87 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
abiba-bot	8f1e5eebc4	feat(security): commit-time secret guard that FAILS the build on a committed credential ... The 2026-09-17 purge removed six live credentials that had sat in this repo for weeks, several in .md prose. Nothing blocked that class of commit, so a warning in a stream nobody reads was the only signal. This adds a guard that fails the build instead of warning. Guard - scripts/secret-scan.sh: bash + coreutils + grep/sed/awk + git only (the Gitea Actions runner executes job steps inside the runner container — BusyBox grep, no node/python). Modes: --tree (git-tracked, default), --path DIR (no git), --staged (pre-commit), --diff REF. Exit 1 on a finding, 2 on config error. - scripts/secret-patterns.tsv: checked-in pattern list — sk-, sk-or-v1-, sk_live_, literal Bearer tokens, PVEAPIToken=, raw Authorization values, PEM private-key blocks, prose credential lines, and password/api_key/secret/token assignments carrying a literal value. Prose is scanned exactly like code. - scripts/secret-allowlist.tsv: one entry per deliberate synthetic example, each with a reason. A missing reason is a hard error (fail closed). The 2026-09-17 purge's `«vault: ...»` placeholders are listed explicitly rather than filtered by a general "vault"/"synthetic" rule, so a new occurrence still needs a reviewed, reasoned entry. - A small inert-value classifier drops env refs, paths, dotted code access, variable names and right-truncated redactions; it does not know the words "synthetic"/"example", so a fabrication is always an explicit exception. - Findings are printed with the credential masked; a scan never echoes a full secret into the log. Wiring - .gitea/workflows/pr-pipeline.yaml lint job: explicit "Committed-credential scan" step plus the self-test. A finding fails the required `pr-pipeline / lint` context, which the merge gate depends on. - scripts/prose-lint.sh (the local gate): a "Secret scan" section, so `bash scripts/prose-lint.sh` before pushing is equivalent to CI. Tests - tests/test_secret_scan.sh: 20 cases. Plants pattern-matching fixtures in temp trees (outside every allowlisted path) and asserts the guard FAILS, including the --staged commit-time path; asserts the tree is quiet; asserts allowlisted text at an unlisted path still fails (path-explicit, not word-based); asserts a reasonless allowlist entry exits 2. Verified: guard run against 8245716^ (the pre-fix revision, before the purge) fails on the real OpenRouter/LiteLLM/Zulip/Proxmox/Stirling credentials; guard run over the current tree is clean.	2026-09-22 15:04:37 +00:00
abiba-bot	0732eed329	Merge pull request 'fix(daily-infra-report): drop the vestigial Zulip key requirement; fail loudly on a failed send' (#127) from fix/daily-health-digest-remove-vestigial-zulip-20260921 into master	2026-09-21 11:36:48 +00:00
abiba-bot	5d70bbf25b	Merge pull request 'fix(daily-infra-report): missing credentials degrade one leg instead of blacking out the digest' (#126) from fix/daily-health-digest-degraded-credentials-20260921 into master	2026-09-21 11:26:32 +00:00
abiba-bot	48fb263d4b	Merge pull request 'feat(litellm): align contracts for 7-provider cloud consolidation (2026-09-20)' (#125) from feat/align-litellm-contracts-cloud-20260920 into master	2026-09-21 08:24:13 +00:00
abiba-bot	6fa0a255df	Merge pull request 'fix(zulip-monitor): add C3 public access path, make run verdict non-optimistic, separate C1/C2/C3' (#124) from fm/kagentz-a2a-outage-masked-as-expected-20260919 into master	2026-09-19 22:50:06 +00:00
abiba-bot	58033f39c5	Merge pull request 'fix: Rule 5 accept canonical internal and public host base_url' (#122) from fix/rule5-canonical-baseurl-20260919 into master	2026-09-19 11:57:35 +00:00
abiba-bot	6c59988e7f	Merge pull request 'fix(litellm-health): three-state model verdicts - busy is not a failure' (#123) from fix/litellm-health-busy-vs-down-20260919 into master	2026-09-19 11:57:25 +00:00
abiba-bot	aa3da83af5	Merge pull request 'fix(litellm-health): retry single-host model probes once at a longer timeout' (#121) from fix/litellm-health-retry-timeout-20260919 into master	2026-09-19 10:57:39 +00:00
abiba-bot	3b32cc9658	Merge pull request 'fix(infra-monitoring): probe the real Docker Stats and PVE exporter ports' (#120) from fix/infra-monitoring-probe-ports-20260919 into master	2026-09-19 02:56:31 +00:00
abiba-bot	66ad5ac89d	Merge pull request 'feat(proxmox-monitor): add PBS GC liveness signal' (#119) from fix/pbs-gc-liveness-signal-20260919 into master	2026-09-19 02:51:34 +00:00
abiba-bot	ef7f90ef5a	Merge pull request 'fix: move infra-monitoring probes into versioned script' (#115) from fix/infra-monitoring-probe-targets-drift-20260917 into master	2026-09-18 18:58:27 +00:00
abiba-bot	43e891e679	Merge pull request 'fix: update MCP access docs to reflect per-key grants support' (#118) from fix/infra-mcp-per-key-grants-20260918 into master	2026-09-18 18:52:14 +00:00
abiba-bot	7400dfd833	fix: add MCP server checks to audit-hermes-config.py ... Implement Rule 15 automated enforcement for MCP servers: - Validate MCP server URLs against known endpoints (ra-h-os, litellm) - Check for authentication headers on MCP server configs - Warn if header values look like env-vars instead of literal keys - Warn if no auth header is present This ensures the MCP URL/header invariants from the prose contract are enforced at the earliest shared boundary (before config application).	2026-09-17 12:33:52 +00:00
abiba-bot	c65f5219e1	fix: address review findings for MCP URL validation ... Addressed all 4 ask-user findings from the review: f1: Qualified the MCP access verification claim - noted that it may contradict infrastructure-update.prose.md and that LiteLLM version may have been upgraded since that contract was written. f2: Added key rotation note documenting that MCP headers use literal keys and do NOT auto-rotate with the vault. Added TODO to consider adding MCP header regeneration to the Key Update Procedure. f3: Added MCP server checks to audit-hermes-config.py (Rule 15): - Validate MCP server URLs against known endpoints - Check for authentication headers - Warn if header values look like env-vars instead of literal keys f4: Updated Rule 15 verification instruction to include MCP initialize handshake test, not just /v1/models check. f5: Added NetBird dependency note documenting that 502 errors on MCP requests may indicate NetBird outage, not auth failure.	2026-09-17 12:24:43 +00:00
abiba-bot	077972fa2b	docs: add MCP verification details and Accept header note ... - Documented MCP endpoint verification (2026-08-07): tested with real key, confirmed initialize handshake works and virtual keys have MCP access - Added note about Accept header requirement (handled by MCP client library) - Clarified that the Accept header is NOT part of the config template	2026-09-17 12:19:00 +00:00
abiba-bot	d2bca5405a	feat: add litellm MCP server entry and enhance Rule 15 validation ... - Added litellm MCP server entry to mcp_servers section with correct URL (https://litellm.sysloggh.net/mcp) and header format - Updated Rule 15 to be more specific about endpoint validation and header requirements (REAL keys, not env-var references) - Added MCP Server Configuration section with implementation details - Documented the 2026-08-07 Tanko incident where ra-h-os was pointing to litellm endpoint with env header causing 401 floods - Updated frontmatter to reflect the changes Fixes: #keyless-mcp-incident-20260807 Refs: Rule 15 (MCP Endpoint and Header Validation)	2026-09-17 11:30:44 +00:00
abiba-bot	8a5cba8515	Merge pull request 'security(secrets): remove committed credentials from the tree and read them from the vault/environment' (#112) from fix/monitor-creds-to-env-master-20260910 into master	2026-09-17 07:15:07 +00:00
abiba-bot	a820b3f7dd	Merge pull request 'docs(agent-health): every check leg must appear in every report - a missing line is not a pass' (#111) from fix/agent-health-mandatory-report-legs-20260917 into master	2026-09-17 03:12:57 +00:00
abiba-bot	c712d4faf0	Merge pull request 'fix(monitoring): make the reported key count self-describing instead of a bare number' (#109) from fix/litellm-key-count-self-describing-20260916 into master	2026-09-16 15:35:35 +00:00
abiba-bot	57bfe7e06a	Merge pull request 'docs(keys): state the acceptable key-placement pattern and the backup-file fix procedure' (#108) from fix/tanko-plaintext-key-in-config-backup-20260916 into master	2026-09-16 11:27:43 +00:00
abiba-bot	0f26119859	Merge pull request 'docs(contracts): add the missing agent-health-check contract' (#107) from fix/agent-health-check-contract-20260916 into master	2026-09-16 05:03:26 +00:00
abiba-bot	dae8d14880	Merge pull request 'fix(disk-gc): actually write the host-band state file so escalations and recoveries can fire' (#106) from fix/host-disk-band-state-file-20260916 into master	2026-09-16 01:00:28 +00:00
abiba-bot	6c616a9e58	Merge pull request 'fix(disk-gc): host filesystem bands, named volumes, report-only, and state-change alerts' (#105) from fix/host-filesystem-thresholds-20260915 into master	2026-09-15 14:40:20 +00:00
abiba-bot	4bdd88613b	Merge pull request 'docs: pm2/spoton AS-BUILT correction and the real Prometheus node coverage' (#104) from fix/contract-corrections-20260915 into master	2026-09-15 13:14:39 +00:00
abiba-bot	713b9ce80c	Merge pull request 'Remove client deliverable from the contracts repo (process fix)' (#77) from cleanup/remove-scot-deliverable-20260912 into master	2026-09-15 12:57:59 +00:00
abiba-bot	b451d6f81a	Merge branch 'master' into cleanup/remove-scot-deliverable-20260912	2026-09-15 12:53:37 +00:00
abiba-bot	fe6eb35291	Merge pull request 'ci: make PR validation unconditional - the paths filter silently skipped whole classes of pull requests' (#103) from fm/ci-paths-filter-skips-deliverables-prs-20260915 into master	2026-09-15 12:53:20 +00:00
abiba-bot	40cf057370	Merge pull request 'fix(backups): document the thin-pool headroom and staging-directory preconditions, with the incidents that justify them' (#97) from fix/backup-safety-preconditions-20260915 into master	2026-09-15 12:19:19 +00:00
abiba-bot	b386bd0c19	Merge pull request 'fix(keys): correct the key-lifecycle contracts to the measured truth' (#95) from fix/key-expiry-enforcement-20260915 into master	2026-09-15 05:37:45 +00:00
abiba-bot	1d20fbaa7f	Merge pull request 'fix(agent-health): gateway liveness reports a probe failure as a probe failure, never as an agent outage' (#93) from fix/agent-health-gateway-leg-deterministic-20260914 into master	2026-09-14 16:45:25 +00:00
abiba-bot	4fe4f3621d	Merge pull request 'fix(monitoring): probe precision - any HTTP status means alive, failed probes never become service verdicts' (#92) from fix/probe-precision-20260914 into master	2026-09-14 15:07:35 +00:00
abiba-bot	6a1c4967db	Merge pull request 'fix(disk-gc): deterministic reachability verdict and correctly labelled disk figures' (#91) from fix/disk-gc-probe-deterministic-20260914 into master	2026-09-14 14:43:43 +00:00
abiba-bot	cb26ee06d6	Merge pull request 'fix(hermes): separate POLICY observations from FAULT findings in the audit contracts' (#90) from fix/hermes-violation-classification-20260914 into master	2026-09-14 12:50:15 +00:00
abiba-bot	71ceda0042	Merge pull request 'fix(hermes): reachability verdict must not come from the remote command's exit code' (#89) from fix/hermes-reachability-20260914 into master	2026-09-14 12:20:09 +00:00
abiba-bot	cb36ff1ea5	Merge pull request 'fix(monitoring): litellm-health script - pool-alias timeout and leaked key-list debug output' (#88) from fix/litellm-health-timeout-and-debug-20260914 into master	2026-09-14 03:34:58 +00:00
abiba-bot	e648b5ac0e	Merge pull request 'feat(monitoring): add scripts/litellm-health-check.py so the litellm-health contract is executed, not improvised' (#87) from fix/litellm-health-executor-script-20260913 into master	2026-09-14 03:20:36 +00:00
abiba-bot	ba76f2c7d3	Merge pull request 'fix(contracts): abiba default model row + disk-gc access-method note' (#86) from fix-litellm-health-keylist-20260913 into master	2026-09-13 19:09:19 +00:00
abiba-bot	ef168d9690	Merge pull request 'fix(litellm-health): run the key-list admin call on the gateway host, not inside the container' (#84) from fix-litellm-health-registry-20260912 into master	2026-09-13 03:20:04 +00:00
abiba-bot	89651cf37c	Merge pull request 'fix(monitoring): make credential sourcing explicit and fail loudly when missing' (#83) from fix-litellm-health-registry-20260912 into master	2026-09-12 23:22:43 +00:00
abiba-bot	e38598eea4	Merge pull request 'fix: restore per-host probe coverage + sweep residual retired names' (#82) from fix-litellm-health-registry-20260912 into master	2026-09-12 22:35:55 +00:00
abiba-bot	b3644f0292	Merge pull request 'fix(disk-gc): hard guest-level report-only gate for CT 111/.129 + correct stale fleet map' (#81) from fix/disk-gc-report-only-129 into master	2026-09-12 19:13:45 +00:00
abiba-bot	d9e06863d8	Merge pull request 'fix(audit): stop requiring the retired gpu-light alias; derive model fields; sweep retired names' (#80) from fix/retired-alias-sweep-20260912 into master	2026-09-12 17:15:05 +00:00
abiba-bot	1dc040251d	Merge pull request 'docs(litellm-health): single source of truth, gpu-vision alias, litellm-health as live owner' (#79) from fix/litellm-health-drift-20260912 into master	2026-09-12 16:05:28 +00:00
abiba-bot	e3752af162	Merge pull request 'fix(zulip-health): retire the dead kagentz Zulip adapter leg' (#78) from fix/zulip-kagentz-adapter-20260912 into master	2026-09-12 14:34:08 +00:00
abiba-bot	9c8637bcaf	Merge pull request 'fix: correct Agent Zero A2A probe port in zulip-monitor.sh' (#76) from fix/a2a-port-20260911 into master	2026-09-11 22:17:37 +00:00
abiba-bot	862356bcac	Merge pull request 'fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture' (#73) from fm/dsh-web-auth-restart-20260911 into master	2026-09-11 18:21:02 +00:00
abiba-bot	767bd22d9c	no-mistakes(document): Align zulip-health v3.2.0 registry metadata and B4 formatting	2026-09-11 17:49:25 +00:00
abiba-bot	e97145c88f	no-mistakes(review): re-sample systemd invocation each pass during token wait	2026-09-11 17:34:53 +00:00
abiba-bot	55f1208eb8	no-mistakes(review): scope dsh token to invocation; log nginx diagnostics	2026-09-11 17:30:33 +00:00
abiba-bot	b9adf353ee	no-mistakes(review): guard missing include, non-fatal pending reload, chmod stash	2026-09-11 17:24:12 +00:00
abiba-bot	aeb66ea22d	no-mistakes(review): fix pending-reload path, token modes, restart check	2026-09-11 17:17:26 +00:00
abiba-bot	288f74cf84	no-mistakes(review): reprobe dsh tokens; persist pending nginx reload on failure	2026-09-11 17:12:11 +00:00
abiba-bot	c66671dbee	no-mistakes(review): simplify dsh token selection and reload state machine	2026-09-11 17:07:00 +00:00
abiba-bot	b80d3142aa	no-mistakes(review): harden dsh token reload retry, legacy bypass, cookie verification	2026-09-11 16:59:55 +00:00
abiba-bot	266fa1f835	fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture ... Correct the dsh-web authentication fix after parent correction: - Remove the unauthenticated :8081 endpoint (0.0.0.0 bind with no auth_request = full Authentik bypass for the LAN). The script now removes /etc/nginx/sites-enabled/dsh.token automatically if it reappears. - Put the login path inside the Authentik-gated :80 server block as location = /dsh-web-login; proxy to dsh-web with Host = tankodhs.sysloggh.net so the 30-day cookie is bound to the public authority, never to 127.0.0.1:3080. - Isolate the rotating token in a generated include /etc/dsh-web/nginx-login.conf; reload nginx only when it changes. - Replace the disruptive capture (systemctl stop/start dsh-web) with a non-disruptive read of the running service's journal, scoped to the current systemd invocation so a restarted process's stale token is never reused while the new banner is still pending. - Keep x-dsh-task-board-proxy-token and Host $ak_origin_host intact in '/'. - Document the corrected design (B4) in zulip-health.prose.md, v3.2.0. Live-verified 2026-09-11: no auth bypass (302), :8081 refused (000), a cookie minted before two dsh-web restarts still returns 200, the refreshed token mints a fresh cookie, and the systemd ExecStartPost/timer refreshes the token automatically without touching dsh-web.	2026-09-11 16:52:45 +00:00
abiba-bot	85ea1f4f3d	no-mistakes(review): harden dsh token capture: loopback bind, atomic nginx config	2026-09-11 15:22:41 +00:00
abiba-bot	b2a259fa23	fix: add dsh-web restart-persistent authentication ... - Add capture-dsh-token.sh script that captures the dsh-web launch token - Add login endpoint (/dsh-web-login on :8081) that mints 30-day auth cookie - Document the authentication flow in zulip-health.prose.md (Platform B4) - Cookie is authority-bound to 127.0.0.1:3080 with 30-day expiry - After first login, subsequent requests use the cookie — no token required	2026-09-11 14:56:57 +00:00
abiba-bot	a1ffeaad34	Merge pull request 'update(infrastructure-update): v1.3.0 — full 5-host Docker ecosystem coverage (live-verified 2026-09-08)' (#64) from update/docker-ecosystems-20260908 into master	2026-09-10 23:21:44 +00:00
abiba-bot	14bed6e916	Merge pull request 'fix(monitoring): stop monitoring Mumuni from this host (moved to CT105/.14)' (#71) from fm/denya-mumuni-monitor-removal-20260910 into master	2026-09-10 12:30:19 +00:00
abiba-bot	4f59b82404	no-mistakes(document): Refresh stale Mumuni roster docs and registry metadata	2026-09-10 10:26:00 +00:00
abiba-bot	8a4ee4cf5a	no-mistakes(review): Pin Mumuni removal behaviorally and fix digest import bug	2026-09-10 10:18:38 +00:00
abiba-bot	b1462f3e79	Merge pull request 'fix(monitoring): probe-drift round 2 — gpu port, PVE liveness, report-only visibility, report provenance' (#70) from fm/probe-drift-round2-20260909 into master	2026-09-10 02:17:01 +00:00
abiba-bot	19ed186d0a	no-mistakes(document): Scope gpu-monitor liveness rule to bare-200 probes	2026-09-10 02:04:07 +00:00
abiba-bot	88f27e75ed	no-mistakes(document): Refresh stale health-check version, provenance, and lint evidence	2026-09-10 02:01:20 +00:00
abiba-bot	bbdf6c1249	no-mistakes(review): Restore quiet-mode silence; keep provenance on failure alert	2026-09-10 01:52:38 +00:00
abiba-bot	1974959cc9	no-mistakes(review): Gate wrapper checks on executed infisical; scope liveness guide	2026-09-10 01:46:06 +00:00
abiba-bot	c59c9fb174	no-mistakes(review): Ignore commented infisical paths; normalize probe-model tests	2026-09-10 01:41:27 +00:00
abiba-bot	194e256ac5	no-mistakes(review): Harden health-check provenance, infisical verification, report-only JSON, tests	2026-09-10 01:35:44 +00:00
abiba-bot	c66d9c1e20	fix: probe-drift round 2 — stale monitoring expectations (health check, PVE API, GPU port 80, report provenance) ... Second probe-drift correction pass after #65/#66/#68. All four legs were stale consumer expectations, not live faults. 1. scripts/agent-health-check.py (v4) - abiba declared pi-only runtime (harness purge): Hermes-era gateway, config and wrapper legs are skipped instead of failing. - koby declared report_only (captain ruling 2026-08-17, Rule 17): every koby leg is detected and reported, never counted as a fleet failure or repaired. - koby's CT 111 mapping corrected to storepve (.6); the old amdpve mapping made `pct status 111` fail and read as ct-unreachable. - wrapper check no longer FAILs .env-based wrappers that legitimately never invoke infisical (koonimo). - keys load in main() (load_agent_keys) so the module is importable/testable. - every run prints absolute execution provenance (script + cwd), in the header and in --json. Before: 6 FAILURE(S). After: 0 failures, koby reported read-only. 2. infrastructure-monitoring.prose.md - PVE API probe repointed from CT 116 (no pveproxy, 000) to the five real nodes on https://<node>:8006/api2/json/version, all 401 = alive. - any-HTTP-response liveness rule added (401/3xx alive; 000/timeout = DOWN). - LiteLLM health documented as 301 -> /litellm/health/liveliness, not bare 200. 3. gpu-monitor.prose.md - GPU health probes on :8080 (or router /health/unified); bare port 80 on a GPU host is forbidden (no listener -> false DEGRADED). - router /health/unified 301 -> /gpu/gpu-data documented as alive. - port-discipline + liveness rule + direct-fallback execution step. 4. Report provenance (all contracts) - docs/AUTHORING-GUIDE.md documents the rule; scripts/prose-lint.sh enforces that any **Report format** contract states an absolute path (pwd -P). - provenance added to gpu-monitor, infrastructure-monitoring, proxmox-monitor. Tests: tests/test_probe_drift.py (23 passed); prose-lint.sh clean + shellcheck clean; CI frontmatter validation passes. Evidence with per-leg before/after and absolute paths: docs/probe-drift-round2-evidence.md.	2026-09-10 01:23:54 +00:00
abiba-bot	532250b017	Merge pull request 'fix(zulip-monitor): read nested zulip.connected; probe failures alert and never restart' (#69) from fm/zulip-monitor-false-selfheal-20260909 into master	2026-09-09 11:09:14 +00:00
abiba-bot	91d16d2693	Merge pull request 'fix(zulip-monitor): stream alert body carries real content; WARN on delivery failure' (#68) from fm/zulip-monitor-stream-body-20260909 into master	2026-09-09 04:21:37 +00:00
abiba-bot	95b4a0e6b0	Merge pull request 'fix(agent-health-check): correct unit names, abiba key path, pid crash, uptime math (script-only)' (#65) from fm/agent-health-probe-repoint-20260907 into master	2026-09-09 01:39:29 +00:00
abiba-bot	028f276be4	Merge pull request 'fix(zulip-health): tanko probe via amdpve pct + loopback-any-HTTP alive rule + zulip-monitor.sh stale-path fix' (#66) from fm/zulip-health-contract-tanko-probe-via-am-65 into master	2026-09-09 01:39:16 +00:00
abiba-bot	0e4eda0abb	Merge pull request #63: probe alignment across monitoring contracts (proxmox/docker-stats 9324, pve-exporter 9221 localhost-only; gpu-monitor, zulip-health)	2026-09-08 08:54:30 +00:00
abiba-bot	09065e7dee	Merge pull request 'Fix zulip-monitor.sh: Remove email spam, use Zulip #agent-hub only' (#57) from fix/zulip-monitor-email-fix into master	2026-08-30 12:24:51 +00:00
abiba-bot	b01469ba18	Merge pull request 'fix: standardize Hermes contract base URLs to authenticated path' (#53) from fix/hermes-key-enforcement-update into master	2026-08-28 17:16:18 +00:00
abiba-bot	b835986d44	Merge pull request 'Add check-health section with live probes to infrastructure-monitoring contract' (#51) from fix/infra-check-health into master ... Merged by captain approval 2026-08-22: add check-health section with live probes to infrastructure-monitoring contract	2026-08-23 00:01:39 +00:00
abiba-bot	2f0c3c1850	fix: update contracts for hwepve 6th node + Mumuni recovery	2026-07-23 18:47:17 +00:00
abiba-bot	8b09c78efd	Merge: PR #26 conflict resolution — hwepve 6th node + qwen model ref	2026-07-23 18:10:36 +00:00
abiba-bot	75381f9737	Captain decision batch 2026-07-21: ornith decommission, 256K→128K context, Mumuni Discord disable ... Three contract updates per captain decision batch. Validated through no-mistakes pipeline (green).	2026-07-23 09:13:06 +00:00
abiba-bot	190ceb9be4	Merge pull request 'GPU workload redistribution + lessons learned July 2026' (#15) from feat/gpu-workload-compression-jul2026 into master	2026-07-12 23:40:12 +00:00
abiba-bot	0134ad8be6	Merge pull request 'fix: cron alignment + VM→bare metal drift' (#11) from fix/cron-alignment-jul2026 into master	2026-07-09 06:28:04 +00:00
abiba-bot	c31dbad95f	Merge pull request 'fix: IP drift and container count from live testing' (#10) from fix/testing-drift-jul2026 into master	2026-07-09 06:24:07 +00:00
abiba-bot	4164ee5ed0	Merge pull request 'feat: consolidate litellm-health into litellm-self-heal' (#9) from feat/consolidate-litellm-contracts into master	2026-07-09 06:02:47 +00:00
abiba-bot	e4ab43f1c6	Merge pull request 'fix: LiteLLM contracts — align with 2026-07-08 architecture changes' (#8) from fix/litellm-contracts-jul2026 into master	2026-07-09 05:37:48 +00:00
abiba-bot	a7fedf71c6	Merge pull request 'fix: contract improvements from 2026-07-09 run log review' (#7) from fix/contract-improvements-jul2026 into master	2026-07-09 05:33:25 +00:00
abiba-bot	a3786ab289	Merge pull request 'disk-gc: 2026-07-09 run — amdpve Docker bloat resolved (11.56GB)' (#6) from feat/disk-gc-amdpve-2026-07-09 into master	2026-07-09 05:23:30 +00:00