diff --git a/CONTEXT.md b/CONTEXT.md index 3aae03d..0916139 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -5,6 +5,14 @@ ## Current +- **v0.71.0** (2026-07-05) — **management-plane break-glass: privsep-dir watchdog + mgmt_plane + health** — TASK G1 (prereq for felhom-sshd/H1), provenance `SPIKE-felhom-sshd-2026-07-05` §8. + Host artifacts (`configs/felhom-privsep.tmpfiles` + `felhom-mgmt-watchdog.{sh,service,timer}`) make + `/run/sshd` boot-persistent AND auto-heal it every ~60s **agent-independently** (heals with the + agent stopped — proven live: `/run/sshd` removed → restored in 30.0s, `:22` back, no login). + `internal/mgmtplane` reports the additive `mgmt_plane` heartbeat stanza; hub v0.34.1 raises + `mgmt_plane_healed`. **NO unit declares `RuntimeDirectory=`** (the incident cause). H1 may now + assume `/run/sshd` is guaranteed present. Live on felhom-pve; rollback `.bak-0.70.0`. - **v0.70.0** (2026-07-05) — **agent self-update (operator-signed A/B slots + crash-loop auto-rollback)** — TASK D1, provenance `SPIKE-agent-selfupdate-2026-07-05`. An operator-signed `agent_update` op (version+sha256, sha is the only integrity root) rides the signed-jobs gate;