orchestrator

adam/orchestrator

Archived

Fork 0

Commit graph

Author	SHA1	Message	Date
Adam Moussa	dbe2f8c186	Raise nightly agentic budget $20 -> $120 for full per-night coverage First-run data (2026-06-17) showed the $20 ceiling covered only the canary + 5 of ~22 scannable repos before pausing the rotation, leaving 16 repos un-deep-scanned that night. Raise TOTAL_BUDGET_USD default to $120 so every repo gets a deep agentic pass each night (~22 x ~$5 + canary, with headroom). Spend draws on the Max subscription pool; the per-target cap ($12) and round-robin rotation are unchanged, so this is a ceiling raise, not a per-repo cost change. Updates README, DEPLOY, and the systemd Environment example to match.	2026-06-17 13:18:46 -04:00
Adam Moussa	a05afb5ebc	Update security-review docs for two-tier auto-discovery Rewrite README + DEPLOY-R720 for the clean-clone mirror model, the read-only GH_TOKEN PAT recipe, the global hook installer, and the no-CI-by-design decision.	2026-06-16 15:00:00 -04:00
Adam Moussa	f90f759e12	Tune checkov severity, wire npm audit, add CI backstop + R720 runbook checkov: high-signal exposure/access checks -> high, best-practice noise -> low (was 51 undifferentiated mediums). npm audit wired for Node dep CVEs. Report collapses the low/info tail to a count. Adds ci/security-review.yml (PR backstop) and DEPLOY-R720.md (Phase 3 host runbook).	2026-06-15 15:57:34 -04:00

Author

SHA1

Message

Date

Adam Moussa

dbe2f8c186

Raise nightly agentic budget $20 -> $120 for full per-night coverage

First-run data (2026-06-17) showed the $20 ceiling covered only the
canary + 5 of ~22 scannable repos before pausing the rotation, leaving
16 repos un-deep-scanned that night. Raise TOTAL_BUDGET_USD default to
$120 so every repo gets a deep agentic pass each night (~22 x ~$5 +
canary, with headroom). Spend draws on the Max subscription pool; the
per-target cap ($12) and round-robin rotation are unchanged, so this is
a ceiling raise, not a per-repo cost change. Updates README, DEPLOY, and
the systemd Environment example to match.

2026-06-17 13:18:46 -04:00

Adam Moussa

a05afb5ebc

Update security-review docs for two-tier auto-discovery

Rewrite README + DEPLOY-R720 for the clean-clone mirror model, the read-only GH_TOKEN
PAT recipe, the global hook installer, and the no-CI-by-design decision.

2026-06-16 15:00:00 -04:00

Adam Moussa

f90f759e12

Tune checkov severity, wire npm audit, add CI backstop + R720 runbook

checkov: high-signal exposure/access checks -> high, best-practice noise -> low
(was 51 undifferentiated mediums). npm audit wired for Node dep CVEs. Report
collapses the low/info tail to a count. Adds ci/security-review.yml (PR backstop)
and DEPLOY-R720.md (Phase 3 host runbook).

2026-06-15 15:57:34 -04:00

3 commits