docs(19.6.1): record code review disposition 2026-10-22 12:36:13 +02:00
Jakub Zych
d5da300e24 docs(19.6.1): add code review report 2026-10-22 12:36:02 +02:00
Jakub Zych
1a68cc5280 docs(19.6.1-03): complete privilege rule tests and phase gate plan 2026-10-22 12:26:00 +02:00
Jakub Zych
8f3d625943 docs(19.6.1-03): validation map and deferred items
- 19.6.1-VALIDATION.md: per-task map green, Wave 0 ticked with the files
  as built, wave_0_complete true
- deferred-items.md: lagoon's model validator skips string min/max;
  granted does not expand a held leading wildcard
2026-10-22 12:24:35 +02:00
Jakub Zych
47db9666dd docs(19.6.1-02): complete SPA trigger and record permission locks plan 2026-10-22 11:45:07 +02:00
Jakub Zych
3a772fabb1 docs(19.6.1-01): complete backend administrators server-side plan 2026-10-22 11:19:46 +02:00
Jakub Zych
6267edb7c5 test(19.8): persist human verification items as UAT 2026-10-22 04:41:10 +02:00
Jakub Zych
eaeb2347c0 docs(19.8): re-verification, gaps closed (57/57) 2026-10-22 04:41:10 +02:00
Jakub Zych
b1fba7e24c docs(19.8): WR-12 disposition names the Status rework (139f5e3) 2026-10-22 04:30:41 +02:00
Jakub Zych
a48afbd11e docs(19.8): re-review fixes recorded, IN-10..IN-13 and the exit-130 suggestion deferred 2026-10-22 04:10:42 +02:00
Jakub Zych
36e2240891 docs(19.8): phase verification, three gaps from the re-review 2026-10-22 03:34:48 +02:00
Jakub Zych
9563bc836a docs(19.8): record code review disposition 2026-10-22 03:19:33 +02:00
Jakub Zych
28ad561481 docs(19.8): re-review of the code review fixes 2026-10-22 03:19:15 +02:00
Jakub Zych
349e2f810b docs(19.8-06): v0.4.2 released, demo roadmap synced, phase gate green 2026-10-22 03:07:14 +02:00
Jakub Zych
ead8e42211 docs(19.8-06): record the go-ahead: release v0.4.2 2026-10-22 02:53:07 +02:00
Jakub Zych
cf061857a9 docs(19.8-06): release proposal for v0.4.2, awaiting go-ahead 2026-10-22 02:51:35 +02:00
Jakub Zych
89c8325ac4 docs(19.8-05): complete review fixes plan 2026-10-22 02:45:15 +02:00
Jakub Zych
d311d029c3 docs(19.8): review fixes recorded, info findings captured as a todo
- CR-01..CR-03 and WR-01..WR-08 fixed with their commits (19.8-05)
- IN-01..IN-09 deferred to one pending todo (minor, framework)
2026-10-22 02:43:48 +02:00