From bdea4694a49d222a3ce14028d957e42b7d7d45d5 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Thu, 29 Oct 2026 15:11:11 +0100 Subject: [PATCH] REPORT + CONTEXT: v0.169.0 released and vouched; restart_controller proven on the release builds --- CONTEXT.md | 7 +++++++ REPORT.md | 41 ++++++++++++++++++++++++++--------------- 2 files changed, 33 insertions(+), 15 deletions(-) diff --git a/CONTEXT.md b/CONTEXT.md index d29574a..b612b6a 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -1,5 +1,12 @@ # CONTEXT — felhom-agent working state +> **2026-10-29 (afternoon, attended) — v0.169.0 RELEASED and VOUCHED (14:06:09 CET).** `fc066de6…`, bundle `3ca33f9c…`, +> from `637c92c`; `pinned.day0_agent` 0.169.0 (`db25eb0`). The agent's own closed operator-action list: +> `restart_controller ` (host-report reply → result on the next host report; the supervisor's guards; the brake +> counts operator restarts, then `opBrakeUntil` refuses presses 30 min). R-1344: 6 unhealthy sweeps → `unresponsive_since` +> → the hub's `controller_unresponsive` — ALARM ONLY until the night's health log is read (to 2026-10-30 07:00 UTC). +> Proven live on Tester 1: stopped controller restarted, 4th press refused, one press on the release builds „done" in 16 s. + > **2026-10-29 (attended release run) — v0.168.0 RELEASED and VOUCHED (10:21:56 CET).** `release-agent.sh` from a clean > clone of `91bd96c` (agent `1e70196c…`, bundle `3415c034…`, tag `v0.168.0`); no configs/ change → binary-only signed > `agent_update` to demo-hp, Tester 1, demo-felhom, each committed, self-check 76/76; `pinned.day0_agent` = 0.168.0 (D50). diff --git a/REPORT.md b/REPORT.md index 143b8fd..d45ae2b 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,18 +1,29 @@ -# REPORT — v0.168.0 released and vouched (2026-10-29, attended) +# REPORT — v0.169.0 released and vouched: „Restart controller" from the hub (2026-10-29, attended) -**Plain words first.** The agent 0.168.0 is out, on the three test boxes, and vouched by the operator — new boxes install -it. It carries R-528 (the host's per-container OOM count) and R-1254's ceremony half. +**Plain words first.** The operator can now restart a box's controller from the hub's host page. The agent does it, so it +works when the controller is stopped or stuck. It uses the supervisor's own guards and brake: 3 restarts in 15 minutes, +then presses are refused for 30 minutes. A controller that runs but does not answer now raises an operator alarm +(`controller_unresponsive`); it is not restarted by itself yet — that waits for the night's measurement (R-1344). -- **Release:** `release-agent.sh` from a clean clone of `91bd96c` (CI 2479 green): agent sha256 - `1e70196c51346cf10e3f04f51975de5899b5dc6baa5a45ec1d17bc248830d2ca`, bundle - `3415c034955d46c59ca3f7b284a648abf852b1257b77cc49bd6ea9994a7b8cb8`, tag `v0.168.0`, verified by independent download. -- **Delivery:** no configs/ change since v0.167.0 → one signed `agent_update` per box: demo-hp 09:56, Tester 1 09:57, - demo-felhom 10:04 CET — each „signed op COMPLETED", self-check 76/76, „update committed"; the binary's sha256 matches on - all three. -- **Proof:** on Tester 1 (controller 0.347.0) a 128 MB Gokapi had a memory hog killed: host counter 1, one `app_oom` - „seen by docker,cgroup", one operator mail. R-1254: a ceremony ran on 0.168.0 (the happy path); the lost-answer branch - has tests only. -- **Vouch:** the operator, 10:21:56 CET (hub log: agent=0.168.0, the bundle sha above). `pinned.day0_agent` = 0.168.0 - (`6b0b093`). +## Commits -Evidence: felhom.eu `documentation/audits/d63-2026-10-29/` (`opsign-agent.txt`, `agent-delivery*.txt`, `run-p4-oom.log`). +| Commit | CI (job id) | What | +|---|---|---| +| `637c92c` | 2504, 2507 green | The agent's closed list: `restart_controller ` on the host-report reply (`ControlEnvelope.OperatorActions`), the result on the next host report (`OperatorActionResults`). Guards: provisioned, running, parked, swap, lock, vzdump. The brake counts operator restarts with the supervisor's (`opBrakeUntil`). One audit line, one result per id, re-sent until the hub records it; a report is asked for at once. R-1344: 6 unhealthy sweeps → `unresponsive_since` in the stanza. Tests in `internal/localapi/opactions_test.go`, `supervisor_unresponsive_test.go`, `opactions_wiring_test.go`, each seen failing by its mutation. | +| `db25eb0` | 2513 green | v0.169.0 CHANGELOG; `pinned.day0_agent` = 0.169.0 (D50 pin), after the vouch. | + +## Release + +- `release-agent.sh 0.169.0` from a clean clone: sha256 `fc066de640007038ecfaed6a23e4301a27fc486f1d7851c36177acdd26c2df61`, + bundle `3ca33f9cbab3bdd4c1b7f8ac90aa21e43b64209f1cb45c77ac72b3405956041b`, tag `v0.169.0`, verified by download. +- Signed `agent_update` to the three test boxes; each committed. +- Vouched by the operator 14:06:09 CET (the page answered 504; the save went through — R-1346). + +## Live proofs (Tester 1, through the hub endpoint the button posts, CC's `cc-hosts` token) + +- 13:01–13:02 CET on rc builds: press 1 → the controller answered after 9 s; press 2 with the controller stopped by hand → + restarted 5 s after the stop; press 3 done; press 4 refused („3 restarts in 15 minutes"). +- 14:49 CET on the release builds (agent 0.169.0, controller 0.348.0, hub 0.176.1): one press → „done — restarted; the + controller answered after 9 s", on the hub 16 s after the press; the box showed the controller „Up 12 seconds". + +Evidence: felhom.eu `documentation/audits/release-2026-10-29b/` (`p1-restart/`, `final/`).