From e66a48f2b7ce1e84f0c95217b391656a68111824 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 26 Oct 2026 10:38:03 +0100 Subject: [PATCH] REPORT: the 2026-10-26 attended release run. Docs only. --- REPORT.md | 40 ++++++++++++++++++++-------------------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/REPORT.md b/REPORT.md index 4c5b1e7..ab54b47 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,26 +1,26 @@ -# REPORT — D50 retention gate, R-1280, R-1285: committed, not released (2026-10-25 night) +# REPORT — agent v0.166.0 released and vouched (2026-10-26, attended release run) -**Plain words first.** Three agent changes are on `main`. None is released. The release (v0.166.0) is Monday's and -waits for the operator's vouch (felhom.eu `STATUS.md`, the Monday list). +**Plain words first.** Agent 0.166.0 runs on Tester 1, demo-hp and demo-felhom, and the operator vouched it at 10:04:55 +CET, so new installs get it (a fresh install today fetched it). A signed job's window is now at most 24 hours — seen +live. One part is not done: on a BYO host the SSH clean-up still comes one release late (R-1285, back to OPEN). -## Each change, before → after +## Release -| Row | Commit | Before | After | Proof | -|---|---|---|---|---| -| R-1290 (D50 = A) | `feaaa0e` | the published-versions gate knew no keep rule | it asserts the newest 5 released versions plus the pinned MinAgent floor (0.158.1) and the day-0 agent (0.165.0) in `scripts/retention-policy.json`; a pin with no tag fails | decoys seen failing; CI 2339 ✓ | -| R-1280 | `d912307` | a signed job's window could be any length | at most 24 h — the verifier (`ErrWindowTooLong`), the root wrapper (`MAX_WINDOW_S`) and `felhom-opsign -ttl`; exactly 24 h is accepted | red-proof; unit tests; not live | -| R-1285 | `abcc1e6` | a BYO host upgraded from an old wrapper kept our SSH drop-in until its NEXT bundle (the old wrapper planned the new bundle) | after every bundle install the agent runs the new wrapper's `bundle-policy` pass; the file is removed in one update; a failing `sshd -t` puts it back | red-proof; live on a BYO test VM: one signed run gave `BUNDLE POLICY REMOVED`; the test package was deleted after (204, then 404) | +- From a clean clone at `aa69114` (CI 2351 ✓): tag `v0.166.0`; binary sha256 + `3f22c65b78914632fa476292f6b58e5af3ed9e9900f3a5a7a347a9c0bfea9c5c`; bundle + `093772c1bda8b974e86ed45472f8fadc8992f247563f5739876102a5156003a3`; verified by independent download. +- Delivered by signed `agent_update` + `agent_config_update`: each box COMPLETED, bundle INSTALLED, self-check 76/76, + update committed. +- D50 pin `day0_agent` → 0.166.0 (`b890b57`, CI 2356 ✓); the published gate green. -## CI (by commit hash, `jobs` endpoint) +## Live checks -`feaaa0e` 2339 ✓ · `d912307` 2344 ✓ · `abcc1e6` 2345 ✓ — all `run_attempt` 1. +- **R-1280 (closed):** a 25 h signed job on demo-hp → „REJECTED signed op — executor not called … op validity window too + long (25h0m0s)"; a 30 min job ran. `felhom-opsign -ttl 25h` refuses (rc 2); 24 h accepted. +- **R-1285 (back to OPEN):** in the normal two-job delivery the bundle job runs in the OLD 0.165.0 process (demo-hp: bundle + 09:03:07–09:03:09 CET, restart into 0.166.0 at 09:03:10), so no policy pass ran on that bundle. Under 0.166.0 a later + bundle logged „BUNDLE POLICY DONE install_mode=appliance removed=0" — the pass is wired; its delivery order is not. + No BYO host is in the fleet. Fix options in the row. +- **R-1289 (hub):** the vouch logged „behind the fleet's 0.344.0" — a release version. -## Teardown - -The BYO test VM (demo-hp 9372) was uninstalled through the product and destroyed. Its hub host record needs the -operator's delete (felhom.eu `STATUS.md`). - -## Evidence - -felhom.eu `documentation/audits/night-2026-10-25/` (`redproof-d50.txt`, `redproof-r1280.txt`, `redproof-r1285.txt`, -`rig/r1285-live.txt`). +Evidence: felhom.eu `documentation/audits/release-monday-2026-10-26/agent-0166/`.