From 4b7c5bf1281717ff27753cdda064549c377f8e18 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Sun, 5 Jul 2026 19:24:12 +0200 Subject: [PATCH] docs(context): v0.71.0 break-glass watchdog + mgmt_plane shipped Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6 --- CONTEXT.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CONTEXT.md b/CONTEXT.md index 3aae03d..0916139 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -5,6 +5,14 @@ ## Current +- **v0.71.0** (2026-07-05) — **management-plane break-glass: privsep-dir watchdog + mgmt_plane + health** — TASK G1 (prereq for felhom-sshd/H1), provenance `SPIKE-felhom-sshd-2026-07-05` §8. + Host artifacts (`configs/felhom-privsep.tmpfiles` + `felhom-mgmt-watchdog.{sh,service,timer}`) make + `/run/sshd` boot-persistent AND auto-heal it every ~60s **agent-independently** (heals with the + agent stopped — proven live: `/run/sshd` removed → restored in 30.0s, `:22` back, no login). + `internal/mgmtplane` reports the additive `mgmt_plane` heartbeat stanza; hub v0.34.1 raises + `mgmt_plane_healed`. **NO unit declares `RuntimeDirectory=`** (the incident cause). H1 may now + assume `/run/sshd` is guaranteed present. Live on felhom-pve; rollback `.bak-0.70.0`. - **v0.70.0** (2026-07-05) — **agent self-update (operator-signed A/B slots + crash-loop auto-rollback)** — TASK D1, provenance `SPIKE-agent-selfupdate-2026-07-05`. An operator-signed `agent_update` op (version+sha256, sha is the only integrity root) rides the signed-jobs gate;