From 5c68c869b611c081cbf35a5773db16961ed7fe94 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 28 Sep 2026 09:45:08 +0200 Subject: [PATCH] docs: v0.137.0 vouched with golden 0.276.0 (2026-09-28) Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS --- CHANGELOG.md | 4 ++++ REPORT.md | 33 ++++++++++++--------------------- 2 files changed, 16 insertions(+), 21 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 70f7d89..313fa0c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,10 @@ ## v0.137.0 — a guest outside the agent's ACL is not a known guest (2026-09-27, R-689, v0.136.0 regression) > **RELEASED 2026-09-27** by `scripts/release-agent.sh` — tag `v0.137.0` (`3ef095f`), sha256 `766c9166916a1bd3674b0dc69081f8a7619e770f1402d8ad7705b395937e7627`, verified by download. **NOT vouched** (the operator's act). +> +> **VOUCHED 2026-09-28** with golden 0.276.0 (`min_agent` 0.131.0), on the operator's word of 2026-09-27: the hub logged +> `Artifact manifest set: agent=0.137.0 golden=0.276.0 min_agent="0.131.0"`, and a Day-0 test install fetched this binary +> through the manifest and sha-verified it. Evidence: `felhom.eu/documentation/audits/evidence-golden-0276-2026-09-28/`. **MinAgent impact:** none required by any controller. diff --git a/REPORT.md b/REPORT.md index ca7a017..491b2ee 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,24 +1,15 @@ -# REPORT — agent v0.135.0: the restore test proves only backups of a guest (R-689, 2026-09-27) +# REPORT — 2026-09-28: agent v0.137.0 vouched with golden 0.276.0 -**Baseline:** `main` `7403c2a838db`, v0.134.0 on both demo hosts. **Commits:** `d4be12c` (fix + tests), `9ff937d` -(CHANGELOG, after the release). **Released** by `scripts/release-agent.sh`: tag `v0.135.0`, sha256 -`ad4e75f16d338552f4588d3fe64c51cbf9651220b9d223b5386b85b6c37fd4c3`, verified by download. **NOT vouched** (operator). +No agent code changed. `configs/build-golden.sh` (v3.0.0) was USED, not changed, to bake golden 0.276.0 in the +drill VM on DooPlex (RUNBOOK-manual-build §4.0–§4.1). -**Tests:** full suite rc=0; agent gates OK after the release. `TestR689_TheRestoreTestNeverPicksTheGolden` red-proofed -(without the check it picks `local:backup/felhom-golden-0.236.0.tar.zst`); `TestR689_GuestBackupArchiveShapes`; two older -picker fixtures moved to real archive names. +- **Vouched** in the hub's own form: `golden_version` 0.276.0, `agent_version` 0.137.0, `min_agent` 0.131.0 (the + MinAgent in controller v0.276.0's CHANGELOG header). The R-120 gate refused golden 0.258.0 first (negative + control). Rollback = the values before: agent 0.132.0, golden 0.258.0, min_agent 0.131.0. +- **One sha, three places:** `766c9166…7627` in Gitea, on felhom-pve and on demo-hp. +- **A new box comes up on it:** a Day-0 install (installer 1.28.0, `--force-gitea-golden`) in the drill VM fetched + agent 0.137.0 and golden 0.276.0 through the manifest, both sha-verified, and the controller answered healthy at + 0.276.0 behind an armed claim gate. Not claimed. +- CHANGELOG: the v0.137.0 entry carries the vouch. -**Delivered** by signed `agent_update` (felhom-opsign, key `felhom-op-1`): demo-felhom committed 12:22:53 CEST, demo-hp -12:29:02 CEST (`felhom.eu/documentation/audits/version-travel-2026-09-26/D1/`). - -**Then v0.136.0 (`16dbc83`, sha256 `2eb0b5eb…fa6d755`, NOT vouched):** the scheduler's read-only verdict on demo-hp -(`-selftest=restore-test-due`, `D1/D1-selftest-due-demo-hp.txt`) skipped the golden but picked a leftover archive of -guest 9100 (deleted in August). The guest must now exist; red-proof `D1/RP-r689-deleted-guest.txt`. Signed-delivered to -both hosts. The verdict after 0.136.0: `D1/D1-selftest-due-after-0136.txt`. - -**Then v0.137.0 (`3ef095f`):** 0.136.0's lookup met PVE's 403 "permission denied" (the token sees only its pool), not -"does not exist", so the local tier read UNKNOWN every evaluation (`D1/D1-selftest-due-after-0136.txt`) — a regression of -0.136.0, fixed: a guest the agent cannot read is not one it manages. Red-proof `D1/RP-r689-acl.txt`; verified read-only on -demo-hp with the pre-release binary before the release (`D1/D1-selftest-due-0137-pre.txt`): both leftovers skipped, the -off-site tier due on 9201, the local tier waiting for today's 9201 archive to settle. Three agent releases in one session -— each the smallest fix of what the box showed. +Evidence: `felhom.eu/documentation/audits/evidence-golden-0276-2026-09-28/`.