admin added9d226 v0.81.0: NAS verify-before-commit — retry=0, journal classifier, detached verify job + auto-rollback ...

Agent half of the verify-before-commit task (SPIKE-nas-verify-2026-07-11, b57f6c1):
retry=0 in the production NFS options (Q4-vi); ClassifyNetVerifyFailure on the live
Q4 strings (nfs_export merges not-found/not-permitted); add = sync fast-fail (2s TCP
pre-probe, nothing installed) + detached in-memory verify job judging /proc/mounts
only, auto-rollback on failure; GET /netstorage/verify-status (phase none = the
controller's Scenario-F rollback signal); unprivileged journalctl (systemd-journal
group, NO new sudoers grants).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-11 09:44:06 +02:00

..

authz

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

backup

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

capability

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

config

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

desired

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

v0.79.0: escrow upload carries restic_pw_sha256 (SLICE 3 auto-confirm, agent third)

2026-07-09 23:05:30 +02:00

felhomsshd

fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)

2026-07-05 22:58:58 +02:00

guesthook

v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir

2026-07-03 15:48:24 +02:00

hub

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

v0.81.0: NAS verify-before-commit — retry=0, journal classifier, detached verify job + auto-rollback

2026-07-11 09:44:06 +02:00

log

…

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

pbsdr

pbsdr: escrow seed writes in place (config dir is root-owned; tmp+rename impossible for the non-root agent — demo live finding); recovery copy parked in the state dir

2026-07-10 21:59:51 +02:00

provision

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

proxmox

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

reconcile

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

selfupdate

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

signedjobs

feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)

2026-07-05 15:32:15 +02:00

storage

v0.81.0: NAS verify-before-commit — retry=0, journal classifier, detached verify job + auto-rollback

2026-07-11 09:44:06 +02:00

wgtunnel

feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])

2026-07-05 22:08:04 +02:00