admin 3844df7c23 controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0 ...

controllerHealthy reads RestartCount (running&&rc>0 -> not ok) + signals needsDwell for no-healthcheck;
verify requires verifyDwell(=3) consecutive ok polls for a no-healthcheck image (real healthcheck
trusted immediately). Closes the F1 hole (alpine crash-loop passed the point-in-time check). Red-proof
+ dwell + real-image tests. No sudoers/orchestration change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ

2026-06-29 22:45:41 +02:00

..

cert_test.go

agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0

2026-06-29 21:45:25 +02:00

cert.go

agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0

2026-06-29 21:45:25 +02:00

controllerswap_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

controllerswap.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

decommission_test.go

agent v0.36.1: decommission keeps raw mounted (re-enrollable)

2026-06-15 20:06:23 +02:00

disks_bug2_f9_test.go

F20-BUG2 + F9-reporting: /disks surfaces wipe_durable_id (gate scheme) + guest_attached

2026-06-14 15:00:56 +02:00

disks_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

disks.go

agent v0.36.2: eject keeps raw mounted (reconnectable, like decommission)

2026-06-15 20:12:44 +02:00

formatjob_test.go

F20-BUG3: run mkfs detached (survives request deadline + agent restart); v0.31.0

2026-06-14 15:16:01 +02:00

formatjob.go

F20-BUG3: run mkfs detached (survives request deadline + agent restart); v0.31.0

2026-06-14 15:16:01 +02:00

guestbind.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

guestbinds_reassert_test.go

agent v0.34.0: intermediary mount model — shared parent + host-side attach/detach + reconcile

2026-06-15 16:29:32 +02:00

guestbindstore.go

v0.32.0: self-serve decommission endpoint + intent-aware re-assert (B2a)

2026-06-14 19:55:17 +02:00

host_metrics_test.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

host_metrics.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

intermediary_test.go

agent v0.36.0: guest boot-id on /disks (deterministic guest-reboot recreate)

2026-06-15 19:13:15 +02:00

intermediary.go

agent v0.36.7: isolate shared parent only on create (no peer-group churn)

2026-06-15 20:31:38 +02:00

server_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

server.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

tokenstore_test.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

tokenstore.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

wipe_reresolve_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

wipe_reresolve.go

fix(AGENT-001): anti-retarget re-resolution for inline customer-confirmed wipe

2026-06-13 19:26:27 +02:00