felhom-agent

afterbackup_test.go

R-899: no OS leg after a household press (trigger=manual); after-boot kernel reports carry the saved ring

2026-10-08 07:34:19 +02:00

agestate_test.go

…

backup_cap_test.go

The local whole-guest tier keeps one restore point per day for 3 days: keep-daily instead of keep-last (R-1149, operator D17, unreleased)

2026-10-19 02:59:34 +02:00

backup_cap.go

Two texts made true after 0.160.0: the ceremony log line names the confirm order; the R-973 comments name whole_guest_backup_refused (no behaviour change)

2026-10-19 05:25:58 +02:00

backup_target_guard_test.go

…

backup_target_move_test.go

…

backup_target.go

…

backup_tier_states_test.go

…

backup_tiers_test.go

…

backup_tiers.go

…

blankformat_test.go

…

capacity_linux.go

…

capacity_other.go

…

cert_test.go

…

cert.go

…

controllersupervisor_test.go

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

controllersupervisor.go

…

controllerswap_test.go

R-861 (a) A1 + (b) B2: the image ref goes to a root verb that checks it; the agent's in-guest tee grant is gone; felhom-op's pct lines are exact (09 §3 decision 165)

2026-10-07 10:19:28 +02:00

controllerswap.go

R-861 (a) A1 + (b) B2: the image ref goes to a root verb that checks it; the agent's in-guest tee grant is gone; felhom-op's pct lines are exact (09 §3 decision 165)

2026-10-07 10:19:28 +02:00

crashguard_test.go

R-856: GET /host/crash-guard — the host crash guard's last-boot record for the controller (09 decision 143)

2026-10-06 11:48:01 +02:00

crashguard.go

R-856: GET /host/crash-guard — the host crash guard's last-boot record for the controller (09 decision 143)

2026-10-06 11:48:01 +02:00

debuglogs_test.go

…

debuglogs.go

…

decommission_test.go

…

disks_backup_target_row_test.go

…

disks_bind_liveness_test.go

…

disks_bug2_f9_test.go

…

disks_candidates_test.go

…

disks_device_presence_test.go

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

2026-10-05 18:56:13 +02:00

disks_smart_test.go

…

disks_test.go

R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id

2026-10-05 21:16:11 +02:00

disks.go

Physical-disk identity of every storage place + POST /disks/same-disk (felhom.eu architecture/16 §3/§4)

2026-10-15 21:09:18 +02:00

durableid_rawmount_test.go

…

escrow_ceremony_test.go

The new escrow package reaches the hub only when its code is claimed (R-978, unreleased)

2026-10-18 19:42:02 +02:00

escrow_ceremony.go

Two texts made true after 0.160.0: the ceremony log line names the confirm order; the R-973 comments name whole_guest_backup_refused (no behaviour change)

2026-10-19 05:25:58 +02:00

escrow_r978_test.go

The new escrow package reaches the hub only when its code is claimed (R-978, unreleased)

2026-10-18 19:42:02 +02:00

escrow_r1151_test.go

The new escrow package reaches the hub only after the household typed two words of the code back: POST /escrow/ceremony/confirm; an old controller keeps the claim order (R-1151, unreleased)

2026-10-19 03:03:37 +02:00

escrow_recover_class_test.go

R-304: no 'wrong code' when earlier sealed packages were not all checked (424 older_unchecked)

2026-10-08 07:53:01 +02:00

escrow_recover.go

R-304: no 'wrong code' when earlier sealed packages were not all checked (424 older_unchecked)

2026-10-08 07:53:01 +02:00

escrow_stage_test.go

…

escrow_stage.go

…

f2_role_fallback_test.go

…

format_fsuuid_test.go

R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id

2026-10-05 21:16:11 +02:00

formatjob_test.go

…

formatjob.go

R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id

2026-10-05 21:16:11 +02:00

guestbind.go

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

guestbinds_reassert_test.go

…

guestbindstore.go

…

guestmemory_test.go

R-1192 follow-up: report host swap vs the guests' swap allowance (log once, hub alarm, local API); R-1194: no OOB stanza before the first felhom-sshd pass; unreleased

2026-10-21 21:29:07 +02:00

guestmemory.go

R-1192 follow-up: report host swap vs the guests' swap allowance (log once, hub alarm, local API); R-1194: no OOB stanza before the first felhom-sshd pass; unreleased

2026-10-21 21:29:07 +02:00

guestpower_observable_test.go

…

guestpower_test.go

…

guestpower.go

…

guestswap_test.go

R-1192: every guest may swap as much as its RAM (bring-up, RAM resize, once at start) — the measured 8 GB freeze; unreleased

2026-10-21 15:43:18 +02:00

guestswap.go

R-1192: every guest may swap as much as its RAM (bring-up, RAM resize, once at start) — the measured 8 GB freeze; unreleased

2026-10-21 15:43:18 +02:00

host_metrics_test.go

…

host_metrics.go

…

hostpoweroff_test.go

Host power-off: a guest started after acceptance cancels it; escrow reply data race fixed

2026-10-13 19:38:23 +02:00

hostpoweroff.go

Host power-off: a guest started after acceptance cancels it; escrow reply data race fixed

2026-10-13 19:38:23 +02:00

intermediary_attach_liveness_test.go

…

intermediary_gate_test.go

…

intermediary_install_test.go

…

intermediary_test.go

…

intermediary.go

…

internalplace_test.go

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

internalplace.go

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

netreassert_test.go

…

netreassert.go

…

netstorage_test.go

…

netstorage.go

…

netverify_logseq_test.go

…

netverifyjob_test.go

…

netverifyjob.go

…

r861_controller_image_test.go

R-861 (a) A1 + (b) B2: the image ref goes to a root verb that checks it; the agent's in-guest tee grant is gone; felhom-op's pct lines are exact (09 §3 decision 165)

2026-10-07 10:19:28 +02:00

r894_saved_backup_test.go

R-894: after a restart the agent remembers the last backup per tier

2026-10-06 20:33:27 +02:00

r1192_hostswap_test.go

R-1192 follow-up: report host swap vs the guests' swap allowance (log once, hub alarm, local API); R-1194: no OOB stanza before the first felhom-sshd pass; unreleased

2026-10-21 21:29:07 +02:00

samedisk_test.go

Physical-disk identity of every storage place + POST /disks/same-disk (felhom.eu architecture/16 §3/§4)

2026-10-15 21:09:18 +02:00

samedisk.go

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

server_test.go

Unreleased: host_busy on GET /backup/status (R-921), a missing tunnel container is 'absent' and not-applicable after an OS update (R-1070), the janitor forces a half-removed vzdump snapshot once (R-1010)

2026-10-19 19:52:37 +02:00

server.go

Unreleased: host_busy on GET /backup/status (R-921), a missing tunnel container is 'absent' and not-applicable after an OS update (R-1070), the janitor forces a half-removed vzdump snapshot once (R-1010)

2026-10-19 19:52:37 +02:00

stalelock_inflight_test.go

R-1008: in flight = the worker process lives (Proxmox's pid+pstart rule), not a wall-clock start vs btime (security review: a clock step could make a live backup look dead)

2026-10-14 11:36:04 +02:00

stalelock_pool_test.go

Unreleased: host_busy on GET /backup/status (R-921), a missing tunnel container is 'absent' and not-applicable after an OS update (R-1070), the janitor forces a half-removed vzdump snapshot once (R-1010)

2026-10-19 19:52:37 +02:00

stalelock_r1010_test.go

Unreleased: host_busy on GET /backup/status (R-921), a missing tunnel container is 'absent' and not-applicable after an OS update (R-1070), the janitor forces a half-removed vzdump snapshot once (R-1010)

2026-10-19 19:52:37 +02:00

stalelock_test.go

…

stalelock.go

Unreleased: host_busy on GET /backup/status (R-921), a missing tunnel container is 'absent' and not-applicable after an OS update (R-1070), the janitor forces a half-removed vzdump snapshot once (R-1010)

2026-10-19 19:52:37 +02:00

tokenstore_test.go

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

2026-10-05 18:56:13 +02:00

tokenstore.go

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

2026-10-05 18:56:13 +02:00

version_header_test.go

…

vzpartial_sweep.go

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

wipe_reresolve_test.go

…

wipe_reresolve.go

…