Commits

Branch selector

main

User selector

All users

Datepicker

All time

Commit history

Commits on Aug 12, 2026

• feat(gateway): make the wedge canary legible in the dashboard and /healthz (#74)

  Show description for 0b1e417
  

  jra3

  and

  claude

  authored
  0b1e417View commit details

  Copy full SHA for 0b1e417

  Browse repository at this point

• fix(gateway): stop the nav watchdog respawning healthy children on redirects (#72)

  Show description for a656f2e
  jra3

  authored
  a656f2eView commit details

  Copy full SHA for a656f2e

  Browse repository at this point

Commits on Aug 6, 2026

• fix(gateway): stop listening on the browser data plane (#20) (#71)

  Show description for fe5a29f
  jra3

  authored
  fe5a29fView commit details

  Copy full SHA for fe5a29f

  Browse repository at this point

Commits on Aug 5, 2026

• test(itest): make reaper-helper identify and fail loudly instead of exiting 0 (#70)

  Show description for 0ac26f7
  

  jra3

  and

  claude

  authored
  0ac26f7View commit details

  Copy full SHA for 0ac26f7

  Browse repository at this point

• fix(security): close the two free CHK-002 exposures (#20) (#69)

  Show description for db3d4d1
  

  jra3

  and

  claude

  authored
  db3d4d1View commit details

  Copy full SHA for db3d4d1

  Browse repository at this point

• fix(compose): plumb CHIKIN_VOLUME_GC and the BROWSER_* caps to the gateway (#62) (#62)

  Show description for c07f4c3
  

  jra3

  and

  claude

  authored
  c07f4c3View commit details

  Copy full SHA for c07f4c3

  Browse repository at this point

• fix(gitignore): ignore the itest/node_modules symlink, not just directories (#68)

  Show description for 5898eb3
  

  jra3

  and

  claude

  authored
  5898eb3View commit details

  Copy full SHA for 5898eb3

  Browse repository at this point

• fix(client): make keepalive and itest hold a real browser, and correct lazy-provisioning docs (#67)

  Show description for e097a92
  jra3

  authored
  e097a92View commit details

  Copy full SHA for e097a92

  Browse repository at this point

• fix(gateway): provision browsers lazily on first browser tool call and keep MCP SSE streams alive (#65)

  Show description for b96d0ea
  

  jra3

  and

  claude

  authored
  b96d0eaView commit details

  Copy full SHA for b96d0ea

  Browse repository at this point

Commits on Jul 24, 2026

• feat(reaper): reclaim attached-but-inactive fleet slots on a real browser clock (#57) (#61)

  Show description for 29adce1
  

  jra3

  and

  claude

  authored
  29adce1View commit details

  Copy full SHA for 29adce1

  Browse repository at this point

• fix(volumes): reap instance profile volumes; make golden un-prunable by name (#58, #59) (#60)

  Show description for 96b58f1
  

  jra3

  and

  claude

  authored
  96b58f1View commit details

  Copy full SHA for 96b58f1

  Browse repository at this point

• feat(gateway): surface the effective runtime config; guard the compose image swap (#56)

  Show description for ce85839
  

  jra3

  and

  claude

  authored
  ce85839View commit details

  Copy full SHA for ce85839

  Browse repository at this point

Commits on Jul 23, 2026

• harden(sandbox): re-enable Chrome's renderer sandbox in the browser container (H1) (#55)

  Show description for 80bc48f
  

  jra3

  and

  claude

  authored
  80bc48fView commit details

  Copy full SHA for 80bc48f

  Browse repository at this point

Commits on Jul 22, 2026

• feat(gateway): require a self-directing chikin_identify handle per session (#54)

  Show description for fe5e22f
  

  jra3

  and

  claude

  authored
  fe5e22fView commit details

  Copy full SHA for fe5e22f

  Browse repository at this point

• harden(images): pin base + first-party images for reproducibility (M4) (#53)

  Show description for 4088767
  

  jra3

  and

  claude

  authored
  4088767View commit details

  Copy full SHA for 4088767

  Browse repository at this point

• feat(bin): add chikin-record — one-command video/GIF capture of a browser (#52)

  Show description for e1b3e92
  

  jra3

  and

  claude

  authored
  e1b3e92View commit details

  Copy full SHA for e1b3e92

  Browse repository at this point

• harden(gateway): isolate shared Downloads dir per browser (M2) (#51)

  Show description for f22113e
  

  jra3

  and

  claude

  authored
  f22113eView commit details

  Copy full SHA for f22113e

  Browse repository at this point

• harden(gateway): per-container resource caps on every browser (M3) (#50)

  Show description for ec48889
  

  jra3

  and

  claude

  authored
  ec48889View commit details

  Copy full SHA for ec48889

  Browse repository at this point

• Merge pull request #49 from jra3/john/security-audit-tidy

  Show description for a92593d
  jra3

  authored
  a92593dView commit details

  Copy full SHA for a92593d

  Browse repository at this point

• tidy(gateway): post-audit cleanup — dashboard Host guard, env rename, stale comment

  Show description for 8d3538e
  

  jra3

  and

  claude

  committed
  8d3538eView commit details

  Copy full SHA for 8d3538e

  Browse repository at this point

• Merge pull request #44 from jra3/john/security-mcp-host-guard

  Show description for 9b6644a
  jra3

  authored
  9b6644aView commit details

  Copy full SHA for 9b6644a

  Browse repository at this point

• Merge pull request #45 from jra3/john/security-bridge-dir-guard

  Show description for d67ca90
  jra3

  authored
  d67ca90View commit details

  Copy full SHA for d67ca90

  Browse repository at this point

• Merge main into john/security-mcp-host-guard

  Show description for 6ea51e1
  

  jra3

  and

  claude

  committed
  6ea51e1View commit details

  Copy full SHA for 6ea51e1

  Browse repository at this point

• Merge pull request #39 from jra3/john/security-vnc-origin

  Show description for 48f0f67
  jra3

  authored
  48f0f67View commit details

  Copy full SHA for 48f0f67

  Browse repository at this point

Commits on Jul 21, 2026

• Merge branch 'john/security-vnc-origin' (buildSelfHosts refactor)

  Show description for 53869ae
  

  jra3

  and

  claude

  committed
  53869aeView commit details

  Copy full SHA for 53869ae

  Browse repository at this point

• refactor(gateway): read DASHBOARD_ORIGINS via config, extract buildSelfHosts

  Show description for 0f26a72
  

  jra3

  and

  claude

  committed
  0f26a72View commit details

  Copy full SHA for 0f26a72

  Browse repository at this point

• Merge pull request #40 from jra3/john/security-control-plane-split

  Show description for e2317ca
  jra3

  authored
  e2317caView commit details

  Copy full SHA for e2317ca

  Browse repository at this point

• Merge pull request #37 from jra3/john/security-gateway-robustness

  Show description for 7f97cf8
  jra3

  authored
  7f97cf8View commit details

  Copy full SHA for 7f97cf8

  Browse repository at this point

• Merge pull request #36 from jra3/john/security-script-hardening

  Show description for 3d1a52c
  jra3

  authored
  3d1a52cView commit details

  Copy full SHA for 3d1a52c

  Browse repository at this point

• Merge pull request #38 from jra3/john/security-container-hardening

  Show description for 1f20be5
  jra3

  authored
  1f20be5View commit details

  Copy full SHA for 1f20be5

  Browse repository at this point

• Merge pull request #35 from jra3/john/security-build-hardening

  Show description for 616efa7
  jra3

  authored
  616efa7View commit details

  Copy full SHA for 616efa7

  Browse repository at this point

• harden(gateway): DNS-rebinding Host guard on the MCP endpoint

  Show description for 4ffd1da
  

  jra3

  and

  claude

  committed
  4ffd1daView commit details

  Copy full SHA for 4ffd1da

  Browse repository at this point

• harden(bridge): validate the /tmp crash-recovery fallback dir before trusting it

  Show description for b74ab5f
  

  jra3

  and

  claude

  committed
  b74ab5fView commit details

  Copy full SHA for b74ab5f

  Browse repository at this point

• isolate the Docker control plane on its own network (CHK-001)

  Show description for 16c98dd
  

  jra3

  and

  claude

  committed
  16c98ddView commit details

  Copy full SHA for 16c98dd

  Browse repository at this point

• guard noVNC proxy against cross-origin/rebinding; document token scope

  Show description for 3cb18d1
  

  jra3

  and

  claude

  committed
  3cb18d1View commit details

  Copy full SHA for 3cb18d1

  Browse repository at this point