admin 8db92947cd F-LEAK: remove the pool-adoption fix — refuted live; the fix is a path-scoped ACL (v0.108.0) ...

PUT /pools/{pool} ALSO requires VM.Allocate on the VM being added, so Pool.Allocate
cannot bootstrap its own membership. Proven live on demo-hp 2026-07-28. The real fix is
felhom-host-install v1.21.0 granting FelhomAgentGuest at /vms/990000..990009.

2026-07-28 11:05:37 +02:00

..

authz

…

backup

docs: correct inflight.go's DEFERS claim (F-A1)

2026-07-28 08:50:23 +02:00

capability

fix(v0.92.0): the guestnet probes need their own sudoers grant (found live)

2026-07-21 12:32:27 +02:00

config

v0.99.0 — R-82 operator rulings: 2-week offsite retention + one backup at a time

2026-07-26 15:05:54 +02:00

desired

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

escrow: a recovery code can no longer contain a hyphenated word (v0.93.0)

2026-07-21 14:46:51 +02:00

fasttick

v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)

2026-07-17 19:09:40 +02:00

felhomsshd

fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)

2026-07-05 22:58:58 +02:00

guesthook

F11 matrix-correction: re-arm on guest-blind (active mounts not inherited by rebooted guest — live finding)

2026-07-12 07:58:39 +02:00

guestnet

v0.96.0 — R-50 island NIC: provision attaches the guest island net1

2026-07-25 14:16:23 +02:00

hub

v0.95.0: SMART coverage — union-path drives + LVM/dm root + device model

2026-07-25 08:21:45 +02:00

lanresolver

…

localapi

F-REBOOT + F-LEAK: the agent's authority over guest lifecycle (v0.107.0)

2026-07-28 10:27:07 +02:00

log

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

v0.91.2 — log a healthy credential probe at Debug

2026-07-21 10:20:10 +02:00

pbsdr

test: assert the agent upgrade alone is hash-neutral (no spurious re-apply at STOP-1)

2026-07-21 10:15:24 +02:00

poke

v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)

2026-07-16 22:47:22 +02:00

provision

agent v0.86.0: DR-tier-by-default — capability inactive state (GatedBy/GateActive, pbsdr gate via DRConfigured) + F-3 root-run provision parent ownership

2026-07-12 20:06:27 +02:00

proxmox

v0.101.0 — R-82: a leaked restore-test scratch can no longer auto-start

2026-07-26 16:49:40 +02:00

reconcile

F-LEAK: remove the pool-adoption fix — refuted live; the fix is a path-scoped ACL (v0.108.0)

2026-07-28 11:05:37 +02:00

selfheal

agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

2026-07-12 07:48:49 +02:00

selfupdate

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

signedjobs

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

storage

v0.95.0: SMART coverage — union-path drives + LVM/dm root + device model

2026-07-25 08:21:45 +02:00

wgtunnel

v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)

2026-07-17 19:09:40 +02:00