admin 25024d9dda capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0 ...

New internal/capability: Manifest of required sudo -n grants + Prober that LISTS each
via 'sudo -n -l' (never executes) + binary-exists check → ok/degraded snapshot on the hub
report. Build-time test asserts manifest⊆sudoers (red-proof: dropping lxc-info FAILs the
gate). Startup logs N/N ok + ERROR per degraded. Serve-degraded; no allowlist change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EPZ4GJ8L5Jqf8UiPwbn1kt

2026-06-29 18:43:49 +02:00

..

testdata

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00

client_test.go

feat(hub): host-report client + collector + first daemon loop (slice 3, v0.3.0)

2026-06-08 16:20:09 +02:00

client.go

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

cloudflared.go

feat(hub): host-report client + collector + first daemon loop (slice 3, v0.3.0)

2026-06-08 16:20:09 +02:00

collect_test.go

v0.6.0: slice 6 Phase B — PBS offsite tier (verify + PBS-API client + reporting)

2026-06-09 16:53:04 +02:00

collect.go

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00

contract_test.go

agent v0.38.0: DR recipe — emit secret-free storage/guest/PBS half in host-report

2026-06-16 18:32:15 +02:00

cputemp_test.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

cputemp.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

desired_client_test.go

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

desired_contract_test.go

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

dr_recipe_test.go

v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape

2026-06-16 20:25:09 +02:00

dr_recipe.go

v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape

2026-06-16 20:25:09 +02:00

hostmetrics_test.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

loop_test.go

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

loop.go

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

mock_test.go

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

report_test.go

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00

report.go

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00