felhom-agent

Files

T

admin c17cfde236 slice 8C Phase A: agent disk endpoints + data-bearing classifier gate + mkfs (v0.12.0)

internal/storage: mkfs executor (Format, device-pinned, narrow FELHOM_FORMAT
sudoers) + data-bearing device inspection (InspectDevice/DeviceProbe via
blkid+lsblk; conservative — ambiguous=data-bearing). internal/localapi: /disks
(+ data-bearing flag), /disks/assign (EnsureMount), /disks/eject (Unmount +
dependent guests), /disks/format. SECURITY CENTERPIECE: the agent inspects the
device itself; data-bearing format -> ClassStorageWipe gate -> pending_signature
refused; the caller's claim is never trusted. Additive (no controller change yet).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 12:52:22 +02:00

authz

feat(authz): operator signed-op verifier + durable nonce store (slice 2, v0.2.0)

2026-06-08 15:23:02 +02:00

backup

restore-test: verdict is liveness, not start-task exitstatus (v0.7.0)

2026-06-09 19:30:03 +02:00

config

slice 8B (agent half): /backup/due cadence policy + /backup/status phases (v0.11.0)

2026-06-10 10:44:50 +02:00

escrow

slice 7: PBS recovery-code escrow creation (agent, Phase B) (v0.9.0 wip)