This website requires JavaScript.
3be9970c15
feat: add control panel
thanhnv
2026-07-08 19:07:35 +09:00
a07b15e489
docs(plans): Plan-13 Track 1 (read-only Ops Console) marked done in status trackers
thanhnv and Claude Opus 4.8
2026-07-08 17:28:35 +09:00
94a7168362
chore: gitignore tsconfig.tsbuildinfo (build cache, not source)
thanhnv and Claude Opus 4.8
2026-07-08 17:27:00 +09:00
63dd44a11b
feat(plan-13): read-only Ops Console (NestJS API + React UI) — Track 1
thanhnv and Claude Opus 4.8
2026-07-08 16:59:56 +09:00
98d699d844
ci(release): auto-publish split bundles to Gitea package registry on version tags
thanhnv and Claude Opus 4.8
2026-07-08 16:06:28 +09:00
6cb96ce249
fix(governance): commit policy-bundle with packages/casan-harness paths (+ re-signed manifest)
thanhnv and Claude Opus 4.8
2026-07-08 15:57:33 +09:00
8c20cfde9f
feat(packaging): level-based source hub — Core + DevKit packaging, Platform/Enterprise scaffold
thanhnv and Claude Opus 4.8
2026-07-08 15:55:37 +09:00
4918012199
docs(plans): sync roadmap status + paths to post-restructure state
thanhnv and Claude Opus 4.8
2026-07-08 14:57:01 +09:00
09ac4c674d
docs: restore FPT_CASAN_Full + harness-assessment into docs/notes
thanhnv and Claude Opus 4.8
2026-07-08 14:49:31 +09:00
fa3dd94c76
docs: restore casan-next-plans roadmap into docs/plans (was wrongly deleted)
thanhnv and Claude Opus 4.8
2026-07-08 14:46:50 +09:00
18997caf49
docs: align all documentation with the new repo structure
thanhnv and Claude Opus 4.8
2026-07-08 14:36:27 +09:00
36a4812ef3
refactor(structure): promote app to repo root + remove redundant workspace cruft
thanhnv and Claude Opus 4.8
2026-07-08 13:26:36 +09:00
7101af9fd4
feat(plan-01): Phase 4c — hard cutoff, remove .specify compat facade
thanhnv and Claude Opus 4.8
2026-07-08 12:28:37 +09:00
e891981b59
feat(plan-01): Phase 4b — external callers to packages paths + registry (Task 1.7)
thanhnv and Claude Opus 4.8
2026-07-08 11:36:24 +09:00
3adc48ed82
feat(plan-01): Phase 4a — make harness location-independent (facade-free capable)
thanhnv and Claude Opus 4.8
2026-07-08 10:50:50 +09:00
f2ea5590b1
feat(plan-01): Phase 3 — split domain OKR data into apps/okr/domain
thanhnv and Claude Opus 4.8
2026-07-08 10:01:15 +09:00
d54d7f5f4c
feat(plan-01): Phase 2 — relocate level5/agentops config + init-options to package
thanhnv and Claude Opus 4.8
2026-07-08 00:36:06 +09:00
664bd1f00c
feat(plan-01): Phase 1 — relocate harness code to packages/casan-harness (symlink facade)
thanhnv and Claude Opus 4.8
2026-07-08 00:06:00 +09:00
2c765c9a45
feat(plan-01): Phase 0.5 — path indirection via casan-paths.sh (no file moves)
thanhnv and Claude Opus 4.8
2026-07-07 22:07:41 +09:00
61c3a7c648
feat(plan-01): Phase 0 — skeleton packages/casan-harness + apps/okr/domain
thanhnv and Claude Opus 4.8
2026-07-07 20:35:54 +09:00
3e7f76f6f5
feat: plan-01 Phase 0 — restructure skeleton (packages/casan-harness + apps/okr/domain)
thanhnv and Claude Opus 4.8
2026-07-07 20:16:31 +09:00
5fbc017a2c
feat: update plan 17
thanhnv
2026-07-07 18:58:21 +09:00
ae4fc7112c
feat: update plan 16 sec14-26
thanhnv
2026-07-07 15:46:36 +09:00
0c60ed33e9
doc update
thanhnv
2026-07-06 23:26:19 +09:00
d695a598ee
feat: plan 16 P2 batch 2 (SEC-12 drift, SEC-29 audit fail-closed, SEC-30 replay, SEC-15 low)
thanhnv and Claude Opus 4.8
2026-07-06 22:55:24 +09:00
8c06a55aed
feat: plan 16 P2 batch 1 (SEC-13 SSRF, SEC-27 log-escape, SEC-28 path-traversal)
thanhnv and Claude Opus 4.8
2026-07-06 22:39:18 +09:00
3432ae59e1
feat: plan 16 P1 complete (SEC-07 approval + SEC-10 agent identity)
thanhnv and Claude Opus 4.8
2026-07-06 22:31:57 +09:00
e70f0815ab
feat: plan 16 P1 (SEC-08/09/19/20/21) — fail-open/DoS/authz hardening
thanhnv and Claude Opus 4.8
2026-07-06 22:21:34 +09:00
8c3c5e8bff
feat: plan 16-01
thanhnv
2026-07-06 21:47:38 +09:00
4419cd9eae
update doc and optimize
thanhnv
2026-07-06 17:47:12 +09:00
ace442da0e
Add CASAN CI harness gate
thanhnv
2026-07-06 12:47:18 +09:00
c49ab251df
Add source generation mode for first artifacts
thanhnv
2026-07-06 12:38:03 +09:00
d0bde2a8b3
Complete cloud provider patch MVP
thanhnv
2026-07-06 12:32:54 +09:00
c7a1c743cb
Update CASAN plan index status
thanhnv
2026-07-06 12:05:42 +09:00
fc736aabf1
Add local production infra lab
thanhnv
2026-07-06 12:00:27 +09:00
ec261bcbc5
remove video
thanhnv
2026-07-06 11:36:33 +09:00
e79d7973fb
Complete CASAN backlog tier 1 controls
thanhnv
2026-07-06 11:31:17 +09:00
571c2b7e80
doc: update status
thanhnv
2026-07-06 10:36:27 +09:00
a832c40bdb
update doc/log
thanhnv
2026-07-06 10:13:43 +09:00
c94327358a
Merge deep-gap closers into main (C7 incident/kill-switch · VI/JA multilingual · true container isolation · split/classifier injection)
thanhnv
2026-07-06 09:58:02 +09:00
3bd4f23855
Merge pull request 'Feat/plan07 track a hardening' (#7 ) from feat/plan07-track-a-hardening into main
admin
2026-07-06 00:52:51 +00:00
42115e3361
docs+demo: deep-gap closers — 211/0 re-score, HD1-HD4 scenes, status/README/scoring
thanhnv and Claude Opus 4.8
2026-07-06 09:51:39 +09:00
5ec1a0cc82
feat(h4): split-injection + classifier-injection resistance (Plan-07 B2 / V5,V6)
thanhnv and Claude Opus 4.8
2026-07-05 22:55:37 +09:00
cb61d52936
feat(c6): TRUE runtime isolation via container (Plan-07 C6 / V22)
thanhnv and Claude Opus 4.8
2026-07-05 22:49:03 +09:00
82c6317b4b
feat(h4): multilingual VI/JA injection detection (Plan-07 B1 / V2)
thanhnv and Claude Opus 4.8
2026-07-05 20:48:51 +09:00
f24ed21324
feat(c7): incident response — severity classifier + scoped kill-switch + runbook (V23)
thanhnv and Claude Opus 4.8
2026-07-05 20:41:48 +09:00
571f5d8cc3
docs(arch): add projectable visual architecture page (casan-architecture.html)
thanhnv and Claude Fable 5
2026-07-05 12:48:32 +09:00
bb1dc8ad9f
docs(arch): add before/after architecture files vs the vanilla spec-kit base
thanhnv and Claude Fable 5
2026-07-05 12:21:28 +09:00
fa9f91eb37
docs(video): add per-attack rebuttal companion (CASAN_VIDEO_DEFENSE.md)
thanhnv and Claude Fable 5
2026-07-05 01:51:12 +09:00
459fe7f4a3
docs(video): fix Video 1 close — "4 layers" conflated checkpoints with harnesses
thanhnv and Claude Fable 5
2026-07-05 01:38:08 +09:00
71f85f3e80
docs(video): frame the 3 videos as basic → advanced → deepest-gap
thanhnv and Claude Fable 5
2026-07-05 01:34:53 +09:00
e399c1f844
docs(video): rewrite 2-video script for non-technical audience + add Video 3 (H5+/H6+ hardening)
thanhnv and Claude Fable 5
2026-07-05 01:30:24 +09:00
da66a36f97
feat(h6): AgentOps hardening — live alerting, provider-API reconcile, hosted dashboard, window breaker (79→80)
thanhnv and Claude Fable 5
2026-07-05 01:14:46 +09:00
2af67ef6a5
docs: re-score from a real full run (155/0) after H5 hardening
thanhnv and Claude Opus 4.8
2026-07-04 23:51:50 +09:00
00aabfac4d
feat(video): add H5+ governance-hardening scenes to run-hardening.sh
thanhnv and Claude Opus 4.8
2026-07-04 23:19:52 +09:00
86e13a26ed
feat(h5): ① KMS key rotation/non-exportable + ② external WORM audit ledger
thanhnv and Claude Opus 4.8
2026-07-04 23:16:21 +09:00
e21a1472b1
feat(h5): approval-identity MVP — signed reviewer approvals (C4/V20)
thanhnv and Claude Opus 4.8
2026-07-04 23:07:16 +09:00
d8583fdb2e
docs(plan-07): re-score §2 readiness table after Track A + C-MVP + Evidence Pack
thanhnv and Claude Opus 4.8
2026-07-04 22:56:03 +09:00
9d63f7338c
docs: short closing-only narration for each video (CASAN_CHOT_2VIDEO.md)
thanhnv and Claude Opus 4.8
2026-07-04 22:19:39 +09:00
b1cb7b59de
docs: condensed 2-video script (Video 1 + Video 2 only)
thanhnv and Claude Opus 4.8
2026-07-04 22:17:03 +09:00
7870eb51e4
docs: professional voiceover/teleprompter script for both attack demo videos
thanhnv and Claude Opus 4.8
2026-07-04 22:01:08 +09:00
7a6e292dde
Merge pull request 'Feat/plan07 track a hardening' (#6 ) from feat/plan07-track-a-hardening into main
admin
2026-07-03 15:34:44 +00:00
2a3f06cd82
update video and attach playbook
thanhnv
2026-07-04 00:25:47 +09:00
7f81120999
docs: attack catalog (visual) + playbook (internal) covering both demo scripts
thanhnv and Claude Opus 4.8
2026-07-04 00:21:21 +09:00
2ffbda3fad
feat(video+deck): Part 2 hardening demo script + slide deck update
thanhnv and Claude Opus 4.8
2026-07-03 23:51:11 +09:00
4cc78f74eb
docs: honest hardening status + claim boundary (Plan-07 A/C-MVP, Plan-09)
thanhnv and Claude Opus 4.8
2026-07-03 23:07:31 +09:00
62004c8725
feat(evidence-pack): Plan-09 MVP — casan pack / verify-pack + certified-run gate
thanhnv and Claude Opus 4.8
2026-07-03 23:02:39 +09:00
dbeb8e89d2
feat(track-c-mvp): C3 data-exfil guard + C6 sandbox scaffold + Phase 2 suite
thanhnv and Claude Opus 4.8
2026-07-03 22:57:09 +09:00
c51e0f88a3
feat(track-c-mvp): C1 action gating + C2 supply-chain gate
thanhnv and Claude Opus 4.8
2026-07-03 22:51:43 +09:00
cf2c42b9fa
feat(a6-tests): Plan-07 Track A — A6 benign/FP budget + Phase 1 adversarial suite
thanhnv and Claude Opus 4.8
2026-07-03 22:46:33 +09:00
7e998f67c2
feat(h5-h6-hardening): Plan-07 Track A — A4 telemetry integrity, A5 cost controls
thanhnv and Claude Opus 4.8
2026-07-03 22:25:00 +09:00
ac40c0b281
feat(h4-hardening): Plan-07 Track A — A1 strict semantic, A2 unicode/encoding, A3 tool-output scan
thanhnv and Claude Opus 4.8
2026-07-03 22:20:50 +09:00
fbcef967e5
chore(freeze): snapshot demo state before Plan-07 hardening work
thanhnv and Claude Opus 4.8
2026-07-03 22:01:52 +09:00
fabd5f8783
Merge pull request 'Feat/casan log levels and real demo' (#5 ) from feat/casan-log-levels-and-real-demo into main
admin
2026-07-03 12:57:03 +00:00
392f190b7e
feat(model): implement OpenAI/Anthropic cloud backends + cloud-aware judge gate
thanhnv and Claude Opus 4.8
2026-07-03 11:38:59 +09:00
c08d119381
feat(demo): REAL=1 runs the live attack battery through the production wrapper
thanhnv and Claude Opus 4.8
2026-07-03 10:05:06 +09:00
1b61d7f381
feat(log): unified CASAN_LOG_LEVEL across Boss, agent step, harness wrapper
thanhnv and Claude Opus 4.8
2026-07-03 10:04:55 +09:00
2f06662f5d
scorecard: chấm live 2 mục hardcode; pipeline: fallback real + honest scoring doc
thanhnv and Claude Sonnet 4.6
2026-07-03 00:18:43 +09:00
fda0d6447d
add video demo
thanhnv
2026-07-03 00:18:04 +09:00
928f074b5f
feat: add optimize dsoc
thanhnv
2026-07-02 22:17:03 +09:00
a056cefa76
fix(backend-image): keep bcrypt native addon in runtime stage
thanhnv and Claude Opus 4.8
2026-07-01 22:42:47 +09:00
c0f61166a0
fix(ci): self-heal mysql env-file read access in deploy preflight
thanhnv and Claude Opus 4.8
2026-07-01 22:09:53 +09:00
82011a0c67
fix(ci): eliminate audit-signature flake + self-heal deploy docker access
thanhnv and Claude Opus 4.8
2026-07-01 21:44:20 +09:00
c31987caa2
fix(tool-audit-lib): always re-export local pubkey to audit-public.pem
thanhnv and Claude Sonnet 4.6
2026-07-01 21:37:13 +09:00
36375a64d6
update doc, etc
thanhnv
2026-07-01 20:48:30 +09:00
3e7690fe37
fix(security-gate): resolve tool-calls audit signature key mismatch
thanhnv and Claude Sonnet 4.6
2026-07-01 20:07:14 +09:00
cf467ed829
fix(ci): write DEPLOY_SSH_KEY via env var + strip CR + ensure trailing newline
thanhnv and Claude Sonnet 4.6
2026-07-01 19:04:34 +09:00
4bcc66d9db
fix(vault-kms): pass pubkey response via tmpfile not string literal
thanhnv
2026-07-01 18:36:11 +09:00
4fdeca2009
ci: trigger deploy run #11 — DEPLOY_SSH_KEY secret now configured
thanhnv
2026-07-01 18:15:33 +09:00
bef728c886
ci: trigger run #10 — unblock stalled run #9
thanhnv
2026-07-01 17:30:21 +09:00
f6cc723bf4
fix(ci): security-gate auto-installs frontend deps if vitest missing
thanhnv and Claude Sonnet 4.6
2026-07-01 17:27:09 +09:00
b0864a59d7
fix(ci): security-gate skips frontend tests when vitest not installed
thanhnv and Claude Sonnet 4.6
2026-07-01 17:24:57 +09:00
9229fee656
feat(deploy): switch to Oracle MySQL, separate CI runner, docker-compose deploy
thanhnv and Claude Sonnet 4.6
2026-07-01 16:37:56 +09:00
719f1147d1
ci: trigger run #6 — cancel orphaned security-gate task
thanhnv and Claude Sonnet 4.6
2026-07-01 14:53:14 +09:00
75298f6e4c
fix(ci): remove npm ci from security-gate — OOM-killed act-runner on 1GB VPS
thanhnv and Claude Sonnet 4.6
2026-07-01 14:42:46 +09:00
4386256554
fix(ci): job containers must join gitea_default network to resolve 'gitea' hostname
thanhnv and Claude Sonnet 4.6
2026-07-01 14:22:56 +09:00
7555e7e800
fix(ci): increase job container memory limit 512m→768m for harness tests
thanhnv and Claude Sonnet 4.6
2026-07-01 13:49:38 +09:00
e83f306971
fix(ci): run security-gate after frontend-tests to prevent OOM on 1GB VPS
thanhnv and Claude Sonnet 4.6
2026-07-01 13:47:20 +09:00
6d46e36bf3
fix(ci): remove duplicate docker.sock mount in act-runner options
thanhnv and Claude Sonnet 4.6
2026-07-01 13:13:53 +09:00
72d3e56308
ci: add root-level workflow for Gitea Actions
thanhnv and Claude Sonnet 4.6
2026-07-01 13:02:03 +09:00
thanhnv