| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | access: signatures required | tv | 4 days | 1 | -2/+15 |
| | | | | | | | | | "signatures": "required": a change counts only once a signature by its committer vouches for it, and waits until then; every node then signs every change it makes. Auth plan M6. | ||||
| * | access: the policy enforced | tv | 4 days | 1 | -3/+18 |
| | | | | | | | | | _continuum/access/policy ({"version": 1}) has every node screen every change it receives, on every path changes come in. A policy a node doesn't know stops its writes through the API. GET /admin/refused. Auth plan M6. | ||||
| * | remake: forgetting and releasing name their user | tv | 4 days | 1 | -0/+19 |
| | | | | | | | | Forget records and released quarantines name the user who made them, so they are judged by its capabilities. Auth plan M6. | ||||
| * | signatures: changes signed by their node | tv | 4 days | 1 | -0/+2 |
| | | | | | | | | | | | Every node signs the changes it commits with its node key, an Ed25519 signature over the change's hash, kept beside the document. One signature on an actor's latest change vouches for its earlier ones. Protocol data and paths listed in _continuum/access/signed are signed, and writes with ?signed=true. Auth plan M5. | ||||
| * | refuse misplaced authors | tv | 5 days | 1 | -0/+5 |
| | | |||||
| * | bootstrap: replace pull by progress notify | tv | 10 days | 1 | -0/+2 |
| | | |||||
| * | document: allow writes during rejoin | tv | 10 days | 1 | -100/+169 |
| | | |||||
| * | LWW everywhere, mostly | tv | 10 days | 1 | -0/+29 |
| | | |||||
| * | remake: copy stale view when writes stop | tv | 10 days | 1 | -0/+13 |
| | | | | | This ensures that stale reads show every write that was answered. | ||||
| * | state: drop epoch_tx | tv | 10 days | 1 | -3/+3 |
| | | | | | The stamp is the only lock-free epoch label. | ||||
| * | document: reject writes during rejoin | tv | 10 days | 1 | -2/+14 |
| | | |||||
| * | use Automerge as Document instead of AutoCommit | tv | 11 days | 1 | -5/+31 |
| | | | | | This allows a lot of operations to drop mut. | ||||
| * | rename AutoMerge to Document | tv | 11 days | 1 | -9/+9 |
| | | |||||
| * | remake needs sane clock | tv | 11 days | 1 | -0/+4 |
| | | |||||
| * | unify request_sync logic | tv | 12 days | 1 | -2/+1 |
| | | |||||
| * | move ChangeSet from swarm to document | tv | 12 days | 1 | -1/+2 |
| | | |||||
| * | unify sync_on predicate | tv | 12 days | 1 | -4/+2 |
| | | |||||
| * | unify source reset | tv | 12 days | 1 | -3/+2 |
| | | |||||
| * | peers from member list start as unknown | tv | 2026-10-28 | 1 | -3/+3 |
| | | |||||
| * | move keepalive and firewall to paths | tv | 2026-10-28 | 1 | -8/+18 |
| | | |||||
| * | rename PING/PONG to STATUS/STATUS_REPLY | tv | 2026-10-28 | 1 | -2/+2 |
| | | |||||
| * | introduce bounded blob downloads | tv | 2026-10-26 | 1 | -2/+6 |
| | | |||||
| * | wrap unix timestamps in newtype | tv | 2026-10-26 | 1 | -2/+2 |
| | | |||||
| * | unify peers snapshot logic | tv | 2026-10-26 | 1 | -16/+4 |
| | | |||||
| * | unify lock logic | tv | 2026-10-26 | 1 | -8/+3 |
| | | |||||
| * | split state module | tv | 2026-10-25 | 1 | -0/+276 |
