Commits

Branch selector

main

User selector

All users

All time

Commit history

Commits on Jul 31, 2026

• vayushield: track server blocks by depth, and make the MCP verdict name its evidence

  Show description for 5589772
  johalputt

  committed
  5589772

  Copy full SHA for 5589772

Commits on Jul 30, 2026

• vayushield: stop the MCP remediation breaking the redirect it was pointed at

  Show description for a94b96f
  johalputt

  committed
  a94b96f

  Copy full SHA for a94b96f

• vayushield: judge what the MCP catch-all does, not that one exists

  Show description for 3f66789
  johalputt

  committed
  3f66789

  Copy full SHA for 3f66789

• v3.16.28 — the sitemap described 50,000 posts on a site that has 234,480

  Show description for d4e74b5
  johalputt

  committed
  d4e74b5

  Copy full SHA for d4e74b5

• v3.16.27 — refresh the posture digest on apply, and keep a verdict inside its card

  Show description for a9ef7c3
  johalputt

  committed
  a9ef7c3

  Copy full SHA for a9ef7c3

• v3.16.26 — the catch-all borrows a certificate instead of demanding a newer nginx

  Show description for 0f6a80b
  johalputt

  committed
  0f6a80b

  Copy full SHA for 0f6a80b

• v3.16.25 — say WHY nginx refused, and check its version before writing

  Show description for bd97db3
  johalputt

  committed
  bd97db3

  Copy full SHA for bd97db3

• v3.16.24 — the helper bootstraps cosign, and can be repaired without itself

  Show description for 1f97a47
  johalputt

  committed
  1f97a47

  Copy full SHA for 1f97a47

• v3.16.23 — a writable cache for cosign, and the guard that guarded it wrongly

  Show description for 4853732
  johalputt

  committed
  4853732

  Copy full SHA for 4853732

• vayushield-agent: give cosign a writable cache, in the unit and in the script

  Show description for 54ee45a
  johalputt

  committed
  54ee45a

  Copy full SHA for 54ee45a

• v3.16.22 — the hardening action rows were in the page and invisible

  Show description for cec4e8d
  johalputt

  committed
  cec4e8d

  Copy full SHA for cec4e8d

• v3.16.21 — the last two posture findings become buttons

  Show description for 95bcd50
  johalputt

  committed
  95bcd50

  Copy full SHA for 95bcd50

• v3.16.20 — the posture report contradicted itself in one line

  Show description for f1c59a0
  johalputt

  committed
  f1c59a0

  Copy full SHA for f1c59a0

• v3.16.19 — the challenge pass rate could not report anything but zero

  Show description for 3475bc0
  johalputt

  committed
  3475bc0

  Copy full SHA for 3475bc0

• v3.16.18 — keep the precision that survives dividing by the real population

  Show description for 3cfbce4
  johalputt

  committed
  3cfbce4

  Copy full SHA for 3cfbce4

• v3.16.17 — analytics honesty: real denominators, distinct labels, asserted containment

  Show description for 8d6d55a
  johalputt

  committed
  8d6d55a

  Copy full SHA for 8d6d55a

• analytics panel: stop calling two different populations 'views'

  Show description for 88a980a
  johalputt

  committed
  88a980a

  Copy full SHA for 88a980a

• vayukeep: assert backup-target containment at the filesystem call, not only upstream

  Show description for bc1a0fa
  johalputt

  committed
  bc1a0fa

  Copy full SHA for bc1a0fa

• analytics panel: take each bar's share of the real population, not of the rows shown

  Show description for 0330e87
  johalputt

  committed
  0330e87

  Copy full SHA for 0330e87

• analytics: stop the site counting itself as a referrer via a port

  Show description for 2e73894
  johalputt

  committed
  2e73894

  Copy full SHA for 2e73894

• v3.16.16 — stop the console service worker proxying navigations

  Show description for 2a03d31
  johalputt

  committed
  2a03d31

  Copy full SHA for 2a03d31

• ADR-0151 (Proposed): VayuFlow — deterministic automation with a declared blast radius

  Show description for f97e206
  johalputt

  committed
  f97e206

  Copy full SHA for f97e206

• ADR-0150: cite the release discipline, not the config file

  Show description for d2085e4
  johalputt

  committed
  d2085e4

  Copy full SHA for d2085e4

• ADR-0150 (Proposed): VayuVeil — endpoint observation control

  Show description for 1b30773
  johalputt

  committed
  1b30773

  Copy full SHA for 1b30773

Commits on Jul 29, 2026

• Audit the day's work by checking artifacts, not transports

  Show description for fc84c1f
  johalputt

  committed
  fc84c1f

  Copy full SHA for fc84c1f

• Release v3.16.15 — three empty schemas took the whole MCP tool list down

  Show description for 4131b94
  johalputt

  committed
  4131b94

  Copy full SHA for 4131b94

• Release v3.16.14 — Tier 3 metered the machine endpoints like a browser

  Show description for ece260b
  johalputt

  committed
  ece260b

  Copy full SHA for ece260b

• Release v3.16.13 — your own site was 93% of your referrals, in three panels

  Show description for df3e8ad
  johalputt

  committed
  df3e8ad

  Copy full SHA for df3e8ad

• Release v3.16.12 — an in-app update now reaches the privileged helper

  Show description for 5d3e61f
  johalputt

  committed
  5d3e61f

  Copy full SHA for 5d3e61f

• Standing rule: a hotfix is not a plan, and a run of them is not a violation

  Show description for 57eb8e3
  johalputt

  committed
  57eb8e3

  Copy full SHA for 57eb8e3

• Release v3.16.11 — the firewall could never be re-applied over itself

  Show description for ca584f2
  johalputt

  committed
  ca584f2

  Copy full SHA for ca584f2

• Release v3.16.10 — no install path had ever actually restarted the agent

  Show description for 39ca661
  johalputt

  committed
  39ca661

  Copy full SHA for 39ca661

• Release v3.16.9 — the upgrade button was inert, and a firewall read as an attack

  Show description for acddc0c
  johalputt

  committed
  acddc0c

  Copy full SHA for acddc0c

• Release v3.16.8 — the last terminal step becomes a button

  Show description for 5821283
  johalputt

  committed
  5821283

  Copy full SHA for 5821283

• VayuShield: the helper upgrades itself from the panel, verifying its own code

  Show description for b17d40f
  johalputt

  committed
  b17d40f

  Copy full SHA for b17d40f