AkurAI-Build

public

Latest change 30e6b8c347048d64c2c048dfd05a8ded219d37f6 - Host authenticated Git repositories over Smart HTTP with repo host/sync CLI by Ólafur Búi Ólafsson

# AkurAI Build forge boundary

AkurAI Build is the self-hosted control plane for source repositories, CI runs,
artifacts, deployments, and access. It does not proxy or depend on GitHub at
runtime.

- AkurAI Auth supplies browser identity through OIDC authorization code flow.
- AkurAI Build stores its own encrypted sessions, roles, repository metadata,
  visibility, memberships, activity, and immutable CI/deployment records.
- Repositories expose native Git smart-HTTP endpoints; public reads require a
  public repository, and private reads/writes require an authenticated member.
- Titan runs restricted Docker jobs by default. Native execution is restricted
  to trusted repositories with an explicit opt-in.
- The public site exposes only public repositories and public run status.
- `/app`, `/profile`, `/admin`, Git writes, artifacts, and pipeline controls are
  private surfaces. Admin roles alone can create repositories, change visibility,
  manage membership, and runner policy.
- GitHub Actions and GitHub webhooks are migration inputs only. They are removed
  after each repository has an AkurAI Build pipeline and verified Titan run.