admin 2bf9354c0e fix(felhomsshd): don't empty the belt/authkeys on an unfetched block (operator lockout) ...

Mirrors wgtunnel fetched=false-is-never-a-teardown: until the desired-state is
delivered, @operator_ips + felhom-op authorized_keys are left untouched (a nil
block on agent restart would otherwise empty @operator_ips and lock the operator
out until the next fetch). Belt.Sync split into SyncPort (always) + SyncOperator
(fetched only).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-05 22:51:30 +02:00

..

authz

…

backup

agent v0.51.0: local vzdump retention default (--prune-backups keep-last=3)

2026-06-30 19:44:07 +02:00

capability

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

config

feat(felhomsshd): dedicated OOB sshd instance + port-adaptive belt (H1 Parts 2-4 agent)

2026-07-05 22:27:02 +02:00

desired

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

wgtunnel: S3 Part 3 — FELHOM_WG sudoers + capabilities + config (DEFAULT OFF) + main wiring + escrow join

2026-07-04 07:14:33 +02:00

felhomsshd

fix(felhomsshd): don't empty the belt/authkeys on an unfetched block (operator lockout)

2026-07-05 22:51:30 +02:00

guesthook

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

hub

test(hub): collector OOB stanza wiring (H1)

2026-07-05 22:30:01 +02:00

lanresolver

…

localapi

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

log

…

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

pbs: namespace-aware client for per-customer offsite tenancy (S4)

2026-07-04 16:12:15 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

pbs: namespace-aware client for per-customer offsite tenancy (S4)

2026-07-04 16:12:15 +02:00

reconcile

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

selfupdate

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

signedjobs

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

storage

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

wgtunnel

feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])

2026-07-05 22:08:04 +02:00