admin 98f3cdd76a Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed ...

- felhom-mkfs-guarded: the 0.158.0 exemption for a sibling part mounted at /mnt/<name> + under /mnt/felhom-drives is
  removed — the agent can make that corroborating mount itself. Every mount of every node outside /mnt/felhom-drives
  refuses (kernel mount table); an unlistable disk refuses. CandidatePartition.Formattable is false for every part of a
  disk with a mounted node, so it is never offered for formatting (attach still is).
- felhom-internal-place: a failed lvs listing, a listing without the pool, or a blkid exit other than 0/2 refuses
  (they read as "nothing promised" / "no signature" before).
Every new test was seen failing against the 0.158.0 versions.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

2026-10-16 04:02:00 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

capability

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

config

R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate

2026-10-06 11:24:45 +02:00

desired

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

R-304: no 'wrong code' when earlier sealed packages were not all checked (424 older_unchecked)

2026-10-08 07:53:01 +02:00

fasttick

v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)

2026-07-17 19:09:40 +02:00

felhomsshd

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

fstrim

R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate

2026-10-06 11:24:45 +02:00

guesthook

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

guestnet

v0.96.0 — R-50 island NIC: provision attaches the guest island net1

2026-07-25 14:16:23 +02:00

httpx

R-344: restore the idle-connection timeout our hand-rolled transports lost

2026-08-20 11:09:39 +02:00

hub

Physical-disk identity of every storage place + POST /disks/same-disk (felhom.eu architecture/16 §3/§4)

2026-10-15 21:09:18 +02:00

lanresolver

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

2026-10-05 18:56:13 +02:00

localapi

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

log

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

osupdate

R-899: no OS leg after a household press (trigger=manual); after-boot kernel reports carry the saved ring

2026-10-08 07:34:19 +02:00

pbs

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

2026-10-05 18:56:13 +02:00

pbsdr

v0.128.0 — R-221: the escrow seed is asserted every tick, not remembered once

2026-08-08 16:29:13 +02:00

poke

v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)

2026-07-16 22:47:22 +02:00

poweroff

Host power-off for the household (R-998): POST /host/poweroff

2026-10-13 19:29:52 +02:00

privapplytest

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

provision

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

proxmox

R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate

2026-10-07 10:19:38 +02:00

pvegate

R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate

2026-10-07 10:19:38 +02:00

reconcile

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

restorespace

v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)

2026-09-24 16:23:15 +02:00

selfheal

agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

2026-07-12 07:48:49 +02:00

selfupdate

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

signedjobs

The internal data place, partitions as places, add_internal_place (felhom.eu architecture/16 §5-§7, §9; build B)

2026-10-16 03:55:47 +02:00

storage

Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed

2026-10-16 04:02:00 +02:00

vzpartial

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

wgtunnel

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00