felhom-agent

slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)

2026-06-10 20:14:16 +02:00

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

v0.88.0: controller-driven escrow ceremony — --output=json machine mode (escrowCeremony extraction, text mode byte-identical), the ONE fixed argv (escrow.CeremonyArgs, shared by exec+manifest+FELHOM_ESCROW sudoers, pin-tested), localapi ceremony job (single-flight, 60s) + one-shot in-memory R claim (10min TTL, unclaimed_void) + preflight; escrow-ceremony capability (Critical, pbs_dr-gated)

2026-07-13 19:01:11 +02:00

config

agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

2026-07-12 07:48:49 +02:00

desired

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

dr

dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)

2026-07-04 21:06:31 +02:00

escrow

v0.88.0: controller-driven escrow ceremony — --output=json machine mode (escrowCeremony extraction, text mode byte-identical), the ONE fixed argv (escrow.CeremonyArgs, shared by exec+manifest+FELHOM_ESCROW sudoers, pin-tested), localapi ceremony job (single-flight, 60s) + one-shot in-memory R claim (10min TTL, unclaimed_void) + preflight; escrow-ceremony capability (Critical, pbs_dr-gated)

2026-07-13 19:01:11 +02:00

felhomsshd

fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)

2026-07-05 22:58:58 +02:00

guesthook

F11 matrix-correction: re-arm on guest-blind (active mounts not inherited by rebooted guest — live finding)

2026-07-12 07:58:39 +02:00

hub

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

lanresolver

v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)

2026-06-13 16:56:39 +02:00

localapi

v0.88.0: controller-driven escrow ceremony — --output=json machine mode (escrowCeremony extraction, text mode byte-identical), the ONE fixed argv (escrow.CeremonyArgs, shared by exec+manifest+FELHOM_ESCROW sudoers, pin-tested), localapi ceremony job (single-flight, 60s) + one-shot in-memory R claim (10min TTL, unclaimed_void) + preflight; escrow-ceremony capability (Critical, pbs_dr-gated)

2026-07-13 19:01:11 +02:00

log

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

mgmtplane

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

pbs

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

pbsdr

agent v0.86.0: DR-tier-by-default — capability inactive state (GatedBy/GateActive, pbsdr gate via DRConfigured) + F-3 root-run provision parent ownership

2026-07-12 20:06:27 +02:00

provision

agent v0.86.0: DR-tier-by-default — capability inactive state (GatedBy/GateActive, pbsdr gate via DRConfigured) + F-3 root-run provision parent ownership

2026-07-12 20:06:27 +02:00

proxmox

v0.80.0: PBS DR tier slice 2 — the apply-bridge (pbs_dr consumer, felhom-pbs-apply set-only wrapper, verify-pin-before-consume, adoption-first, loud consumed-failed, escrow seed)

2026-07-10 21:50:36 +02:00

reconcile

GL-5b: restore-test full-fidelity verification (v0.76.0)

2026-07-08 09:46:30 +02:00

selfheal

agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

2026-07-12 07:48:49 +02:00

selfupdate

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

signedjobs

v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep

2026-07-11 16:24:07 +02:00

storage

agent v0.87.0: SystemDisks device-mapper walk — legacy-boot hosts get a working drive wizard (IA finding 2, MEDIUM)

2026-07-13 13:15:03 +02:00

wgtunnel

feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])

2026-07-05 22:08:04 +02:00