Commit Graph
61 Commits
Author SHA1 Message Date
igor04091968 fe87c85a31 Harden DetMir DLP production runtime
CI / Rust checks (push) Canceled after 0s
CI / Docs and registry checks (push) Canceled after 0s
CI / Smoke checks (push) Canceled after 0s
Coverage / Coverage baseline (push) Canceled after 0s
Security / Cargo audit (push) Canceled after 0s
Security / Cargo deny (push) Canceled after 0s
Security / Secret pattern check (push) Canceled after 0s
Security / Dependency review (push) Canceled after 0s
- default DetMir DLP runtime to core_only/disabled with load-guard protection

- add fail-closed placeholder validation and runtime-scoped artifact checks

- document operator re-enable flow for light profile and guard rollback

- update prod docs, env examples, and Ansible DLP defaults
2026-07-01 00:05:23 +03:00
igor04091968 cfeaf772ea fix(aw-db): add guarded sqlite vacuum maintenance 2026-06-20 11:04:10 +03:00
igor04091968 106d796d95 fix(hayabusa): restore scheduled EVTX upload pipeline 2026-06-12 10:57:39 +03:00
igor04091968 2104da912d fix(server): sanitize stale activity host 2026-06-11 06:29:07 +03:00
igor04091968 aa641cba2f fix(ops): harden worktime recovery and collector guard 2026-06-07 11:41:20 +03:00
igor04091968 1e869e1a14 fix(portal): restore production runtime health 2026-06-03 23:22:02 +03:00
igor04091968 5aab90f27d feat(ops): surface readiness in portal 2026-06-03 21:45:03 +03:00
igor04091968 59d5e1f1fc feat(ops): sign readiness bundle 2026-06-03 20:56:35 +03:00
igor04091968 3dc7214b58 feat(ops): add signed readiness bundle 2026-06-03 20:30:05 +03:00
igor04091968 f5f0cebfc4 feat(ops): add DetMir production readiness check 2026-06-03 19:58:45 +03:00
igor04091968 1312ee3ee5 fix(ops): harden runtime placeholder guards 2026-06-03 19:49:06 +03:00
igor04091968 2e64f9b26c fix(ops): guard production Influx placeholders 2026-06-03 19:32:31 +03:00
igor04091968 7bc1d4170a feat(workforce): add interpretation policy config 2026-06-03 13:03:24 +03:00
igor04091968 0302d888f6 feat(workforce): add trend interpretation insights 2026-06-03 12:48:51 +03:00
igor04091968 01ff3b8e29 feat(workforce): persist daily management history 2026-06-03 12:13:26 +03:00
igor04091968 a1801fca5f docs(public): sanitize release materials 2026-06-03 08:52:20 +03:00
igor04091968 dbef90a09e refactor(detmir): retire python runtime paths 2026-06-03 03:27:52 +03:00
igor04091968 632962a90e feat(detmir): add rust aw reliability planner 2026-06-02 18:17:56 +03:00
igor04091968 19e3682bc8 feat(detmir): add rust-first operations tooling 2026-06-02 17:57:58 +03:00
igor04091968 cc9e4a0669 fix(aw): harden collectors and grafana exports 2026-05-28 10:54:46 +03:00
igor04091968 3042bd5042 feat(detmir): ship ops, dlp, 1c and mcp updates 2026-05-27 05:56:43 +03:00
igor04091968 0c88b519ee feat(hayabusa): add auto-case scoring and 6h automation 2026-05-21 20:47:49 +03:00
igor04091968 712fccb630 feat(hayabusa): automate detached server-side processing 2026-05-21 17:52:01 +03:00
igor04091968 99143b108b feat(aw-rus): sync deploy stack, install kit, and health checks 2026-05-21 15:16:23 +03:00
igor04091968 9927cdb195 hardening: strengthen deploy and validation gates 2026-05-15 08:07:18 +03:00
igor04091968 15941e48cb docs(sales): add russian sales overview and switch calendar day start 2026-05-15 07:16:24 +03:00
igor04091968 93a3169203 feat(dlp): add infosec grafana dashboard 2026-05-15 02:22:48 +03:00
igor04091968 873e43fb2e feat(worktime): publish RDP activity to Grafana 2026-05-15 01:23:23 +03:00
igor04091968 6c41717ef9 fix(worktime): restore real per-user RDP report pipeline 2026-05-15 00:37:15 +03:00
igor04091968 1399eaf605 fix(webui): restore resilient aw-rus ui patching 2026-05-14 23:14:31 +03:00
igor04091968 0098abe426 fix(dlp): block self-test case creation 2026-05-14 20:49:00 +03:00
igor04091968 0cce6fd08e feat(dfir): add hayabusa forensic workflow integration 2026-05-14 15:04:07 +03:00
igor04091968 91c3b46f16 fix(ops): sync verified production baseline for AW-Rus DLP 2026-05-13 22:50:42 +03:00
igor04091968 2e5242f5ba feat(dlp): add dedicated health check and grafana dashboard 2026-05-13 07:08:23 +03:00
igor04091968 6ebf0ac67e feat(dlp): add server-side analyzer, evidence chain, compliance scheduler, and syslog forwarder 2026-05-13 04:54:08 +03:00
igor04091968 070a8f8f7e feat(dlp): add compliance reporting scheduler and admin CLI 2026-05-13 03:31:40 +03:00
igor04091968 28a4dae67f feat(dlp): implement case management service and DLP Review integration 2026-05-13 03:08:53 +03:00
igor04091968 fd2e9ac59d feat(dlp): implement SIEM/SOAR integrations (CEF, webhook, syslog, systemd timers) 2026-05-13 02:30:52 +03:00
igor04091968 8619c14735 fix(deploy): make AW DB merge idempotent and non-fatal on name-unique conflicts 2026-05-13 02:04:28 +03:00
igor04091968 64158e97a4 feat(worktime): add automatic self-heal timer for zero-activity regressions 2026-05-12 06:01:07 +03:00
igor04091968 8be0de1c85 feat(ansible): add post-deploy aw-health-check gate 2026-05-11 22:57:57 +03:00
igor04091968 e0561bf865 fix(windows): disable outlook popup and enforce smtp-only email monitoring 2026-05-11 20:46:39 +03:00
igor04091968 4b5c75bdbb feat(dlp): deploy hayabusa IOC refresh on aw-server with post-deploy checks 2026-05-10 03:13:28 +03:00
igor04091968 8849354dda fix(worktime): codify ui-bridge in ansible and install flow 2026-05-07 07:20:14 +03:00
igor04091968 d91a396c00 feat(webui): add HTML and panel view for worktime reports 2026-05-07 06:41:42 +03:00
igor04091968 8a91734a27 fix(worktime): use Europe/Moscow day boundary for aw-rus today reports 2026-05-07 06:30:12 +03:00
igor04091968 a6a05b82a9 fix(webui): persist worktime report links to :5610 in ansible/installkit 2026-05-06 23:24:52 +03:00
igor04091968 3e565b7a2e fix: create /root/bootstrap directory before copying files
Add ansible.builtin.file task to ensure /root/bootstrap exists
before copying RU patch files to it (prevents first-deploy failure)
2026-05-03 23:08:48 +03:00
igor04091968 3fa15f826d fix: env file before hotfixes + improved error handling
- Move env file creation before apply_webui_ru_patch.sh execution
- Replace ignore_errors with failed_when: false + register + debug output
- Provides visible feedback on hotfix script execution result
2026-05-03 22:56:31 +03:00
igor04091968 08ba731345 fix: apply WebUI hotfixes via apply_webui_ru_patch.sh + filter undefined hostname
- Add CATEGORY_HELPER filter for 'undefined' in addition to 'unknown'
- Add copy of apply_webui_ru_patch.sh to /opt/activitywatch/aw-server/
- Add task to run apply_webui_ru_patch.sh for Trends/Timespiral/Category helper hotfixes
- Fix in both deploy_aw_server.yml (ansible and install-kit)
2026-05-03 22:52:39 +03:00