-
efb6988719
fix: remove host FDE requirement, fix remaining audit partials
main
reachableceo
2026-05-08 14:28:04 -05:00
-
efc497efd6
fix: add M-09/M-10/M-11/H-09 - reproducibility, GPG signing, cache integrity
reachableceo
2026-05-08 13:03:24 -05:00
-
3d2ef3d5c2
fix: honest remediation batch 3 - fix broken claims and real Argon2id
reachableceo
2026-05-08 12:51:20 -05:00
-
8b5714971e
fix: update tests and JOURNAL for Session 8 remediation
reachableceo
2026-05-08 12:25:16 -05:00
-
ae1344c57e
fix: resolve remaining CRITICAL/HIGH/MEDIUM findings (batch 2)
reachableceo
2026-05-08 12:19:04 -05:00
-
2b422cf62c
fix: resolve 15 CRITICAL/HIGH/MEDIUM audit findings from DeepReport
reachableceo
2026-05-08 12:08:54 -05:00
-
e80725005f
docs: add deep audit report and honest STATUS.md update
reachableceo
2026-05-08 11:49:44 -05:00
-
7665f59cfe
fix: use swtpm_user/swtpm_group in qemu.conf for permanent TPM fix
reachableceo
2026-05-07 14:05:45 -05:00
-
76d1910e9d
fix: add permanent swtpm ACL fix script for libvirt TPM permissions
reachableceo
2026-05-07 13:57:15 -05:00
-
8d59694eef
fix: improve swtpm error handling for libvirt TPM permission issue
reachableceo
2026-05-07 12:59:22 -05:00
-
88d670efbe
fix: graceful TPM fallback in VM creation, fix vm_destroy cleanup
reachableceo
2026-05-07 12:39:47 -05:00
-
ccab1e2b19
docs: add E2E boot test results to JOURNAL.md
reachableceo
2026-05-07 11:18:35 -05:00
-
0eea7305d3
fix: add boot=live to UKI kernel command line
reachableceo
2026-05-07 11:04:58 -05:00
-
938182fc9f
fix: add GRUB timeout for auto-boot
reachableceo
2026-05-07 10:51:22 -05:00
-
a111c0c1ed
fix: stop vm_destroy from deleting the ISO
reachableceo
2026-05-07 10:48:40 -05:00
-
46dabde629
fix: resolve final PRD alignment issues, update docs
reachableceo
2026-05-07 09:13:29 -05:00
-
68ad78091e
test: update tests for removed requiretty and audispd-plugins
reachableceo
2026-05-07 08:48:27 -05:00
-
6719029613
docs: add sub-agent usage guidance to AGENTS.md
reachableceo
2026-05-07 08:48:16 -05:00
-
7887269c46
fix: correct $VERSION reference in build-iso.sh, fix QEMU networking
reachableceo
2026-05-07 08:42:56 -05:00
-
9459c84fbc
fix: resolve all audit findings in hooks, config, and package list
reachableceo
2026-05-07 08:41:52 -05:00
-
94abcfffda
fix: resolve 11 test failures, clean up stale files, add NVMe build cache
reachableceo
2026-05-07 07:51:56 -05:00
-
0fb9abe43e
feat: add dual-mode ISO builds (production vs demo) with serial console
reachableceo
2026-05-01 11:35:43 -05:00
-
3b331d960b
fix: resolve validation harness bugs and update STATUS.md
reachableceo
2026-05-01 11:20:53 -05:00
-
630358a20e
feat: add ISO validation harness and relax FDE enforcement for build
reachableceo
2026-05-01 10:06:48 -05:00
-
62d20604a6
fix: resolve critical build bugs and add missing PRD requirements
reachableceo
2026-05-01 09:50:15 -05:00
-
c03d3a793e
fix: restore lost functions and sections from rebase conflict resolution
reachableceo
2026-04-27 13:22:00 -05:00
-
33130f8b28
fix: update pinned package versions in Dockerfile
reachableceo
2026-04-27 13:15:04 -05:00
-
c283dd2237
docs: fix all stale/contradictory statistics in AGENTS.md and coverage report
reachableceo
2026-04-27 12:18:53 -05:00
-
a206533922
docs: add code coverage report, project verifier, and update metadata
reachableceo
2026-04-27 11:01:56 -05:00
-
6c5ba3d8c6
feat: restore test-iso.sh with fixes for local libvirt execution
reachableceo
2026-04-27 11:01:27 -05:00
-
821622d12b
test: add comprehensive test suites for all source scripts
reachableceo
2026-04-27 11:00:56 -05:00
-
7545a164e5
fix: resolve all shellcheck warnings in source scripts and hooks
reachableceo
2026-04-27 11:00:09 -05:00
-
cc1f218995
fix: add file utility and pin bats packages in Dockerfile
Charles N Wyble
2026-02-20 13:03:40 -05:00
-
3186462317
chore: remove accidentally committed espanso deb file
Charles N Wyble
2026-02-20 12:28:04 -05:00
-
96e8b9f446
fix: remove systemd-boot to resolve build conflict
Charles N Wyble
2026-02-20 12:27:20 -05:00
-
f82fe920d6
feat: delete ISO when destroying test VM
Charles N Wyble
2026-02-20 12:21:00 -05:00
-
9b3e282d20
feat: add shared git hooks with setup script
Charles N Wyble
2026-02-20 12:11:28 -05:00
-
2d9c66138a
fix: correct package name from sbsigntools to sbsigntool
Charles N Wyble
2026-02-20 11:24:29 -05:00
-
2ade926830
docs: add ADRs for security audit findings (FINDING-005, 006, 007, 008)
Charles N Wyble
2026-02-20 11:18:45 -05:00
-
3e79064de1
test: add comprehensive encryption parameter validation (FINDING-007)
Charles N Wyble
2026-02-20 11:04:22 -05:00
-
5b01cfd71b
feat: add Argon2id KDF configuration for LUKS2 (FINDING-005)
Charles N Wyble
2026-02-20 11:00:23 -05:00
-
bdf1f1b395
fix: pin all package versions for reproducible builds (FINDING-006)
Charles N Wyble
2026-02-20 10:54:34 -05:00
-
589c14833d
fix: standardize username to 'football' in all hooks (FINDING-008)
Charles N Wyble
2026-02-20 10:49:47 -05:00
-
09b4f12026
docs(audit): update FINDING-002 to informational (by design)
Charles N Wyble
2026-02-20 10:35:42 -05:00
-
c8b004cf3e
fix: use system libvirt with /tmp storage for virt-manager visibility
Charles N Wyble
2026-02-20 10:22:48 -05:00
-
af03f2feba
fix: restore user-mode libvirt (no sudo) and fix preseed partitioning
Charles N Wyble
2026-02-20 10:10:06 -05:00
-
48d635d8cc
docs: mandate Linux CLI tools for file editing over internal tools
Charles N Wyble
2026-02-20 09:31:23 -05:00
-
aedaabf82c
docs: enforce JOURNAL.md updates and auto-commit/push in SDLC
Charles N Wyble
2026-02-20 09:28:26 -05:00
-
59122570a6
feat: enforce SDLC compliance with pre-commit hook and documentation
Charles N Wyble
2026-02-20 08:44:56 -05:00
-
169362ce3d
feat: implement Secure Boot with UKI in run.sh
Charles N Wyble
2026-02-20 07:40:21 -05:00
-
e3e729af80
fix: correct preseed expert_recipe for crypto+LVM partitioning
Charles N Wyble
2026-02-20 07:07:01 -05:00
-
a2f0761cfd
docs: update VERIFICATION-REPORT.md with new ISO build info
Charles N Wyble
2026-02-20 00:12:20 -05:00
-
626e49c3e7
fix: preseed.cfg UEFI partitioning and user password prompts
Charles N Wyble
2026-02-19 23:29:31 -05:00
-
81f97687d9
docs: remove status tracking from AGENTS.md, consolidate in STATUS.md
Charles N Wyble
2026-02-19 23:15:25 -05:00
-
ad2d4d3e61
docs: add architecture diagram and fix FR-001 links
Charles N Wyble
2026-02-19 22:58:14 -05:00
-
f5bbcad08c
docs: add clickable links and update to Debian 13 stable
Charles N Wyble
2026-02-19 22:54:58 -05:00
-
29654c6cf2
fix: pin distribution to trixie (Debian 13 stable)
Charles N Wyble
2026-02-19 21:27:34 -05:00
-
987c70b604
fix: remove obsolete icewm-themes package
Charles N Wyble
2026-02-19 20:39:13 -05:00
-
89cd8a1c47
fix: copy config files to live-build config directory in run.sh
Charles N Wyble
2026-02-19 20:23:52 -05:00
-
7e8bbf7a8f
fix: copy config files to correct live-build config directory
Charles N Wyble
2026-02-19 20:16:42 -05:00
-
89fd6b7dfb
fix: move preseed.cfg to includes.installer for live-build
Charles N Wyble
2026-02-19 19:39:35 -05:00
-
f7fc16b5c5
docs: update STATUS.md and README.md with PRD alignment matrix
Charles N Wyble
2026-02-19 17:46:59 -05:00
-
cc5d200c4e
test: expand integration tests and add unit tests for hooks
Charles N Wyble
2026-02-19 17:41:08 -05:00
-
13c446ef8e
test: remove redundant build_test.bats (covered by build-iso_comprehensive_test.bats)
Charles N Wyble
2026-02-19 17:18:01 -05:00
-
8fbf3c0880
test: replace stub tests with comprehensive coverage
Charles N Wyble
2026-02-19 17:17:26 -05:00
-
872da4cf82
feat: add mandatory host FDE check for build/test operations
Charles N Wyble
2026-02-19 17:11:54 -05:00
-
d4c64b85fa
docs: fix PRD consistency and align all docs with SSH client-only (FR-006)
Charles N Wyble
2026-02-19 16:04:38 -05:00
-
f13bb8577a
docs: move PRD.md and SDLC.md to docs/ subdirectory
Charles N Wyble
2026-02-19 14:52:56 -05:00
-
a284b095d8
chore: remove config/ from gitignore
Charles N Wyble
2026-02-19 13:59:57 -05:00
-
ccfe1b017c
fix: update preseed for automated installation with user-specified values
Charles N Wyble
2026-02-19 13:58:09 -05:00
-
13139f2b9c
fix: use virsh define for VM creation instead of virt-install
Charles N Wyble
2026-02-19 13:38:25 -05:00
-
59c96113fd
fix: use libvirt session URI consistently, remove QEMU fallback
Charles N Wyble
2026-02-19 13:05:01 -05:00
-
96f0596160
docs: mark project complete with rebuilt ISO
Charles N Wyble
2026-02-19 12:29:03 -05:00
-
5306942e45
docs: add TODO.md with automated E2E testing roadmap
Charles N Wyble
2026-02-19 09:43:33 -05:00
-
747d58e6ec
docs: add permanent lessons to JOURNAL.md to prevent recurring mistakes
Charles N Wyble
2026-02-19 09:19:22 -05:00
-
1070f9bf67
docs: update STATUS.md and JOURNAL.md for session 5 bug fixes
Charles N Wyble
2026-02-19 09:15:50 -05:00
-
bed3b07b81
fix: correct security-hardening.sh hook function calls
Charles N Wyble
2026-02-19 09:11:43 -05:00
-
ab49d1f98b
refactor: remove versioning from ISO filename
Charles N Wyble
2026-02-17 15:44:09 -05:00
-
e4fe12aaf1
docs: add critical auto-commit rule to AGENTS.md
Charles N Wyble
2026-02-17 15:38:41 -05:00
-
8c65d174d3
docs: update STATUS.md and JOURNAL.md for session 4
Charles N Wyble
2026-02-17 15:35:27 -05:00
-
d9f2f02138
refactor: consolidate test-iso.sh and monitor-build.sh into run.sh
Charles N Wyble
2026-02-17 15:22:21 -05:00
-
3b5558c031
fix: improve test-iso.sh for QEMU fallback and update status
Charles N Wyble
2026-02-17 14:23:19 -05:00
-
d4e0f5b4af
docs: update STATUS.md and JOURNAL.md with session progress
Charles N Wyble
2026-02-17 12:44:05 -05:00
-
0807611efe
feat: add FIM, comprehensive audit logging, SSH client-only for CIS/FedRAMP/CMMC
Charles N Wyble
2026-02-17 12:24:30 -05:00
-
1396751de0
test: add SSH security tests for FR-006 compliance
Charles N Wyble
2026-02-17 11:56:05 -05:00
-
c2a1481aab
docs: add destructive git operation safety rules
Charles N Wyble
2026-02-17 11:46:59 -05:00
-
de5793e0df
docs: add git safety rules for quoting paths and non-interactive rebase
Charles N Wyble
2026-02-17 11:46:07 -05:00
-
f15dcda6ff
docs: add commit hygiene rules to AGENTS.md
Charles N Wyble
2026-02-17 11:45:35 -05:00
-
0b9ede5f84
fix: resolve all shellcheck warnings and security issues
Charles N Wyble
2026-02-17 11:34:11 -05:00
-
1fee995c3b
docs: update STATUS.md with session completion status
Charles N Wyble
2026-02-17 10:20:37 -05:00
-
274ad90731
docs: track JOURNAL.md in version control
Charles N Wyble
2026-02-17 10:12:54 -05:00
-
20ef06a020
feat: add test:system command to run.sh
Charles N Wyble
2026-02-17 10:12:35 -05:00
-
b3d02d0c14
docs: update README.md and AGENTS.md for new files
Charles N Wyble
2026-02-17 10:12:20 -05:00
-
d00f3c9f02
fix: resolve shellcheck warnings in shell scripts
Charles N Wyble
2026-02-17 10:12:01 -05:00
-
acf3f934fd
test: add VM boot test framework and system tests
Charles N Wyble
2026-02-17 10:11:40 -05:00
-
6929ecfbc9
feat: add Secure Boot support packages
Charles N Wyble
2026-02-17 10:11:19 -05:00
-
497da0a6b3
docs: add STATUS.md manager report file
Charles N Wyble
2026-02-17 10:10:33 -05:00
-
bd1b93f44f
.
ReachableCEO
2026-01-29 14:20:36 -05:00
-
b456be14ae
test: fix BATS test infrastructure and make all tests pass
ReachableCEO
2026-01-29 13:29:14 -05:00
-
c1505a9940
chore: remove obsolete scripts and clean project structure
ReachableCEO
2026-01-29 12:42:51 -05:00