IRIS Ops Studio 1.3.1 — bounded one-hour guard session and jury route
The optional HTTPS managed guard now has a fixed maximum one-hour navigation session. Bounded native access can renew read-only while a tab is visible and idle; it cannot extend the family deadline or repeat a write. Per-workflow write approval remains limited to 60 seconds and exact-target previews to 30 seconds. Guard navigation shows only its supported Wallet, Web apps, Access control and local Session journal views. The full direct SysAdmin console remains a separate installation and URL.
The README and docs/JURY-EVALUATION.md distinguish three evaluation routes: labeled Safe demo, full direct console, and optional managed guard. The GitHub v1.3.1 release includes the separate review ZIP, judge guide and SHA-256 748A1B361198AA6AEA850E6AA32CB538724C9A47C21C25D0364E662571B655DE. Historical v1.3.0 remains available.
Verification and limits: 270 JavaScript tests and 12 syntax checks pass; the exact ZIP passed independent extraction and verification. Eighteen native renewal checks ran on disposable IRIS Community 2026.2. One real browser session reached the one-hour boundary on the preceding local bundle; the exact new ZIP was not reinstalled for another live-IRIS pass, and the separate scripted long-duration test remains unrun. The optional guard reports productionReady: false. This is a bounded technical review package, not an automatic IPM upgrade, whole-console guard or general production-readiness claim.
Video guides: The three earlier videos describe previous console workflows. Two new illustrated 1.3.1 guides use synthetic narration and are not live test footage: Install and Evaluate the Contest Entry and How the Bounded Server Guard Verifies a Change. The written judge guide and validation record remain the technical evidence.

IRIS Anvil release notes

2026-09-27 —

Verified IRIS 2026.2 reactor
This release makes the contest workflow reproducible and live-tested on IRIS 2026.2. The only supported change is DEPLOY_WEB_APP for /anvil-demo, with the declared USER namespace, Anvil.REST dispatch class, and enabled state.

Added

• Live IRIS 2026.2 integration coverage in GitHub Actions.
• A smoke test covering SysAdmin login, web-app PUT and GET, independent ObjectScript verification, receipt replay, and read-only process and task inventory.
• A randomly credentialed operator for a fresh, disposable local demo container.
• Read-only observation through /api/admin/info, /api/admin/v2/processes, and /api/admin/v2/tasks.
• A contract check for the API endpoints, bearer-token boundary, allowlist, receipt construction, and both REST bootstrap surfaces.

Fixed

• Read the IRIS 2026.2 login token from its actual top-level response field.
• Compile both Anvil.Public and Anvil.REST during bootstrap; a fresh container previously returned 404 from the public API.
• Wait until IRIS reports running before bootstrapping.
• Show an independent receipt-verification mismatch as a reactor failure.

Hardened

• Reject proposals outside the demo’s action, target, or payload allowlist.
• Refuse execution if the stored payload or digest no longer matches the declared intent.
• Recheck the receipt against current IRIS state; a planned proposal cannot claim to be verified.
• Bind demo ports to localhost and pin the runtime to intersystems/iris-community:2026.2.

Verified
The live smoke path passed on IRIS Community 2026.2 (Build 221U): it rejected an out-of-scope proposal, confirmed a planned proposal was unverified, performed the official SysAdmin PUT and GET, sealed an independently checked receipt, replayed it without changing the receipt, and read process and task inventories.

Upgrade notes and limits
Pull the 2026.2 image and recreate the demo container before bootstrapping. The generated AnvilDemo account has %All and belongs only in the dedicated local demo container. Ports now bind to localhost by default.

The only mutation remains /anvil-demo. Process and task features are read-only; optional Sling/Oak mirroring is outside the mutation trust boundary.

Initial Release

Optional IRIS-native managed guard with four bounded workflows, server READ_ONLY,
per-workflow approvals, native authorization/readback and persistent recovery
without repeating uncertain changes. Guided review installer and final audit
fixes for stop retry, startup failures, key-cleanup reporting and profile docs.
Validated on a fresh IRIS Community 2026.2 instance; 269 JavaScript and 20 Linux
log-reader tests pass. Separate managed bundle; not an automatic IPM upgrade,
general active-user editor or production-readiness claim. See the release and
final remediation report for exact artifact hashes and limits.

Initial Release

IRIS Portico - Initial Release (v0.0.1)

We are excited to announce the first release of IRIS Portico, a web-based management portal and admin console for InterSystems IRIS.

🚀 Key Features

• Web-based Management Portal: A modern, intuitive interface to manage and monitor your InterSystems IRIS instances.
• Admin Console: Built with Angular for a responsive and dynamic user experience.
• SysAdmin API Integration: Seamlessly interacts with InterSystems IRIS SysAdmin APIs for administrative tasks.
• Docker Support: Easy to deploy and run in containerized environments.
• Healthcare Ready: Compatible with both InterSystems IRIS and InterSystems IRIS for Health.

🛠️ Technology Stack

• InterSystems IRIS / InterSystems IRIS for Health
• Angular (Frontend)
• Docker (Deployment)
• SysAdmin API (Integration)

📦 Installation & Usage

Please refer to the README and Documentation for detailed installation and usage instructions.

🔗 Links

• GitHub Repository: https://github.com/xohg/iris-portico
• Documentation: https://github.com/xohg/iris-portico/blob/main
• License: https://github.com/xohg/iris-portico/blob/main/LICENSE

This is the initial release. Feedback and contributions are welcome!

Initial Release

Initial Release

Initial public release of Armada Battery, an evidence-driven operations console for InterSystems IRIS.

Includes a Docker Compose setup with IRIS Community Edition, read-only instance observations, four bounded administrative workflows, and auditable outcome receipts.

Changes are disabled by default. Workflow tests use synthetic fixtures; live verification covers read-only observations and blocked preflight. Installation instructions and current limitations are documented in the README.

Initial Release

Initial Release

Initial Release

Release 1.0.1

• The audit database and task history now open with results: the audit database shows the last 24 hours and task history the last 7 days, instead of an empty screen waiting for a search.
• When the agent opens one of those screens to answer you, the screen runs the same search the agent read, so the rows it talks about are the rows in front of you.
• README: a 90-second tour, calling OcuPilot's REST API from a script, known limitations, and the architecture diagram as an image.
• IPM install note: if IPM reports that no repositories are configured, run zpm "enable -community" once, then install again.

The live demo at https://ocupilot.org runs this release.

Initial Release

ValhallISC mounts InterSystems IRIS servers as local folders. Namespaces show up as folders, packages as subfolders, and classes and routines as .xml files. Copying a file out gives its XML export; copying an .xml file in imports and compiles it. You manage profiles from a tray / menu-bar app, or from the command line (valhallisc --help).

Initial Release

Minor packages installation fixes

Initial Release

Initial Release

Initial Release

Initial Release

IRIS Ops Studio 1.2.1 adds two focused workflows. An optional, authenticated, GET-only IRIS extension brings bounded, paginated Messages, System Monitor and Alerts records into Incident Timeline, with explicit source health and permission errors. Existing non-system wallet collections gain guided access-policy editing for EditResource and UseResource: two-field preview, last-moment state check, target-bound confirmation, and fresh readback. Secret values are never requested. The release passed 103 JavaScript tests and 20 Linux native-reader tests and was checked on disposable IRIS Community 2026.2 instances; the README and validation record distinguish live checks from Safe demo fixtures. Limits remain explicit: no portal-wide server-enforced safe mode, atomic wallet write, full dependency graph, or journal/interoperability log decoding. The three existing videos demonstrate earlier workflows.

Initial Release

Initial Release

Initial contest release of IRIS Incident Memory.

• Incident timeline built from native IRIS management data
• Detection of abnormal and expired scheduled tasks
• Configuration/change context around incidents
• Persistent incident history in InterSystems IRIS
• Embedded Python incident representation
• Native IRIS Vector Search with HNSW cosine similarity
• Similar historical incident retrieval
• REST API and responsive investigation portal
• Fully self-bootstrapping Docker deployment

Initial public release of Meridian — a proof-first management portal for InterSystems IRIS.

• Proof Contract V2 for evidence-bound privileged operations
• 273-operation SysAdmin coverage atlas
• Certified permissions, process, task, logs, Web/REST, and Security/Secrets surfaces
• Durable Action Receipt V2 with evidence-backed closure
• Fresh revalidation and reconciliation for high-risk operations
• Final quality wall: 99 test files, 535 tests, typecheck PASS, 0 lint errors, production build PASS

Source: https://github.com/chizzydev/meridian-control-plane
Demo: https://www.youtube.com/watch?v=w6Jxmg8Zkpw

Initial Release

Now with VIM extension preinstalled.

This brings:

• Bookmarks
• Search and replace with regular expressions
• Jump to last edit line with ( . ) [ Enter ]

Plugin is off by default but toggled on via command palate when vscode is started,
[Shift} + [Control] + p
Type:
"Toggle VIM mode"
Accept the selected option.

Alternatively updating settings.json. for default enabled.

Command reminder

When vim mode is normal '-- NORMAL --' is displayed in lower tool bar.
When vim mode is insert '-- INSERT --' is displayed
When vim mode is visual ( selecting text ) then "-- VISUAL --" is displayed
Press [Escape ESC] key to exit current command and return to "NORMAL" mode.

Copy and Paste

There are two clip boards:

• Use the operating system clipboard to pass content between vscode and external tools.
• Use the operating system clipboard to copy characters from document and paste into search command
• Use the vim clipboard to pass content between document open in vscode

Deleting

Search and replace

Bookmarks

Characters with accents

Initial Release

IRIS Ops Studio 1.2.0 adds guided enable/disable for eligible non-system web applications, with a complete-configuration preview, fresh pre-write check, target-bound confirmation, and full readback. Management, default, ambiguous, and Ops Studio applications stay inventory-only.

• REST discovery: optional same-origin Management REST/OpenAPI documentation catalog. It does not invoke catalogued operations or forward the SysAdmin token; missing browser permission is shown explicitly.
• Safer operations: connection-bound previews, stronger task-completion verification, asynchronous Explorer and audit handling, credential-shaped redaction, uncertain-result reporting, and responsive mobile controls.
• Evidence: 84/84 automated tests. A fresh disposable IRIS Community 2026.2 image passed installation and authorization checks, plus authenticated Run/Suspend of an on-demand test task with independent IRIS readback. Access mutations and stale-preview blocking were checked on another disposable instance. The README and final validation report document the exact scope.

Limits: the portal remains a browser client; its safeguards do not impose a server-enforced read-only mode. IRIS authorization is the server-side boundary. In-place upgrade was not tested. The three existing videos remain linked; the newer two show 1.1.0 Safe demo workflows.