Repository navigation

feat(release): 0.2.0 — six specifications, no upgrade path from 0.1.x - #17

Merged

nofuturekid merged 64 commits into

mainfrom

feat/0.2.0

Aug 10, 2026

Merged

feat(release): 0.2.0 — six specifications, no upgrade path from 0.1.x#17
nofuturekid merged 64 commits into
mainfrom
feat/0.2.0

Commits on Aug 7, 2026
- feat(store,ca): phase 0 of spec 0017 — schema rewrite for multiple CA hierarchies
  
  nofuturekid
  and
  claude
  committed
  b81a83b
- feat(tests,spec): phase 1a of spec 0017 — test-driven contract for multiple CA hierarchies
  
  nofuturekid
  and
  claude
  committed
  ded9322
- feat(ca): phase 1b of spec 0017 — implement multiple CA hierarchies
  
  nofuturekid
  and
  claude
  committed
  464706d
- fix(test,ca): catch renew_in_place mutation — verify key reuse and self-signature
  
  nofuturekid
  and
  claude
  committed
  003a8e0
- spec(0022): native HTTPS support architecture and requirements
  
  nofuturekid
  and
  claude
  committed
  e863acd
- spec(0018): per-issuer permissions architecture and requirements
  
  nofuturekid
  and
  claude
  committed
  3980796
- fix(store): enforce SQLite foreign keys, fix ACME order insert ordering
  
  nofuturekid
  and
  claude
  committed
  ddd42cf
- spec(0018): fix ruff format on embedded Python code fence
  
  nofuturekid
  and
  claude
  committed
  1371728
- docs(adr): record the TLS environment-variable deviation, close two spec gaps
  
  nofuturekid
  and
  claude
  committed
  9182244
- feat(server): phase 0 of spec 0022 -- runtime skeleton and live test harness
  
  nofuturekid
  and
  claude
  committed
  ce551ed
- test(0022): phase 1 -- the contract for native HTTPS, written before the code
  
  nofuturekid
  and
  claude
  committed
  c58c8f9
- feat(tls): phase 2 of spec 0022 -- native HTTPS, implemented against the contract
  
  nofuturekid
  and
  claude
  committed
  157d3a3
Commits on Aug 8, 2026
- fix(tls): implement FR-17's retire guard, and make the shutdown test able to fail
  
  nofuturekid
  and
  claude
  committed
  0a32137
- spec(0018): correct three things the world changed underneath it
  
  nofuturekid
  and
  claude
  committed
  eb91281
- feat(store): phase 0 of spec 0018 -- the grant tables
  
  nofuturekid
  and
  claude
  committed
  18d0e5d
- test(0018): the contract for per-issuer permissions, written before the code
  
  nofuturekid
  and
  claude
  committed
  670a13d
- feat(grants): phase 1 of spec 0018 -- per-issuer permissions, enforced at every door
  
  nofuturekid
  and
  claude
  committed
  7e34362
- spec(0019): ACME per issuer, and what it does and does not close
  
  nofuturekid
  and
  claude
  committed
  a93feb4
- feat(acme): spec 0019 -- an ACME account belongs to one issuer
  
  nofuturekid
  and
  claude
  committed
  59c1a18
- test(0019): pin the ACME helper's signature, which was the only thing guarding it
  
  nofuturekid
  and
  claude
  committed
  9291d09
- spec(0020): name constraints, enforced by cabin rather than hoped for
  
  nofuturekid
  and
  claude
  committed
  224cbb4
- test(0020): the contract for name constraints, written before the code
  
  nofuturekid
  and
  claude
  committed
  250f58c
- feat(ca): spec 0020 -- name constraints, enforced before signing
  
  nofuturekid
  and
  claude
  committed
  15abdd6
- spec(0021): cross-signing, for the devices that cannot be reached
  
  nofuturekid
  and
  claude
  committed
  c56f250
- feat(ca): spec 0021 -- cross-signing, and the expired path that must drop itself
  
  nofuturekid
  and
  claude
  committed
  cac20ca
- test(cross-signing): pin load_cross's own public-key comparison
  nofuturekid
  committed
  f7932da
- chore(release): close the changelog for 0.2.0
  
  nofuturekid
  and
  claude
  committed
  0fd5584
- test: stop asserting on the prose that openssl prints
  
  nofuturekid
  and
  claude
  committed
  16acd82
- docs(readme): describe the cabin that 0.2.0 actually ships
  
  nofuturekid
  and
  claude
  committed
  ded1b44
- spec(0023): split the CA page, which four specifications had grown into one
  
  nofuturekid
  and
  claude
  committed
  8b7a96b
- test(0023): the contract for the split CA pages, written before the code
  
  nofuturekid
  and
  claude
  committed
  4d60f65
- feat(web): spec 0023 -- split the CA page into four
  
  nofuturekid
  and
  claude
  committed
  825fa54
- spec(0024): stop appending to names, split root from intermediate, fix the actions
  
  nofuturekid
  and
  claude
  committed
  21d980e
- test(0024): the contract for verbatim names and separated creation
  
  nofuturekid
  and
  claude
  committed
  dc6a6ea
- feat(ca): spec 0024 -- verbatim names, root and intermediate as two steps
  
  nofuturekid
  and
  claude
  committed
  265c79a
- spec(0025): one place for everything that moves material in or out
  
  nofuturekid
  and
  claude
  committed
  a623eca
- test(0025): the contract for the transfer area, written before the code
  
  nofuturekid
  and
  claude
  committed
  b15fe61
- feat(web): spec 0025 -- one place for everything that moves material in or out
  
  nofuturekid
  and
  claude
  committed
  971bf99
- fix(web): give the hierarchy row controls their own spacing
  
  nofuturekid
  and
  claude
  committed
  a8515fb
- test(layout): make the overflow probe reach the selects it claims to cover
  
  nofuturekid
  and
  claude
  committed
  57d024e
- fix(web): report a missing issuer per hierarchy, not per instance
  
  nofuturekid
  and
  claude
  committed
  15ff343
Commits on Aug 9, 2026
- test: guard three behaviours the suite could not notice being broken
  
  nofuturekid
  and
  claude
  committed
  93963c0
- docs(changelog): record specs 0023 to 0025
  
  nofuturekid
  and
  claude
  committed
  4a03c9c
- docs(spec): 0026 -- the hierarchy page becomes a list, its rows get pages
  
  nofuturekid
  and
  claude
  committed
  c8a1921
- feat(web): spec 0026 -- the hierarchy page lists its rows, the rows get pages
  
  nofuturekid
  and
  claude
  committed
  ebb8845
- docs(spec): fill in the index between 0014 and 0026
  
  nofuturekid
  and
  claude
  committed
  36e79d4
- fix(ca): refuse to renew a retired CA row
  
  nofuturekid
  and
  claude
  committed
  c455922
- docs(spec): 0027 -- the shell, the tokens and the vocabulary
  
  nofuturekid
  and
  claude
  committed
  09b4142
- docs(spec): correct five defects in 0027 found by writing its tests
  
  nofuturekid
  and
  claude
  committed
  433b570
- test(0027): the contract for the shell and the tokens, before the code
  
  nofuturekid
  and
  claude
  committed
  ee56f1d
- feat(web): spec 0027 -- the design's shell, palette and vocabulary
  
  nofuturekid
  and
  claude
  committed
  f8d5ae1
- docs(spec): 0028 -- the detail pages take the design's arrangement
  
  nofuturekid
  and
  claude
  committed
  051b006
- docs(spec): correct 0028's width argument, which measurement disproved
  
  nofuturekid
  and
  claude
  committed
  ebcd5e6
- test(0028): the contract for the detail pages, before the code
  
  nofuturekid
  and
  claude
  committed
  457c6f1
- feat(web): spec 0028 -- the detail pages take the design's arrangement
  
  nofuturekid
  and
  claude
  committed
  4cc5885
- docs(spec): 0029 -- the form pages and the first interactivity
  
  nofuturekid
  and
  claude
  committed
  b1f5631
- docs(spec): correct four unsatisfiable criteria in 0029, and record the case
  
  nofuturekid
  and
  claude
  committed
  7446282
- feat(web): spec 0029 -- the form pages and the first htmx in this project
  
  nofuturekid
  and
  claude
  committed
  45ea2c0
- docs(spec): 0030 -- the remaining pages, the flash and the 403 page
  
  nofuturekid
  and
  claude
  committed
  964a208
Commits on Aug 10, 2026
- docs(spec): correct fourteen defects in 0030, two of them its own rule
  
  nofuturekid
  and
  claude
  committed
  59fac9a
- feat(web): spec 0030 -- the remaining pages, the flash and the refusal page
  
  nofuturekid
  and
  claude
  committed
  6b184bb
- fix(tests): stop asking the browser which colour scheme it prefers
  
  nofuturekid
  and
  claude
  committed
  5603280
- docs(design): record every deliberate departure from the design
  
  nofuturekid
  and
  claude
  committed
  c43c69a
- chore(release): close the changelog for 0.2.0
  
  nofuturekid
  and
  claude
  committed
  5e86cf4

Commits

Commits on Aug 7, 2026

Commits on Aug 8, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026