admin 2706e35198 v0.174.0 RELEASED and VOUCHED: CHANGELOG, the day-0 pin, CONTEXT, REPORT

2026-11-14 15:23:16 +01:00

..

agent_gates.py

security-scan gate (shared felhom.eu/scripts/security_scan_gate.py) in the fast set and CI, warn-first, with the accepted-hits file and decoys (R-986)

2026-10-19 21:11:46 +02:00

build-config-bundle.py

R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)

2026-10-04 19:36:58 +02:00

build-step-bundle.py

R-880: build-step-bundle.py — the transition bundle for a release whose bundle adds paths (an installed felhom-os-apply refuses unknown paths, R16)

2026-10-05 12:23:55 +02:00

check-published-versions.py

D50 = A (R-1290): the published gate asserts the newest 5 released versions plus the pinned MinAgent (0.158.1) and day-0 agent (0.165.0); a pin with no tag fails; decoys red-proved. No binary change.

2026-10-25 20:20:30 +01:00

check-release-complete.py

Two guards, one number: bound the published check to the retention it must live with

2026-08-09 19:05:05 +02:00

gofmt_gate.py

gofmt gate in agent_gates.py with its decoys (R-1160); REPORT for the day

2026-10-19 10:26:27 +02:00

mkfs-guarded-harness.sh

v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)

2026-07-03 07:25:50 +02:00

publish-agent.sh

v0.122.0: three ways the signals lied about themselves (R-189, R-188, R-186)

2026-08-03 16:40:18 +02:00

release-agent.sh

docs: the tag push takes its token from the secret store; a repository address holds no credential (R-925)

2026-11-11 11:12:25 +01:00

retention-policy.json

v0.174.0 RELEASED and VOUCHED: CHANGELOG, the day-0 pin, CONTEXT, REPORT

2026-11-14 15:23:16 +01:00

test_agent_gates.py

The decoy suite is a gate of the full run (R-1116); scripts only, no release

2026-10-17 11:01:25 +02:00

test_gate_decoys.py

D50 = A (R-1290): the published gate asserts the newest 5 released versions plus the pinned MinAgent (0.158.1) and day-0 agent (0.165.0); a pin with no tag fails; decoys red-proved. No binary change.

2026-10-25 20:20:30 +01:00

test_release_push_once.sh

release-agent.sh: only a clean 404 proves a version is new (R-1098)

2026-10-16 17:23:46 +02:00