admin 3844df7c23 controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0 ...

controllerHealthy reads RestartCount (running&&rc>0 -> not ok) + signals needsDwell for no-healthcheck;
verify requires verifyDwell(=3) consecutive ok polls for a no-healthcheck image (real healthcheck
trusted immediately). Closes the F1 hole (alpine crash-loop passed the point-in-time check). Red-proof
+ dwell + real-image tests. No sudoers/orchestration change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ

2026-06-29 22:45:41 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

slice 8B.2 (agent): emit snapshotted phase at storage-snapshot moment (v0.13.0)

2026-06-10 14:54:18 +02:00

capability

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

config

v0.28.0: backup re-target → felhom-pbs (offsite DR) + operator-signed decommission

2026-06-12 20:26:34 +02:00

desired

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

escrow

slice 10D (agent): DR capstone — identity escrow + restore-mode consumption (v0.18.0)

2026-06-11 09:48:36 +02:00

guesthook

agent v0.33.0: C1 net — pre-start self-heal hook + decommission mp-delete

2026-06-15 16:11:10 +02:00

hub

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

log

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

pbs

v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape

2026-06-16 20:25:09 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

reconcile

v0.40.0: third CT volume — SSD user-data (/mnt/sys_drive, mp1) baked + -sysdata-grow

2026-06-23 16:25:14 +02:00

signedjobs

v0.28.0: backup re-target → felhom-pbs (offsite DR) + operator-signed decommission

2026-06-12 20:26:34 +02:00

storage

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00