admin 98ea1ed49c v0.78.0: DELETE /escrow/stage-secret — idempotent staged-secret wipe ...

The staged offsite repo password was wiped only by the escrow-create
ceremony; a confirm without a fresh ceremony (password already escrowed)
left the 0600 staged file behind. The controller calls this on every
EscrowState flip to escrowed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-09 22:19:10 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

capability

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

config

feat(felhomsshd): dedicated OOB sshd instance + port-adaptive belt (H1 Parts 2-4 agent)

2026-07-05 22:27:02 +02:00

desired

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

v0.77.0: fork-4 — escrow the offsite restic repo password under R

2026-07-09 14:56:09 +02:00

felhomsshd

fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)

2026-07-05 22:58:58 +02:00

guesthook

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

hub

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

v0.78.0: DELETE /escrow/stage-secret — idempotent staged-secret wipe

2026-07-09 22:19:10 +02:00

log

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

pbs: namespace-aware client for per-customer offsite tenancy (S4)

2026-07-04 16:12:15 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

GL-5: explicit rootfs override for DR restore (live-discovered PVE constraint)

2026-07-08 09:02:36 +02:00

reconcile

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

selfupdate

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

signedjobs

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

storage

fix(localapi): F2 mount-role fallback — enrolled user-data drives ejectable again (v0.73.0)

2026-07-06 20:07:45 +02:00

wgtunnel

feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])

2026-07-05 22:08:04 +02:00