64 recorded commits · 6 named repos · 5 private repos
- Private work 5 private repos
Activity was recorded across 5 private repos. Names, subjects, counts, and links stay private.
- SouveraineOS36 changes · internal record
- stop the seat before replacing its broker8:53 p.m. · 18dd317
- set the delivery and promotion sequence8:30 p.m. · bf3ac7b
- commentedcommented Fimeg/SouveraineOS3 distinct records share this description8:11 p.m.8:11 p.m.8:11 p.m.
- record setup repairs and preserve unfinished drafts8:10 p.m. · be824c2
- Preserve unfinished SMS and MMS investigation notes7:56 p.m. · e033d01
- index on main: fbabb84 record repository browsing and website delivery state7:53 p.m. · ce9f471
- Record measured Pixel frame stalls7:50 p.m. · 04f7db5
- commentedcommented Fimeg/SouveraineOS7:50 p.m.
- Record working login and the shell control repairs7:43 p.m. · 16ba539
- commentedcommented Fimeg/SouveraineOS7:10 p.m.
- record installed PIN relay and human startup failure6:23 p.m. · 83569c5
- commentedcommented Fimeg/SouveraineOS6:23 p.m.
- record seed lock repair and pending phone delivery5:42 p.m. · 706635f
- commentedcommented Fimeg/SouveraineOS5:42 p.m.
- record CI fixture repair and new delivery pin5:06 p.m. · a7f0063
- commentedcommented Fimeg/SouveraineOS2 distinct records share this description5:06 p.m.4:55 p.m.
- record shell recovery and pending PIN repair4:54 p.m. · 8262f48
- commentedcommented Fimeg/SouveraineOS3:38 p.m.
- pin the shell recovery follow-up3:37 p.m. · 46ca591
- title withheld3:34 p.m. · c13279e
- commentedcommented Fimeg/SouveraineOS2 distinct records share this description3:34 p.m.3:33 p.m.
- Record the system shell and black-screen recovery3:31 p.m. · 74261b0
- commentedcommented Fimeg/SouveraineOS10 distinct records share this description3:29 p.m.3:05 p.m.2:30 p.m.2:30 p.m.12:06 p.m.10:53 a.m.10:40 a.m.10:20 a.m.9:22 a.m.9:06 a.m.
- pangolin32 changes · internal record
- guard public website updates with exact revisions5:37 p.m. · 7556463
- return 503 for public resource maintenance5:23 p.m. · a69688e
- commentedcommented Fimeg/pangolin2 distinct records share this description3:29 p.m.3:05 p.m.
- stop the redundant upstream build3:04 p.m. · 1297491
- check the hydrated branding and live enterprise entitlement3:01 p.m. · a577c5e
- check the isolated upstream Node 24 patch2:29 p.m. · ad5781e
- commentedcommented Fimeg/pangolin2:29 p.m.
- keep Node 24 and preserve the upstream comments2:28 p.m. · 034e86e
- keep Node 24 with its shipped cleanup hook fixes2:23 p.m. · 8779c8d
- commentedcommented Fimeg/pangolin3 distinct records share this description2:23 p.m.2:19 p.m.2:19 p.m.
- use a security-patched Node runtime2:11 p.m. · cdc7104
- keep the rotated deployment credential maskable2:02 p.m. · 50856e0
- build the full fimeg edition with native acme crypto1:58 p.m. · ec9861f
- retain visible image artifacts and fail on missing files1:47 p.m. · fdca2c7
- patch node on the compatible 22 lts runtime1:24 p.m. · 2780844
- supply required backup assertion messages12:38 p.m. · 105919a
- bring backup fixtures through the current migrations12:32 p.m. · 7ebd917
- allow pinned native build scripts with current npm12:21 p.m. · f927945
- drop unused private acme dependency and patch redirects12:17 p.m. · 868d986
- run sqlite lifecycle regressions in upstream ci11:58 a.m. · d769d4e
- commentedcommented Fimeg/pangolin11:55 a.m.
- verify retained image hash and privacy defaults11:54 a.m. · dcdef70
- disable request history in the owned image11:52 a.m. · 721196e
- commentedcommented Fimeg/pangolin11:49 a.m.
- patch node and sqlite for the [host] image11:44 a.m. · 188e2ec
- taggedtagged Fimeg/pangolin2 distinct records share this description11:12 a.m.11:12 a.m.
- Fix #39619:06 a.m. · 8b509da
- fix(blueprints): include resource name in blueprint health check names8:15 a.m. · 03d0496
- souveraine17 changes · Forge copy pending
- connect the system shell to session controls8:51 p.m. · d7b92fb
- keep setup recoverable before primary selection8:08 p.m. · 2b6296c
- Require live owners without starting them7:43 p.m. · 12cf38f
- Reconnect the system shell to session controls7:37 p.m. · 419bdd3
- handle the root slice in human session readiness6:21 p.m. · 55b73ee
- release the seat seed lock before inherited handles close5:41 p.m. · 34f29ac
- avoid executable copy race in peer identity test5:06 p.m. · 15d09a1
- fix human session lifetime and PIN handoff4:53 p.m. · a23f1f8
- log seat broker refusals3:37 p.m. · ba479b2
- Let ViewTop check its shell through the seat broker3:25 p.m. · 0088fb6
- seat: look up the shell account only where sessiond uses it2:20 p.m. · ecd78ba
The main binary shares the account helper and never used the shell lookup, which failed clippy's dead-code gate.
- seat: let the replacement test wait for the child's exec1:48 p.m. · 38add01
CI observed the spawned child before it ran the copied binary. The test now waits briefly for the exec before asserting the link.
- seat: run the shell as its own system account1:17 p.m. · 114b4f4
A per-session unit starts the packaged shell as souveraine-shell, without the agent's or the human's home. sessiond admits it by account, executable and unit.
- seat: accept the seat shell, remove the package pin face1:01 p.m. · 14c5aab
sessiond now reads the seat shell's inventory kind instead of dropping the compositor channel. The package-only PIN screen and its launcher are gone; the shell presents the lock.
- seat: compare the replacement test on canonical paths11:26 a.m. · 4c64a51
The kernel reports exe links canonically, but the test compared a raw temp path. It now canonicalizes the copy and asserts the raw link first.
- seat: verify cross-uid peers through the root executor10:19 a.m. · 3f00ecd
The executor observes socket peers on a thread apart from PAM, so sessiond stays unprivileged. The seat shell matches /usr/bin/quickshell; replaced builds are named.
- archive: staged work from the main checkout9:26 a.m. · b1e2f0e
Staged on a merged dock branch with no remote; kept before the checkout returns to primary. Dock and topbar pointers were unstaged at 1598de4 and d162023.
- souveraine-viewtop6 changes · internal record
- retry package indexes while mirrors sync8:45 p.m. · c1c79a5
- Let the system shell reach the workspace controls7:30 p.m. · 9c377b1
- Observe the seat shell through its accepted socket3:25 p.m. · f90befa
- seat: wrap the seat-shell uid check for rustfmt1:48 p.m. · cef4ba3
The check-and-build job rejected the unwrapped line.
- seat: admit the shell from its own system account1:17 p.m. · 7c48b1f
ViewTop recognises the seat shell by account, executable and its session's unit. The leader asks the broker to start it instead of running it.
- seat: admit the seat shell as its own principal10:20 a.m. · 846eb72
The leader supervises the packaged shell inside the seat session by explicit path. ViewTop grants it only the shell's binds and accepts its lock presentation.
- caseytunturi.com6 changes · internal record
- show shared site notices without changing page access5:24 p.m. · 4d64a9d
- ledger: share public repo titles again, gate the bodies12:14 p.m. · 993ba36
Public Gitea repositories keep their names and commit titles; private ones stay counts. Bodies appear only when they pass the voice and disclosure checks; comments never do.
- commentedcommented Fimeg/caseytunturi.com2 distinct records share this description12:00 p.m.11:47 a.m.
- pin site and signaling to patched node 2211:28 a.m. · fbd1ce7
- ledger: name only forge-enrolled repos, never comment text11:20 a.m. · 9d38c40
Feed events carry no prose, and unenrolled repositories become private counts. A Forge body appears only when it passes the voice and disclosure checks.
- Ani-Dashboard1 change · internal record
- add reviewed public website notice and maintenance controls5:39 p.m. · 6943de9