admin 1c3a3ef9ad v0.88.0: controller-driven escrow ceremony — --output=json machine mode (escrowCeremony extraction, text mode byte-identical), the ONE fixed argv (escrow.CeremonyArgs, shared by exec+manifest+FELHOM_ESCROW sudoers, pin-tested), localapi ceremony job (single-flight, 60s) + one-shot in-memory R claim (10min TTL, unclaimed_void) + preflight; escrow-ceremony capability (Critical, pbs_dr-gated)

2026-07-13 19:01:11 +02:00

..

agent.example.json

slice 8B (agent half): /backup/due cadence policy + /backup/status phases (v0.11.0)

2026-06-10 10:44:50 +02:00

build-golden.sh

configs: build-golden.sh v2.0.0 — mandatory controller tag (B5) + bootstrap .path unit (B1)

2026-07-03 18:21:21 +02:00

felhom-agent-limits.conf

feat(configs): D1 Part 1 — self-update host artifacts (guarded wrapper, rollback unit, limits drop-in, sudoers alias)

2026-07-05 15:20:37 +02:00

felhom-agent-rollback.service

feat(configs): D1 Part 1 — self-update host artifacts (guarded wrapper, rollback unit, limits drop-in, sudoers alias)

2026-07-05 15:20:37 +02:00

felhom-agent.service

v0.43.0: canonical systemd unit + publish agent binary + golden to Gitea (BUNDLE slice)

2026-06-28 08:38:01 +02:00

felhom-agent.sudoers

v0.88.0: controller-driven escrow ceremony — --output=json machine mode (escrowCeremony extraction, text mode byte-identical), the ONE fixed argv (escrow.CeremonyArgs, shared by exec+manifest+FELHOM_ESCROW sudoers, pin-tested), localapi ceremony job (single-flight, 60s) + one-shot in-memory R claim (10min TTL, unclaimed_void) + preflight; escrow-ceremony capability (Critical, pbs_dr-gated)

2026-07-13 19:01:11 +02:00

felhom-localapi-firewall.example

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

felhom-mgmt-watchdog.service

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mgmt-watchdog.sh

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mgmt-watchdog.timer

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mkfs-guarded.sh

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

felhom-oob-nft.service

feat(configs): OOB static belt table + loader unit + felhom-op sudoers (H1 Part 5)

2026-07-05 22:33:47 +02:00

felhom-oob.nft

feat(configs): OOB static belt table + loader unit + felhom-op sudoers (H1 Part 5)

2026-07-05 22:33:47 +02:00

felhom-op.sudoers

feat(configs): OOB static belt table + loader unit + felhom-op sudoers (H1 Part 5)

2026-07-05 22:33:47 +02:00

felhom-pbs-apply

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

felhom-privsep.tmpfiles

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-selfupdate-guarded

feat(configs): D1 Part 1 — self-update host artifacts (guarded wrapper, rollback unit, limits drop-in, sudoers alias)

2026-07-05 15:20:37 +02:00

felhom-sshd.service

feat(felhomsshd): dedicated OOB sshd instance + port-adaptive belt (H1 Parts 2-4 agent)

2026-07-05 22:27:02 +02:00