admin 3f382bf762 v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget) ...

From AUDIT-blast-radius-hostroot-localapi-2026-07-02.md. Each fix ships with a
non-hollow test + a companion red-proof (shown failing on the pre-fix impl).
Sudoers install-source grants became globs — deploy the sudoers drop-in with
the binary. A1 (stale-lock pool-membership) deliberately excluded (spike).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-03 07:25:50 +02:00

..

candidates.go

v0.55.0: raw-device discovery + registry-sourced drive tracking (Impl-2a)

2026-07-01 17:33:49 +02:00

claim_test.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

claim.go

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

doc.go

v0.5.0-rc1: slice 5 Phase A — storage observe/report + watchdog (read-only, live)

2026-06-09 09:59:05 +02:00

durable_device_test.go

agent v0.37.0: host-reboot remount re-resolves enrolled drives by fs-UUID

2026-06-16 17:49:00 +02:00

durable_device.go

agent v0.37.0: host-reboot remount re-resolves enrolled drives by fs-UUID

2026-06-16 17:49:00 +02:00

durableid_test.go

v0.5.0-rc1: slice 5 Phase A — storage observe/report + watchdog (read-only, live)

2026-06-09 09:59:05 +02:00

durableid.go

v0.5.0-rc1: slice 5 Phase A — storage observe/report + watchdog (read-only, live)

2026-06-09 09:59:05 +02:00

hostops_disk_test.go

v0.54.0: format-safety foundation — unclaimed-disk guard + guarded-mkfs wrapper

2026-07-01 16:52:31 +02:00

hostops_test.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

hostops.go

v0.54.0: format-safety foundation — unclaimed-disk guard + guarded-mkfs wrapper

2026-07-01 16:52:31 +02:00

hostread.go

v0.5.0-rc1: slice 5 Phase A — storage observe/report + watchdog (read-only, live)

2026-06-09 09:59:05 +02:00

intent_test.go

agent v0.27.0: slice 10 P3 — self-heal watchdog reconcile + 4-state intent model

2026-06-12 17:49:25 +02:00

intent.go

agent v0.27.0: slice 10 P3 — self-heal watchdog reconcile + 4-state intent model

2026-06-12 17:49:25 +02:00

mountunit.go

agent v0.50.0: NAS network storage Part A1 (NFS/SMB automount foundation)

2026-06-30 11:12:27 +02:00

netmount_test.go

agent v0.50.0: NAS network storage Part A1 (NFS/SMB automount foundation)

2026-06-30 11:12:27 +02:00

netmount.go

agent v0.50.0: NAS network storage Part A1 (NFS/SMB automount foundation)

2026-06-30 11:12:27 +02:00

observe_test.go

slice 8C Phase A: agent disk endpoints + data-bearing classifier gate + mkfs (v0.12.0)

2026-06-10 12:52:22 +02:00

observe.go

v0.5.1: live-validation prep — fix unmounted-dir durable_id mis-id + watchdog UUID memory

2026-06-09 11:01:40 +02:00

registry_known_test.go

v0.55.0: raw-device discovery + registry-sourced drive tracking (Impl-2a)

2026-07-01 17:33:49 +02:00

registry_known.go

v0.55.0: raw-device discovery + registry-sourced drive tracking (Impl-2a)

2026-07-01 17:33:49 +02:00

role_test.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

role.go

v0.23.0: device-ROLE classification + tiered storage-wipe gate (user-data customer-confirmable; system/backup operator-only)

2026-06-11 21:29:18 +02:00

smart.go

v0.5.0: slice 5 Phase B — the host-root surface (mounts + SMART + grow + destructive gate)

2026-06-09 10:53:38 +02:00

validate_test.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

validate.go

slice 8C Phase A: agent disk endpoints + data-bearing classifier gate + mkfs (v0.12.0)

2026-06-10 12:52:22 +02:00

watchdog_test.go

agent v0.27.0: slice 10 P3 — self-heal watchdog reconcile + 4-state intent model

2026-06-12 17:49:25 +02:00

watchdog.go

agent v0.27.0: slice 10 P3 — self-heal watchdog reconcile + 4-state intent model

2026-06-12 17:49:25 +02:00