From 1c75a45a42b9d4ada5f0586b461047165bf70584 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Sun, 5 Jul 2026 16:04:38 +0200 Subject: [PATCH] =?UTF-8?q?docs(context):=20D1=20live-validated=20?= =?UTF-8?q?=E2=80=94=204=20drills=20PASS,=20box=20on=20canonical=20v0.70.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6 --- CONTEXT.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/CONTEXT.md b/CONTEXT.md index 295e841..3aae03d 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -13,11 +13,16 @@ 60s dwell; a crash-looping binary is auto-reverted by `OnFailure=felhom-agent-rollback.service` (first-crash trigger [SF-1]) with the tuned `[Unit]` start-limit (120s/4) as backstop. Host artifacts + sudoers `FELHOM_SELFUPDATE` + `felhom-host-install.sh` day-0 install + report field - `selfupdate_pending`. Green tests + companions; **live validation pending (build/publish v0.70.0, - manual install the artifacts on felhom-pve, then the happy-path + crash-rollback drills)**. Rollback + `selfupdate_pending`. Green tests + companions. **LIVE-VALIDATED on felhom-pve (2026-07-05): all 4 + drills PASS** — happy path (0.70.0→0.70.1 signed op → download+verify+flip+commit), crash-rollback + (0.70.2-crash → OnFailure → **~2s crash-to-recovered**, byte-identical revert, no loop), no-pending + guard, gate refusal (non-pinned key). Full agent-side pipeline ran real (envelope injected into the + hub `signed_jobs` queue — CC lacks the hub global operator key; hub enqueue-auth is hub-unit-tested). + Box restored to canonical **v0.70.0** (host artifacts KEPT installed; scratch operator key REMOVED — + self-update dormant until an operator pins a real key, a Day-0-vouch-style follow-up). Rollback `felhom-agent.bak-0.69.0`. OPEN (v1 scope-outs): no hub-floor auto-update, no failed-update - auto-retry, no pending-timeout auto-rollback (a runs-but-never-commits binary is caught by - `host_staleness` + the pending report flag). Detail: REPORT.md. + auto-retry, no pending-timeout auto-rollback; per-crash OnFailure can double-fire (idempotent — + future: serialize the rollback oneshot). Detail: REPORT.md. - **v0.69.0** (2026-07-04, live on felhom-pve) — **S5: host-loss DR — safe halves shipped**. **Part 1** `wgtunnel.InstallRecoveredKey` — writes an escrow-recovered WG privkey (create-only,