felhom-agent

afterbackup_test.go

OS updates, guest fast lane (11 §8 step 2): felhom-os-apply wrapper (R1-R13 refusals, repair first, snapshot.debian.org fallback), FELHOM_OSAPPLY sudoers, the OS leg after the primary backup, hub os_update block + os-report, --selftest=os-update

2026-10-04 10:44:29 +02:00

agestate_test.go

agent v0.105.0 — R-88 Part 2: /backup/due gains age_state

2026-07-27 18:00:56 +02:00

backup_target_guard_test.go

v0.112.0 — E-2: GET /disks flags the backup-target drive

2026-07-29 08:20:27 +02:00

backup_target_move_test.go

v0.113.0 — E-2a: guarded backup-target wrapper + POST /backup/target

2026-07-29 09:05:59 +02:00

backup_target.go

v0.113.0 — E-2a: guarded backup-target wrapper + POST /backup/target

2026-07-29 09:05:59 +02:00

backup_tier_states_test.go

v0.131.0: controller supervisor (R-523); per-tier backup status + tier storage presence (R-517/R-518)

2026-09-15 09:49:44 +02:00

backup_tiers_test.go

gofmt: normalize internal/localapi (whitespace only)

2026-07-28 11:15:45 +02:00

backup_tiers.go

v0.98.0 — R-82 Slice A fix: per-tier vzdump wait bound (the 30-minute false failure)

2026-07-26 14:53:24 +02:00

blankformat_test.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

capacity_linux.go

v0.59.0: report backing device + capacity for a registry-sourced /disks row

2026-07-01 21:34:11 +02:00

capacity_other.go

v0.59.0: report backing device + capacity for a registry-sourced /disks row

2026-07-01 21:34:11 +02:00

cert_test.go

agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0

2026-06-29 21:45:25 +02:00

cert.go

agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0

2026-06-29 21:45:25 +02:00

controllersupervisor_test.go

v0.132.0: the slow crash-loop counter (R-539, operator ruling 3 of 2026-09-16)

2026-09-17 10:26:42 +02:00

controllersupervisor.go

v0.132.0: the slow crash-loop counter (R-539, operator ruling 3 of 2026-09-16)

2026-09-17 10:26:42 +02:00

controllerswap_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

controllerswap.go

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

debuglogs_test.go

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

debuglogs.go

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

decommission_test.go

agent v0.36.1: decommission keeps raw mounted (re-enrollable)

2026-06-15 20:06:23 +02:00

disks_backup_target_row_test.go

R-116 (v0.116.0): give the backup-target flag and the gate's key the same row

2026-07-30 08:48:31 +02:00

disks_bind_liveness_test.go

v0.117.0 — R-117: the liveness signal now tests liveness

2026-07-30 12:26:42 +02:00

disks_bug2_f9_test.go

F20-BUG2 + F9-reporting: /disks surfaces wipe_durable_id (gate scheme) + guest_attached

2026-06-14 15:00:56 +02:00

disks_candidates_test.go

gofmt: normalize internal/localapi (whitespace only)

2026-07-28 11:15:45 +02:00

disks_device_presence_test.go

v0.114.0 — R-113: drive presence means the DEVICE, not the bind

2026-07-29 17:20:16 +02:00

disks_smart_test.go

v0.95.0: SMART coverage — union-path drives + LVM/dm root + device model

2026-07-25 08:21:45 +02:00

disks_test.go

agent v0.87.0: SystemDisks device-mapper walk — legacy-boot hosts get a working drive wizard (IA finding 2, MEDIUM)

2026-07-13 13:15:03 +02:00

disks.go

v0.117.0 — R-117: the liveness signal now tests liveness

2026-07-30 12:26:42 +02:00

durableid_rawmount_test.go

agent v0.87.0: SystemDisks device-mapper walk — legacy-boot hosts get a working drive wizard (IA finding 2, MEDIUM)

2026-07-13 13:15:03 +02:00

escrow_ceremony_test.go

v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)

2026-07-16 22:47:22 +02:00

escrow_ceremony.go

v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)

2026-07-16 22:47:22 +02:00

escrow_recover_class_test.go

v0.126.0: a fetch failure is not a wrong recovery code (R-224)

2026-08-06 07:55:15 +02:00

escrow_recover.go

v0.129.0 — a correct code for an earlier package stops being called wrong (R-311)

2026-08-12 18:40:00 +02:00

escrow_stage_test.go

v0.78.0: DELETE /escrow/stage-secret — idempotent staged-secret wipe

2026-07-09 22:19:10 +02:00

escrow_stage.go

v0.78.0: DELETE /escrow/stage-secret — idempotent staged-secret wipe

2026-07-09 22:19:10 +02:00

f2_role_fallback_test.go

agent v0.87.0: SystemDisks device-mapper walk — legacy-boot hosts get a working drive wizard (IA finding 2, MEDIUM)

2026-07-13 13:15:03 +02:00

formatjob_test.go

F20-BUG3: run mkfs detached (survives request deadline + agent restart); v0.31.0

2026-06-14 15:16:01 +02:00

formatjob.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

guestbind.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

guestbinds_reassert_test.go

agent v0.34.0: intermediary mount model — shared parent + host-side attach/detach + reconcile

2026-06-15 16:29:32 +02:00

guestbindstore.go

v0.32.0: self-serve decommission endpoint + intent-aware re-assert (B2a)

2026-06-14 19:55:17 +02:00

guestmemory_test.go

v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)

2026-07-17 19:09:40 +02:00

guestmemory.go

gofmt: normalize internal/localapi (whitespace only)

2026-07-28 11:15:45 +02:00

guestpower_observable_test.go

guest-power: add the liveness observable it shipped without (v0.109.0)

2026-07-28 11:14:56 +02:00

guestpower_test.go

F-REBOOT + F-LEAK: the agent's authority over guest lifecycle (v0.107.0)

2026-07-28 10:27:07 +02:00

guestpower.go

guest-power: add the liveness observable it shipped without (v0.109.0)

2026-07-28 11:14:56 +02:00

host_metrics_test.go

…

host_metrics.go

…

intermediary_attach_liveness_test.go

v0.117.0 — R-117: the liveness signal now tests liveness

2026-07-30 12:26:42 +02:00

intermediary_gate_test.go

agent v0.49.0: reboot-during-backup stale-lock recovery (F2-b) + shared-parent script redeploy fix (F2-a)

2026-06-30 09:00:32 +02:00

intermediary_install_test.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

intermediary_test.go

v0.114.0 — R-113: drive presence means the DEVICE, not the bind

2026-07-29 17:20:16 +02:00

intermediary.go

v0.117.0 — R-117: the liveness signal now tests liveness

2026-07-30 12:26:42 +02:00

netreassert_test.go

test: localapi invisible-share test asserts re-arm + re-verify

2026-07-12 07:59:20 +02:00

netreassert.go

F11 matrix-correction: re-arm on guest-blind (active mounts not inherited by rebooted guest — live finding)

2026-07-12 07:58:39 +02:00

netstorage_test.go

v0.81.0: NAS verify-before-commit — retry=0, journal classifier, detached verify job + auto-rollback

2026-07-11 09:44:06 +02:00

netstorage.go

gofmt: normalize internal/localapi (whitespace only)

2026-07-28 11:15:45 +02:00

netverify_logseq_test.go

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

netverifyjob_test.go

gofmt: normalize internal/localapi (whitespace only)

2026-07-28 11:15:45 +02:00

netverifyjob.go

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

server_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

server.go

OS updates, guest fast lane (11 §8 step 2): felhom-os-apply wrapper (R1-R13 refusals, repair first, snapshot.debian.org fallback), FELHOM_OSAPPLY sudoers, the OS leg after the primary backup, hub os_update block + os-report, --selftest=os-update

2026-10-04 10:44:29 +02:00

stalelock_pool_test.go

v0.62.0 — A1: pool-membership ownership check for the stale-lock reaper

2026-07-03 13:25:05 +02:00

stalelock_test.go

agent v0.49.0: reboot-during-backup stale-lock recovery (F2-b) + shared-parent script redeploy fix (F2-a)

2026-06-30 09:00:32 +02:00

stalelock.go

v0.62.0 — A1: pool-membership ownership check for the stale-lock reaper

2026-07-03 13:25:05 +02:00

tokenstore_test.go

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

tokenstore.go

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

version_header_test.go

v0.82.0: X-Felhom-Agent-Version response header — the controller capability channel

2026-07-11 14:51:48 +02:00

wipe_reresolve_test.go

controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0

2026-06-29 22:45:41 +02:00

wipe_reresolve.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00