dcd77b86ca
Make admin verification directly executable
...
Preserve the deployment verification script as an executable operational check so certificate-boundary acceptance is repeatable.
2026-08-17 15:21:05 +08:00
405a2cfc0f
Harden admin deployment and local acceptance
...
Enforce mTLS and least-privilege runtime boundaries while adding repeatable MySQL 8.4 and Docker smoke checks that require no production secrets.
2026-08-17 15:20:46 +08:00
1a9c518f96
Add secure administrator operations console
...
Provide TOTP-authenticated, role-controlled user and credit workflows with paginated audit data and SQL-backed statistics so operations can manage growth safely.
2026-08-17 15:20:34 +08:00
676bfd2451
Fix production referral service wiring
...
Bind the referral route interface to its service and extend the module regression test to cover every route-facing operations boundary.
2026-08-16 21:14:50 +08:00
c415c53a1c
Fix production credit service wiring
...
Register the credits service through its route-facing interface and verify the application module resolves the binding without touching MySQL.
2026-08-16 19:39:06 +08:00
a17d058748
Fix container build workspace ownership
...
Allow the non-root Gradle builder to create project-local caches during reproducible image builds.
2026-08-16 15:07:51 +08:00
3824d0f6c3
Fix MySQL gateway migration ordering
...
Split replacement-key recreation so MySQL drops the old constraint before validating its reused name.
2026-08-16 15:00:10 +08:00
41e2145334
Publish verified Docker images to GHCR
...
Make deployments pull immutable CI-built images while keeping test failures diagnosable before any package is published.
2026-08-16 14:56:36 +08:00
0af35d44f4
Establish secure account and managed AI backend
...
Provide the production foundation for Apple identity, immutable credits, referrals, integrity checks, managed providers, and hardened Docker deployment.
2026-08-16 14:46:23 +08:00
Rocky