admin 3d1323cc09 pbsdr: escrow seed writes in place (config dir is root-owned; tmp+rename impossible for the non-root agent — demo live finding); recovery copy parked in the state dir ...

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-10 21:59:51 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

capability

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

config

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

desired

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

v0.79.0: escrow upload carries restic_pw_sha256 (SLICE 3 auto-confirm, agent third)

2026-07-09 23:05:30 +02:00

felhomsshd

fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)

2026-07-05 22:58:58 +02:00

guesthook

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

hub

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

v0.78.0: DELETE /escrow/stage-secret — idempotent staged-secret wipe

2026-07-09 22:19:10 +02:00

log

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

pbsdr

pbsdr: escrow seed writes in place (config dir is root-owned; tmp+rename impossible for the non-root agent — demo live finding); recovery copy parked in the state dir

2026-07-10 21:59:51 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

reconcile

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

selfupdate

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

signedjobs

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

storage

fix(localapi): F2 mount-role fallback — enrolled user-data drives ejectable again (v0.73.0)

2026-07-06 20:07:45 +02:00

wgtunnel

feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])

2026-07-05 22:08:04 +02:00