admin 1799fcd0e4 build-golden: harden controller-bootstrap --hostname against argv injection ...

Validate the customer.id parsed from bootstrap.json to a DNS-safe label (reject
spaces/slashes/leading-dash) and pass it via a quoted array, so a malformed or
hostile id can't smuggle extra docker flags (e.g. --privileged) into the
controller's de-privileged `docker run`. Empty/invalid → no --hostname.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-11 15:02:01 +02:00

..

agent.example.json

slice 8B (agent half): /backup/due cadence policy + /backup/status phases (v0.11.0)

2026-06-10 10:44:50 +02:00

build-golden.sh

build-golden: harden controller-bootstrap --hostname against argv injection

2026-06-11 15:02:01 +02:00

felhom-agent.sudoers

slice 8C Phase A: agent disk endpoints + data-bearing classifier gate + mkfs (v0.12.0)

2026-06-10 12:52:22 +02:00

felhom-localapi-firewall.example

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00