6 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Opus 5.5	d03ab7f1f5	R-836: the kernel lane — one-shot boot through the ESP flag, boot good / one self-revert, night step on a told night ... Wrapper layer kernel (stage / reboot / boot / good / revert / cancel / status; R20-R23), the two GRUB generators in the bundle (option C on the one-shot entry), the agent's night step and after-boot judge (host health rule + hub reached, 20 min measured), the signed os_kernel_step (stage only). Red-proofs: felhom.eu audits/kernel-lane-2026-10-07/A/redproof.txt. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 15:18:24 +02:00
adminandClaude Opus 5.5	ce1a4b4758	R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate ... The wrapper gains layer "pve" (slow lane): the host's Proxmox userspace packages only — origin "Proxmox Debian Repository", never a kernel / boot / firmware / microcode name (R14), no removal, no undo, a new package only from an allow-list; authority = a signed os_pve_step or the root-owned ring-0 mark. The night leg runs it in ring 0 after a healthy host step; ring 1 only by a signed job (PVEStepExecutor). While it runs, the agent's own /etc/pve writes (every non-GET API call, pct config verbs, pvesm, pveum, felhom-pbs-apply) wait on internal/pvegate. Health = the host rule + unchanged container ids + pveversion reads the installed pve-manager. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-07 10:19:38 +02:00
adminandClaude Opus 5.5	acccb66bd3	R-528 (09 decision 157): after a Docker engine step the wrapper proves the engine reports a memory kill ... felhom-os-apply: a docker-layer apply runs oom_check() after health_after and reports "oom_check": {result pass|fail|error, oom_killed, oom_event, exit_code, image, detail}. One throwaway container (the controller's image, --pull never, --network none, 64m cap, label felhom.oomcheck=1) runs dd bs=200M; pass only with OOMKilled=true AND the oom event (read after a 2 s settle, --until = guest epoch + 1: measured on demo-hp, an --until taken right after the run missed the event). docker rm -f always runs in a finally; every call is bounded (<= 90 s). It never changes the step's outcome or health. New wrapper-only mode "oom-check" (docker layer) runs the check alone; check_guest etc. still apply. Agent: WrapperReport/Report gain OOMCheck (json:"oom_check"), copied unchanged in runLayer and in the kept-copy path. Tests: 9 wrapper tests + 2 Go tests, each red-proofed (audits/readback-2026-10-07/F/red-*.txt). Also: test_felhom_os_apply.py's `if __name__` sat mid-file, so 11 tests (UnsentReport, SaveReportOnDisk, AgentDiesMidPass, CrashLeftTheJournal) never ran as a script or from TestWrapperSuite; moved to the end (they pass). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-06 19:34:55 +02:00
adminandClaude Opus 5.5	56ef1d6655	v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 09:23:23 +02:00
adminandClaude Opus 5.5	8401a30917	v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 07:49:04 +02:00
adminandClaude Opus 5.5	ca78c17b29	v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 07:14:32 +02:00