feat: add default-off Kubernetes cluster operator - #115

Merged

iarbpairs merged 105 commits into

LycaonLLC:mainfrom

usr-bin-roygbiv:agent/t4-cluster-operator

Jul 21, 2026

Commits on Jul 20, 2026

test(cluster): define operator and chart contracts
usr-bin-roygbiv
committed
0c7ff83
test(cluster): define default-off operator client contracts
usr-bin-roygbiv
committed
ad237e3
test(cluster): define CI and proof contracts
usr-bin-roygbiv
committed
89f3798
test(cluster): define operator gateway contracts
usr-bin-roygbiv
committed
92a0cd1
fix(ci): make cluster test pipeline self-contained
usr-bin-roygbiv
committed
889a807
fix(ci): run cluster contracts before implementation gates
usr-bin-roygbiv
committed
99fa275
feat(cluster): add portable Kubernetes operator
usr-bin-roygbiv
committed
d06b1bb
ci(cluster): implement image and live proof harness
usr-bin-roygbiv
committed
94bd99b
ci(cluster): reuse bounded Harbor registry auth
usr-bin-roygbiv
committed
4a11683
feat(cluster): add default-off operator client
usr-bin-roygbiv
committed
844b8d9
ci(cluster): hand chart contracts to Helm stage
usr-bin-roygbiv
committed
a2a6c5d
feat(cluster): add stateless cluster gateway
usr-bin-roygbiv
committed
bb5b0d3
fix(cluster): close server integration gaps
usr-bin-roygbiv
committed
03da5ec
fix(cluster): align gateway resources with CRDs
usr-bin-roygbiv
committed
0bbe04c
fix(operator): wait for sessions before workspace deletion
usr-bin-roygbiv
committed
6b45535
Replace cluster static auth with TokenReview identity
usr-bin-roygbiv
committed
b8bd3c0
test(cluster): cover integration safety gaps
usr-bin-roygbiv
committed
c99df7d
fix(cluster): harden portable runtime reconciliation
usr-bin-roygbiv
committed
d222c0b
test(cluster): require rotating CI identity
usr-bin-roygbiv
committed
b11370c
feat(cluster): support projected CI identity
usr-bin-roygbiv
committed
b5cb895
fix(cluster): separate CI API and web endpoints
usr-bin-roygbiv
committed
a1e8e75
fix(cluster): harden session state and replay boundaries
usr-bin-roygbiv
committed
7e78dd9
fix(cluster): secure HA projections and idempotency
usr-bin-roygbiv
committed
1a7487a
fix(cluster): harden portable operator packaging
usr-bin-roygbiv
committed
539b8f6
fix(ci): bind cluster proof and image evidence
usr-bin-roygbiv
committed
8e1ba92
fix(cluster): enforce negotiated client projections
usr-bin-roygbiv
committed
81add12
test(ci): assert truthful signer rejection
usr-bin-roygbiv
committed
560882f
fix(ci): run cluster gates on compatible runtimes
usr-bin-roygbiv
committed
3dc4098
test(ci): require Bun for cluster protocol gates
usr-bin-roygbiv
committed
3c3e457
fix(ci): satisfy release lint and Bun execution
usr-bin-roygbiv
committed
90331ac
fix(ci): align cluster Bun verification
usr-bin-roygbiv
committed
ad111ef
fix(ci): type cluster verification fixtures
usr-bin-roygbiv
committed
acc5f85
fix(ci): resolve client contracts and CA path
usr-bin-roygbiv
committed
88928e1
test(cluster): align negotiated projection fixtures
usr-bin-roygbiv
committed
44b04bb
fix(cluster): align web projection contracts
usr-bin-roygbiv
committed
208ba84
fix(ci): provision pinned Bun for upstream tests
usr-bin-roygbiv
committed
300e49c
test(wire): cover cluster command ownership
usr-bin-roygbiv
committed
7666bfc
test(protocol): preserve additive cluster provenance
usr-bin-roygbiv
committed
7bb73cb
fix(projection): preserve ordered inventory semantics
usr-bin-roygbiv
committed
b30533c
fix(cluster): require Bun for server tests
usr-bin-roygbiv
committed
471377a
test(desktop): assert cluster capability default off
usr-bin-roygbiv
committed
446b95b
test: advance projection fixture cursors
usr-bin-roygbiv
committed
5160bbb
test: resolve protocol source in playwright
usr-bin-roygbiv
committed
c93c8f8
ci: install playwright in e2e container
usr-bin-roygbiv
committed
d4c8fcc
test: answer preview state recovery
usr-bin-roygbiv
committed
b3c6c76
test: isolate preview response values
usr-bin-roygbiv
committed
4da6e39
test: assert workspace metadata row
usr-bin-roygbiv
committed
068dd3e
test: dismiss mobile session drawer
usr-bin-roygbiv
committed
f579e20
test: target preview selector exactly
usr-bin-roygbiv
committed
98f14c4
test: normalize reduced motion duration
usr-bin-roygbiv
committed
fd11c05
test: scope preview lease fixture identity
usr-bin-roygbiv
committed
f8a20e4
fix: omit empty preview type selector
usr-bin-roygbiv
committed
eea72b7
ci: run wire tests with git available
usr-bin-roygbiv
committed
f5a1d8b
test: require Git-capable wire runner
usr-bin-roygbiv
committed
d2deda7
ci: install jq for tooling contracts
usr-bin-roygbiv
committed
9a895f0
fix(ci): make checksum parsing portable to POSIX awk
usr-bin-roygbiv
committed
b6f75c9
fix(ci): run image evidence in portable shells
usr-bin-roygbiv
committed
bf126e5
fix(ci): preserve multi-arch evidence identity
usr-bin-roygbiv
committed
90366df
fix(cluster): align live proof and bounded metrics
usr-bin-roygbiv
committed
3f45cc5
fix(ci): parse structured Loki errors
usr-bin-roygbiv
committed
6a9351a
test(web): inspect disabled attribute exactly
usr-bin-roygbiv
committed
dd7f9c7
fix(cluster): configure pinned OMP session runtime
usr-bin-roygbiv
committed
2ac57e3
fix(cluster): align OMP authority child home
usr-bin-roygbiv
committed
0382a79
Fix OMP profile config convergence
usr-bin-roygbiv
committed
583033c
Harden cluster runtime configuration
usr-bin-roygbiv
committed
0ccfca9
Fail closed on OMP runtime revocation
usr-bin-roygbiv
committed
ecd5195

Commits on Jul 21, 2026