feat(bridge): import the complete optional Kars Bridge application - #563

Merged

Pal Lakatos-Toth (pallakatos) merged 123 commits into

kars-bridgefrom

public/bridge-application

Sep 15, 2026

Commits on Sep 11, 2026

Import complete Kars Bridge as an optional monorepo application

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
3d18d86
Preserve standalone lockfile and artifact routes in Bridge checkout

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
cf7e0ed
Fix Bridge monorepo installation guide paths
Pal Lakatos-Toth (pallakatos)
committed
61a7f3f
Keep source-stub gate linear for complete application imports

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b3c1183
Distinguish real UI field syntax from unfinished implementation markers

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
69e4a73
Split Bridge task routes into cohesive bounded modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5d78f11
Enforce receipt anchor pins consistently and keep witness evidence advisory

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
e7d489e
Compose complete public credential harness repairs into Bridge candidate

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
132e1be
Register receipt trust regressions and remove unused task import

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
0995410
Split Bridge operator routes into bounded cohesive modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
67cf7c2
Add permanent core independence and Bridge contract CI gates

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1ef457d
Compose nullable CRD startup repair with permanent Bridge contract gates

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
9b9ea4f
Split Bridge composition routes into bounded modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
183eb5e
Use the public operator review workflow for native writer enrollment

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
a0f4d1f
Expose secret-safe native operator failure stages

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
99c84c0
Preserve manifest identity and honest remediation evidence

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
871277e
Name the native consumer execution-drift diagnostic

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
d799abc
Compose strict native activation and remediation identity repairs

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
ac3866c
Extract bounded receipt verification module without changing evidence

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
003735e
Retain mandatory review for all remediation identity versions

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1778ebc
Retain the explicit no-merge wording in PR dedupe instructions

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
f716b30
Split Bridge Team routes into bounded modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
2383ccd
Split the Bridge cluster adapter into bounded modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
66a07f0
Preserve statement tests' receipt framing helper access

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
e573cea
Centralize standard content digests without changing public identities

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
e89df61
Make receipt fixture digests explicit after adapter extraction

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
580b059
Keep digest test modules after production items

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1289a68
Register the qualified digest adapter with exact-file boundaries

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
31cb027
Keep shared-qualification diagnostics within the safe source allowlist

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
a4d398d
Compose reviewed-qualification candidate for real multiworkspace acceptance

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
56b015b
Require real single- and multi-workspace grant update continuity

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5e8f9fc
Route receipt primitives through a bounded standard verification adapter

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
6f0b2a1
Report only fixed credential failure categories and scope booleans

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
0c2944b
Compose safe active-grant updates with their real native acceptance case

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
a201ade
Integrate source-reviewed evaluator parity into the full Bridge candidate

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
d20645c
Remove receipt decoder imports superseded by the standard adapter

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
7d50e16
Isolate the legacy credential review key without changing active tickets

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
a9a2d0d
Bound efficiency tests and credential integration modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
7e2df1e
Require new audit records rather than reusing old scoped sign-offs

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
8b05add
Split engineering intake into bounded behavior-preserving modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
ac8aa09
Use vetted tag comparison and register exact reviewed crypto boundaries

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
751c2ed
Compose exact evaluator source approval without extending old audit scope

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b3760dc
Split live capability options into bounded modules

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b3d39d2
Split web DTOs by domain while preserving the public type surface

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
8f0232e
Keep gateway watcher wire types in a bounded type-only module

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b82a976
Bound server BFF client types without moving authentication or transport

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
47716ba
Qualify schema-first installation through the public core operator

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4ea3448
Compose shared core schema lifecycle with complete Bridge qualification

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
38318dc
Bound validation phases while retaining exact check ordering and outcomes

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1b1f98c
Extract the existing Copilot sign-in component from the provider wizard

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
f6b7694
Keep governed credential failures actionable without exposing inner data

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5679974
Split the agent graph without changing layout or interaction

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5a2d08f
Enroll observer targets through the real reviewed private-scope workflow

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4608531

Commits on Sep 12, 2026

Commits on Sep 14, 2026

fix(cli): revalidate a conflicted reviewed sandbox pause

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
526597e
test(bridge): collect bounded observer API packet evidence

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
7ebfbcc
test(ci): run native diagnostic contracts before cluster qualification

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5dec504
test(bridge): select effective Cilium identities for observer diagnostics

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
49b78c8
fix(cli): observe retirement independently of Task status timing

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
d526b63
fix(controller): allow enrolled observers to verify Kubernetes metadata

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4f5d90d
test(e2e): retain bounded port-forward failure details

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
2316d90
fix(controller): complete API namespace recheck and split regressions

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
934d744
test(bridge): distinguish writer and private retirement baselines

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
24c85cd
style(bridge): apply required Microsoft and MIT source headers

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4929662
fix(ci): verify bounded tool downloads before qualification

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5f634ae
chore(repo): enforce format-safe Microsoft MIT attribution

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
191a320
fix(deps): require patched Rustls for RUSTSEC-2026-0285

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4b301e0
test(bridge): retain rotation failure state before controller restart

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b516713
fix(ci): preserve raw YAML and Helm document boundaries in headers

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1d0fc5c
test: make Cilium API-group equality explicit

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
5e9a1fe
docs: record governed GitHub privacy source closure

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4b4b577
test(ci): preserve historical audit scope during header updates

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
4804eec
docs: attest scoped credential and GitHub integration review

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
89fef91
fix(bridge): isolate artifact content and enforce signed admin authority

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
8f35353
test(ci): retain bounded public CRD readiness errors

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
f276558
fix(bridge): align gateway SDK calls and workspace authority

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
366f02c
fix(bridge): renew maintenance work and preserve honest artifact attribution

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
aa40563
docs: attest reviewed Bridge integration and verified repair closure

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
1f2c483
Merge qualified credential integration into the Bridge candidate

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
74d959b
docs: bind Bridge source approval to completed native qualification

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b967c1e
test(e2e): observe coherent current-generation CR status

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
f8f4a7f