trevato/mitosis

Public: anyone can read this; nobody can change it.

git.open-platform.shworkbench(synced 6m ago)this machine

115 branches Builds

main Default 2555d85 · License Open Platform under the AGPL-3.0 (#307) · updated 6d ago by plat
agpl 30431f9 · The status page no longer says there is no license · updated 6d ago by plat ↑2↓1
aks-coredns-hairpin-fix def3177 · trim/aks: rewrite PVC local-path to the default SC (replace, not remove) · updated 2mo ago by trevato ↓62
audit/aws-2026-08-25 acf7e7b · docs(ops): fill in live EC2-leader sweep (op-benjivers authorized) · updated 2mo ago by benjivers ↑2↓44
azure-aks-mode 5747ef0 · deploy/azure: README.md — one Azure guide, both modes, in Simplified Technical English · updated 2mo ago by trevato ↑10↓88
azure-docs-truth-pass fb32770 · deploy/azure: truth pass on the gate docs · updated 2mo ago by trevato ↓61
chore/refresh-genesis-seed 60cc72e · genesis: refresh seed to carry the secrets stack (mcp 0.23.15 + secrets-cli + agents 0.7.3 + sync-env) · updated 4mo ago by trevato ↓248
chore/reseed-genesis-post-61 1f9b102 · genesis: reseed with the released 0.7.6 train (#62) · updated 4mo ago by trevato ↓223
docs-app-roles 1f20148 · wiki: the three app tiers (anon, user, admin) and public apps · updated 2mo ago by trevato ↑1↓38
docs-clean ed5f60c · Status: the reader's version, and links to it · updated 6d ago by trevato ↑7↓2
docs/architecture-diagram 810025e · docs: Azure deployment view, portable workloads, one diagram engine · updated 29d ago by trevato ↓10
docs/auto-svg 43c82d6 · docs: an auto light/dark SVG variant; arrowheads colored through classes · updated 29d ago by trevato ↓6
docs/aws-eks-build-history bf00048 · docs(ops): cloud-deploy build history — AWS, Azure/AKS, EKS · updated 2mo ago by benjivers ↑1↓37
docs/design-proposals 7c1a849 · docs: design proposals for issues #2, #3, #4, #5 · updated 4mo ago by trevato ↑1↓251
docs/enterprise-platform 62aab81 · docs: enterprise-platform vision + Forgejo-RBAC design (alignment artifacts) · updated 4mo ago by trevato ↑1↓251
docs/hyb-3-opentofu-substrate e9d1073 · HYB-3: OpenTofu multi-cloud substrate contract (design) · updated 4mo ago by plat ↓248
docs/pol-0-policy-governance 85e7dbb · POL-0: Kyverno policy-governance model (design) · updated 4mo ago by plat ↑1↓249
docs/theme-aware-diagrams c33ad0f · docs: light and dark diagram pairs follow the Forgejo theme · updated 29d ago by trevato ↓8
feat/azure-gate f239fd1 · azure-gate: README — concise run-it-yourself instructions (Forgejo + laptop, reach/remove, cost) · updated 2mo ago by trevato ↑9↓86
feat/ci-1-coldstart-gate 99f8303 · gate: skip the A3 restart probe wholesale on pre-0.7.6 agents · updated 4mo ago by trevato ↓220
feat/deploy-platform 8328574 · deploy: zero-DNS-config cloud deploy — auto sslip.io domain from public IP · updated 2mo ago by trevato ↑6↓92
feat/dom-1a-fork-reseal-cloudflare-token 5e22dd7 · DOM-1a: fork-reseal cloudflare-dns-api token per daughter (#24) · updated 4mo ago by trevato ↑1↓240
feat/dom-2-cilium-fqdn-egress 3ba6d4e · DOM-2: germinate on Cilium CNI (kube-proxy-free; enforces netpol + toFQDNs egress) · updated 4mo ago by trevato ↑1↓233
feat/fork-on-germinate d883cff · gate/workflow: host-persisted run logs + definitive fork-tier RESULT line · updated 4mo ago by trevato ↓216
feat/gate-parallel-nightly 753af68 · gate: read probes from pod logs — kubectl run -i attach loses early output · updated 4mo ago by trevato ↓209
feat/observability-grafana 53febd2 · germinate: ship Grafana observability to daughters (#6) · updated 4mo ago by trevato ↑1↓251
feat/rbac-5-webhook-hmac-seal 8dbfb0f · RBAC-5: seal a per-daughter Forgejo-webhook HMAC secret (plat/mitosis#32) · updated 4mo ago by trevato ↓232
feat/rbac-7-postgres-rls-design c086c15 · RBAC-7: DESIGN Forgejo-identity -> per-app postgres role/RLS (design only) · updated 4mo ago by trevato ↑1↓239
feat/reseed-noop-guard 3873669 · reseed: no-op guard — unchanged origin refs skip the PR · updated 4mo ago by trevato ↓193
feat/reseed-workflow 2fd85a1 · reseed-verify: authenticated V3 head lookups (mcp/agents/hello are private) · updated 4mo ago by trevato ↓203
feat/robust-seed-refresh 70fa8a1 · genesis: refresh seed — agents 0.7.4 (keyscan + dev-env fixes) + gitops 0.7.4 pins · updated 4mo ago by plat ↓237
feat/sec-1-age-key-rotation cdede95 · SEC-1: sovereign age-key backup + rotation tooling + runbook · updated 4mo ago by trevato ↓243
feat/sec-3-secrets-threat-model 3684592 · SEC-3: secrets threat model + reviewer FAQ (docs only) · updated 4mo ago by trevato ↑1↓239
feat/seed-release 688a1ad · seed-release: tag + Forgejo Release per merged seed; auto-link the package · updated 2mo ago by trevato ↑1↓92
feat/seed-workflow 70e23e7 · slim to reseed auto-triggers only — #127 owns publish + resolution · updated 2mo ago by trevato ↑4↓95
feat/wb-gate-seed-refresh 924c541 · wb-gate: refresh genesis seed — _app-template main carries POL-3 #6 (ships first-try) · updated 4mo ago by trevato ↓227
fix/aks-cert-zone-doubling 5bfaed4 · azure-gate: a PASSING run exited 1 — the trailing keep-message && leaked its status into the EXIT trap · updated 2mo ago by Benjivers-bit ↑4↓77
fix/aks-ground-trust-cidrs 9fd8393 · aks ground: rewrite the seed's k3s CIDR hardcodes + pin AKS CIDRs + surface germinate WARNs · updated 2mo ago by Benjivers-bit ↑1↓76
fix/azure-gate-nixos-bicep 73cdbf6 · azure-gate: NixOS-safe bicep — nixpkgs#bicep on PATH + use_binary_from_path · updated 2mo ago by Benjivers-bit ↑1↓81
fix/cold-start-seed-branch-and-mtu 2e2d88d · germinate/seed: fix two cold-start blockers (seed branch resolution + dind MTU) · updated 4mo ago by Jay Moran ↓252
fix/gate-a4-detection ec070c5 ↓214
fix/germinate-prerelease-tags 62b5ad9 ↓225
fix/germinate-python3-runtimedep a8d778b ↑1↓249
fix/germinate-timeout-contention 6a657dd ↓191
fix/reseed-script 7cdfc10 ↓199
fix/reseed-setg 8969618 ↓197
fix/reseed-yaml 368300f ↓201
fix/seed-createdfrom-durable fc05c5d ↓207
fix/seed-release-jq e67d264 ↑1↓90
immune-fixes f12b6d2 ↑1↓22
proposal-the-wardrobe 1942b45 ↑1↓33
rehome-node-aftercare e166a6d ↑2↓24
reseed/r1003 240b858 ↑1↓17
reseed/r1009 519ffa8 ↑1↓14
reseed/r1014 70996ed ↑1↓13
reseed/r1018 7558cba ↑1↓13
reseed/r1023 23dcbfa ↑1↓13
reseed/r1028 3993090 ↑1↓13
reseed/r1033 177ee59 ↑1↓13
reseed/r1038 2d5ca7b ↑1↓13
reseed/r1043 2204bde ↑1↓13
reseed/r1048 ac71782 ↑1↓13
reseed/r1053 df0f4d2 ↑1↓13
reseed/r132 cc5c689 ↓140
reseed/r140 5618466 ↓137
reseed/r175 349ea0a ↑1↓119
reseed/r181 1077234 ↑1↓118
reseed/r187 d336464 ↓116
reseed/r246 ca2ce82 ↑1↓95
reseed/r25 3d99e45 ↓197
reseed/r27 8e9b589 ↑1↓196
reseed/r278 a8277f8 ↑1↓92
reseed/r29 faadcdb ↓191
reseed/r37 700332b ↓185
reseed/r39 f81c69e ↑1↓184
reseed/r41 e1251f1 ↓183
reseed/r47 bb01b52 ↓179
reseed/r498 3ea445d ↑1↓72
reseed/r51 3d6e5e5 ↑1↓178
reseed/r511 dcf553d ↑1↓70
reseed/r54 664c8b9 ↓177
reseed/r56 7544cb6 ↓175
reseed/r585 aa07483 ↑1↓55
reseed/r814 aa841de ↑2↓30
reseed/r817 49a768e ↑1↓28
reseed/r829 183c309 ↑1↓27
reseed/r845 b2caa5e ↑1↓25
reseed/r859 0612bec ↑1↓24
reseed/r873 dbb03eb ↑1↓23
reseed/r886 e8df2a5 ↑1↓21
reseed/r897 0251ceb ↑1↓19
reseed/r909 72348d3 ↑1↓17
reseed/r913 d5fcec0 ↑1↓17
reseed/r918 e72dbb4 ↑1↓17
reseed/r923 969b4f8 ↑1↓17
reseed/r928 3dc2c21 ↑1↓17
reseed/r933 8997f4f ↑1↓17
reseed/r938 9f9b37f ↑1↓17
reseed/r943 564f9fa ↑1↓17
reseed/r948 5360088 ↑1↓17
reseed/r953 5416d9d ↑1↓17
reseed/r958 34c9b67 ↑1↓17
reseed/r963 2c79a6d ↑1↓17
reseed/r968 e422b93 ↑1↓17
reseed/r973 047e38c ↑1↓17
reseed/r978 74b961a ↑1↓17
reseed/r983 2294465 ↑1↓17
reseed/r988 81494fa ↑1↓17
reseed/r993 fb31d75 ↑1↓17
reseed/r998 b7a2c6b ↑1↓17
resilience/backup-born-on 9456416 ↓132
resilience/standby-site 15c4429 ↓129
seed-embedded-etcd 674da39 ↑1↓34
seed-release-jqfree 8d5d17a ↑1↓20
seed/packages-integration-spec aff7681 ↑5↓95