624 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	5798b4bc2b	agent 0.175.1 is vouched (2026-11-15 11:07:35 CET): the day-0 pin ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-15 11:08:04 +01:00
admin	404b105506	agent v0.175.1: the changelog heading (released, not vouched) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-15 10:09:42 +01:00
admin	88d5d56b50	agent (unreleased): the quiet branch for older root files never hides a failed pin (the commit's security review) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS v0.175.1	2026-11-15 10:08:05 +01:00
admin	5ecdd3d521	agent (unreleased): root files older than the agent are not a trust problem on a pinned box (a false operator mail at every box's update) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-15 10:06:17 +01:00
admin	3ea208b8fb	agent v0.175.0: the changelog heading (released, not vouched) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-15 09:50:38 +01:00
admin	db01ae0f2a	agent (unreleased): a cut write of agent.json cannot leave a blind box — a journal of the old bytes, a repair at start (R-1380) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS v0.175.0	2026-11-15 08:20:49 +01:00
admin	54ac2c2ac9	agent (unreleased): the CA copy keeps its previous root only for the changeover, and is compared exactly (the commit's security review) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 19:20:07 +01:00
admin	ec7e699fd7	agent (unreleased): fixes after an independent review — one lock for the writers of agent.json, the trust run serialised and bounded, the CA copy keeps its previous root, the profile stanza from the wrapper's answer, a stale give-up ends, both boot tokens from one read ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 19:09:21 +01:00
admin	61feb95c06	agent (unreleased): the hub is told what the kernel clean-up did and what the profile refresh did (R-1383) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 18:06:12 +01:00
admin	c0bf97de80	agent: gofmt (formatting only) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 17:47:42 +01:00
admin	d5ce5c364a	agent (unreleased): a boot token that a clock step cannot move (R-1395) ... /disks answers guest_boot_key (the kernel's boot_id and the guest init's start) beside the unchanged guest_boot_id. Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 17:43:33 +01:00
admin	a1135018c7	agent (unreleased): a refused signed job and a watchdog give-up reach the hub (R-1383, D78) ... The job runner clears a job with its outcome, a closed reason code and the op's name. The guest-power watchdog's give-up rides the host report until the guest runs. Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 17:29:53 +01:00
admin	ede5d0e6c7	agent (unreleased): the report carries the box's clock at the moment of sending (R-1384, D79) ... sent_at is stamped by Client.Report at every send, never by the collector. The hub reads it to tell a wrong box clock. Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-14 17:09:12 +01:00
admin	386a0c4cf4	2b (unreleased): the agent moves from a pinned Proxmox certificate to the box's root CA copy — copy, proof, then the config; the cause of a trust failure is named (R-1380)	2026-11-14 16:35:22 +01:00
admin	a9ab47ec71	2b (unreleased): the root step that keeps a copy of Proxmox's root CA (wrapper mode pve-ca-copy, R-1380)	2026-11-14 16:28:04 +01:00
admin	2706e35198	v0.174.0 RELEASED and VOUCHED: CHANGELOG, the day-0 pin, CONTEXT, REPORT	2026-11-14 15:23:16 +01:00
admin	cc63dd5204	Old kernels removed by the box (R-1368, wrapper mode kernel-cleanup); security profiles refreshed after a kernel change (R-1388, mode profile-refresh); Go 1.27.4 (R-1391) v0.174.0	2026-11-14 12:11:06 +01:00
admin	91a2924ad0	docs: the tag push takes its token from the secret store; a repository address holds no credential (R-925) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-11 11:12:25 +01:00
admin	9edaa8c082	v0.173.0 vouched and delivered to the three test boxes; pinned.day0_agent = 0.173.0 (D50) ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-10 16:30:01 +01:00
admin	5cebb766e3	v0.173.0 released (not vouched): CHANGELOG, REPORT, CONTEXT — the folder clean-up measured on three boxes, the rollback proven on Tester 1 ... Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-10 16:16:42 +01:00
admin	776025c824	selfupdate: the staging folder keeps what it needs and no more (R-1368 part 2) — not released ... Each good update left its staged binary in <state dir>/selfupdate for ever (49 files / 740 MB on demo-hp). After the wrapper's commit returned success, MaybeCommit now removes every staged binary but the running version's. Nothing is removed while a pending marker exists or cannot be read, at a plain start, or after a rollback. Only a regular file with the exact name Execute writes is removed. The rollback reads pending.json and felhom-agent.prev, no staged binary: pinned by a test on the wrapper's text and by a test that runs the wrapper's real commit and rollback verbs in a sandbox. Red seen three times. No version bump, no build, no vouch. /usr/local/bin/felhom-agent.bak-* is not reached (root-owned; R-1368 part 4). Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS v0.173.0	2026-11-10 14:10:00 +01:00
adminandClaude Opus 5.5	41d5eb8051	v0.172.1 vouched and delivered to the three test boxes (agent + bundle, 77/77); pinned.day0_agent = 0.172.1 (D50) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 23:29:24 +01:00
adminandClaude Opus 5.5	8bd137787e	v0.172.1 released (not vouched): CHANGELOG, REPORT with the operator's PowerShell delivery, CONTEXT ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-11-07 22:43:34 +01:00
adminandClaude Opus 5.5	39db03065a	os-apply: proxmox-grub joins the boot-chain lane (pve step refused R6 nightly on demo-felhom) ... proxmox-grub 2.12-9+pmx4 depends on grub-efi-amd64 of the same version. HOST_SLOW_RE anchors `grub` at the start of a name, so proxmox-grub landed in the ring-0 pve plan, the simulation pulled grub-efi-amd64, and the whole pve step was refused R6 every night since 2026-11-05. Same class as the 2026-10-09 proxmox-secure-boot-support fix. Test test_ring0_pending_pve_leaves_proxmox_grub_out: red before the fix, green after. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS v0.172.1	2026-11-07 22:41:05 +01:00
admin	ba409de4a2	v0.172.0 vouched: pinned.day0_agent = 0.172.0 (D50); CHANGELOG heading; REPORT + CONTEXT	2026-11-03 10:29:51 +01:00
admin	a4f1280399	v0.172.0 released, not yet vouched: CHANGELOG heading (R-1302; agent 2c0222cd, bundle cc34b0bc)	2026-11-03 09:08:07 +01:00
admin	ecbb0cc479	REPORT: 2026-11-02 night, R-1302, commit only v0.172.0	2026-11-03 04:13:52 +01:00
admin	50eeccc986	R-1302: the first grant of a tier logs INFO granted; a grant that existed and vanished keeps the R-190 ERROR. Commit only.	2026-11-02 23:16:10 +01:00
admin	808cdb36ad	REPORT + CONTEXT: v0.171.0 released and vouched; R-1344 restart proven live	2026-10-30 11:09:48 +01:00
admin	84726c9f27	v0.171.0 released and vouched: CHANGELOG heading; pinned.day0_agent = 0.171.0 (D50)	2026-10-30 10:49:46 +01:00
admin	bd18347c1c	R-1344 decided from the night's measurement: a controller that runs but does not answer is restarted at 10 unhealthy sweeps (alarm at 6) — busy file + the brake refuse; stanza carries unresponsive_restart_after_s / unresponsive_restart_at v0.171.0	2026-10-30 09:20:37 +01:00
admin	98bd1b71e9	REPORT + CONTEXT: v0.170.0 released and vouched; reboot_guest proven on the release builds	2026-10-29 20:24:29 +01:00
admin	6578a8b91e	v0.170.0 released and vouched: CHANGELOG heading; pinned.day0_agent = 0.170.0 (D50)	2026-10-29 18:59:05 +01:00
admin	ca15a31690	D65 = A: reboot_guest joins the agent's closed operator-action list — guards (busy controller file, heavy gate, jobs, lock, parked, 1/hour, the brake), result with both times, GET /guest/operator-reboot for the household line; one read-only sudo vector v0.170.0	2026-10-29 16:04:19 +01:00
admin	bdea4694a4	REPORT + CONTEXT: v0.169.0 released and vouched; restart_controller proven on the release builds	2026-10-29 15:11:11 +01:00
admin	db25eb0e71	v0.169.0 released and vouched (14:06:09 CET): CHANGELOG; D50 pinned.day0_agent = 0.169.0	2026-10-29 14:09:04 +01:00
admin	637c92c762	Operator actions for the agent: restart_controller from the hub (closed list, the supervisor's guards, the brake counts operator restarts); R-1344: a running-but-unhealthy controller raises unresponsive — alarm only; tests red first v0.169.0	2026-10-29 12:30:36 +01:00
admin	63e63ee8bb	v0.168.0 released and vouched: CONTEXT, REPORT	2026-10-29 10:48:37 +01:00
admin	6b0b093199	D50: pinned.day0_agent = 0.168.0 (vouched by the operator 2026-10-29 10:21:56 CET); CHANGELOG notes the vouch	2026-10-29 10:33:58 +01:00
admin	f4e63a55da	v0.168.0: CHANGELOG — released (agent 1e70196c…, bundle 3415c034…), committed on demo-felhom, Tester 1, demo-hp; not vouched yet	2026-10-29 10:15:55 +01:00
admin	91bd96c755	REPORT + CONTEXT: R-528 and R-1254 on main, not released (night 2026-10-28) v0.168.0	2026-10-29 02:51:00 +01:00
admin	6f933d6ee3	R-528: GET /guest/oom-kills — the kernel's per-container OOM counter of the token's guest, read on the host (no sudo) ... Tests TestR528_* (fake cgroup tree), red-proved by mutation. Commit only; the agent release needs the vouch.	2026-10-28 23:22:40 +01:00
admin	5ddd124cfc	R-1254 (ceremony half, HUNT-3 H2): after a failed escrow upload, ask the hub which package it holds before wording the result ... The hub holds the new package -> success; another package -> 502 'previous code still works' (now true); cannot be asked -> 504, no promise. Tests TestR1254_* red before the fix. Commit only; the agent release needs the vouch.	2026-10-28 22:51:08 +01:00
admin	3055bc54c1	D50 pin: day0_agent 0.167.0 (the operator's vouch 2026-10-27, read from the hub)	2026-10-27 20:45:25 +01:00
admin	007199342f	v0.167.0 RELEASED (not vouched yet): CHANGELOG header, REPORT	2026-10-27 15:49:30 +01:00
admin	54d3a1057b	CHANGELOG: the unreleased header names R-972 (Go 1.27.3) v0.167.0	2026-10-26 22:21:47 +01:00
admin	fbbb168d1f	build(R-972): Go 1.27.3 (GO-2026-6809, crypto/x509) — govulncheck 1 → 0 called	2026-10-26 20:34:25 +01:00
admin	3911cc6f52	fix(R-1232): the tier due-check counts only this box's archives (own key) — a reinstalled box's first whole-guest copy is not a week late ... Red-proved (the old box's archive was counted). Commit only.	2026-10-26 20:15:39 +01:00
admin	ad80ee749a	docs: CONTEXT — R-1285 state and Tuesday's line test	2026-10-26 18:11:24 +01:00
admin	0683cc2dab	REPORT: the 2026-10-26 afternoon run. Docs only.	2026-10-26 14:38:15 +01:00