admin 9b0d6c2c82 agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0 ...

EnsureLeaf returns generated bool; call-site logs INFO 'leaf LOADED' vs WARN 'leaf REGENERATED —
previously issued bootstrap pins now INVALID'. Catches the 2026-06-28 silent-regen incident class.
Test: first=generated, second=loaded+same fp. No new sudo surface.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ

2026-06-29 21:45:25 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

slice 8B.2 (agent): emit snapshotted phase at storage-snapshot moment (v0.13.0)

2026-06-10 14:54:18 +02:00

capability

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

config

v0.28.0: backup re-target → felhom-pbs (offsite DR) + operator-signed decommission

2026-06-12 20:26:34 +02:00

desired

slice 10A: activate the control envelope (Down channel) + hub-backed desired provider (v0.15.0)

2026-06-10 19:02:59 +02:00

escrow

slice 10D (agent): DR capstone — identity escrow + restore-mode consumption (v0.18.0)

2026-06-11 09:48:36 +02:00

guesthook

agent v0.33.0: C1 net — pre-start self-heal hook + decommission mp-delete

2026-06-15 16:11:10 +02:00

hub

capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0

2026-06-29 18:43:49 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0

2026-06-29 21:45:25 +02:00

log

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

pbs

v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape

2026-06-16 20:25:09 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

reconcile

v0.40.0: third CT volume — SSD user-data (/mnt/sys_drive, mp1) baked + -sysdata-grow

2026-06-23 16:25:14 +02:00

signedjobs

v0.28.0: backup re-target → felhom-pbs (offsite DR) + operator-signed decommission

2026-06-12 20:26:34 +02:00

storage

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00