• Joined on 2022-09-18
kpcto deleted branch feature/178 from Fabrika/PersonalBlog 2026-08-29 23:37:20 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-29 23:37:19 +00:00
4552ca175e Merge pull request '[E00-S03-T03] Migration ledger created' (#392) from feature/178 into main
e52b19b1e7 test: lock in the migration ledger with static + real-stack probes (E00-S03-T03)
7f6450410e feat: add migration ledger to database-postgres (E00-S03-T03)
Compare 3 commits »
kpcto merged pull request Fabrika/PersonalBlog#392 2026-08-29 23:37:17 +00:00
[E00-S03-T03] Migration ledger created
kpcto commented on issue Fabrika/PersonalBlog#178 2026-08-29 23:34:29 +00:00
[E00-S03-T03] Migration ledger created

Human-maintainer decision (kpcto) — resolves security-review finding SEC-1 (pipeline tripwire / needs-human-decision) on PR #392.

I have reviewed the .gitea/workflows/ci.yml change and…

kpcto closed issue Fabrika/PersonalBlog#177 2026-08-29 23:05:02 +00:00
[E00-S03-T02] pg/Kysely imports isolated to database-postgres
kpcto deleted branch feature/177 from Fabrika/PersonalBlog 2026-08-29 23:04:55 +00:00
kpcto merged pull request Fabrika/PersonalBlog#391 2026-08-29 23:04:55 +00:00
[E00-S03-T02] pg/Kysely imports isolated to database-postgres
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-29 23:04:55 +00:00
33ac04e795 Merge pull request '[E00-S03-T02] pg/Kysely imports isolated to database-postgres' (#391) from feature/177 into main
09b7a40d00 fix: pin database-postgres driver to the golden tuple (pg 8.22.0, Kysely 0.29.4)
97c5306768 test: lock in pg/Kysely import isolation to database-postgres (E00-S03-T02)
5c202ba21e feat: add database-postgres driver boundary package (E00-S03-T02)
Compare 4 commits »
kpcto commented on issue Fabrika/PersonalBlog#177 2026-08-29 23:02:23 +00:00
[E00-S03-T02] pg/Kysely imports isolated to database-postgres
agent: reviewer
verdict: approve
reviewed:
  pr: 391
  issue: 177
  head_branch: feature/177
  head_sha: 09b7a40d007c4575ca52f05ef2a53dc34a190eaa
summary: 
kpcto commented on issue Fabrika/PersonalBlog#177 2026-08-29 22:56:46 +00:00
[E00-S03-T02] pg/Kysely imports isolated to database-postgres

Human-maintainer decision (kpcto) — security review + CI pipeline-tripwire sign-off for PR #391 (head 09b7a40d). The automated security worker exhausted model fallbacks, so this gate is…

kpcto commented on issue Fabrika/PersonalBlog#177 2026-08-29 11:22:36 +00:00
[E00-S03-T02] pg/Kysely imports isolated to database-postgres
agent: reviewer
verdict: request-changes
reviewed:
  pr: 391
  issue: 177
  head_branch: feature/177
  head_sha: 97c530676844779297247650aa92f1d6a54c70b6
summary: 
kpcto closed issue Fabrika/PersonalBlog#176 2026-08-29 11:04:39 +00:00
[E00-S03-T01] PostgreSQL 18.6 container
kpcto deleted branch feature/176 from Fabrika/PersonalBlog 2026-08-29 11:04:34 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-29 11:04:33 +00:00
797a1b8dc2 Merge pull request '[E00-S03-T01] PostgreSQL 18.6 container' (#390) from feature/176 into main
a78ffea4c5 test: lock in the PostgreSQL 18.6 container criteria (E00-S03-T01)
4cd68c9193 feat: pin the database container to PostgreSQL 18.6 (E00-S03-T01)
Compare 3 commits »
kpcto merged pull request Fabrika/PersonalBlog#390 2026-08-29 11:04:32 +00:00
[E00-S03-T01] PostgreSQL 18.6 container
kpcto commented on issue Fabrika/PersonalBlog#176 2026-08-29 11:04:06 +00:00
[E00-S03-T01] PostgreSQL 18.6 container
agent: reviewer
verdict: approve
reviewed:
  pr: 390
  issue: 176
  head_branch: feature/176
  head_sha: a78ffea4c55a6fdfcb97f590a815237acb234a77
summary: 
kpcto commented on issue Fabrika/PersonalBlog#176 2026-08-29 11:01:11 +00:00
[E00-S03-T01] PostgreSQL 18.6 container

Human-maintainer decision (kpcto) — resolves security-review finding 1 (pipeline tripwire / needs-human-decision) on PR #390.

I have reviewed the .gitea/workflows/ci.yml change and…

kpcto closed issue Fabrika/PersonalBlog#175 2026-08-29 10:40:48 +00:00
[E00-S02-T08] Secrets are not embedded in image
kpcto deleted branch feature/175 from Fabrika/PersonalBlog 2026-08-29 10:40:39 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-29 10:40:38 +00:00
38c17f0e7a Merge pull request '[E00-S02-T08] Secrets are not embedded in image' (#389) from feature/175 into main
719fb4380b test: plant nested marker files in the layer-scan probe (E00-S02-T08)
f00c13d57a fix: make .dockerignore exclusions apply at any depth (E00-S02-T08)
b3ad55efe8 test: lock in no-secrets-in-image criteria (E00-S02-T08)
0938da8a73 feat: keep secrets out of the app image (E00-S02-T08)
Compare 5 commits »