open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-23 12:05:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): export redacted cluster evidence bundle

Browse Source
This commit is contained in:
whyour
2026-08-16 07:07:32 +08:00
parent 7955d55629
commit 4f62a86d15
17 changed files with 1308 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/ql3-cluster-admin/README.md
+9
View File
@@ -18,6 +18,15 @@ responses and a closed CSP, renders all returned data only via `textContent`,
and keeps start/diagnose/cancel, polling, cache, WebSocket, ServiceWorker and
legacy session authority absent.
The fourth digest-bound Console asset builds an explicit redacted evidence
bundle from only the current page's completed reads. The in-memory ledger is
bounded to the newest 16 entries and 8 MiB; export makes no network request and
produces at most 512 KiB of UTF-8 JSON. Identifiers are correlated only through
per-bundle typed aliases, while free text, names, paths, commands, inputs,
outputs, environment, errors, credentials, unknown fields and Copilot model
text are omitted. Per-fact and top-level SHA-256 values provide self-integrity,
not a server signature, durable audit or action authority.
The reviewed operator-workstation setup, private-file ceremony, release
verification, preflight and session lifecycle are documented in
`deploy/console/ql3-cluster-copilot/README.md`. Native execution binds host