admin
eb38d78945
gates / gates (push) Successful in 58s
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
23 lines
2.0 KiB
Markdown
23 lines
2.0 KiB
Markdown
# REPORT — agent 0.159.1: forget a gone decommissioned drive (R-1124), name an orphan thin device (R-1012), Go 1.27.2 (2026-10-17)
|
|
|
|
Written in ASD-STE100 Simplified Technical English. Session report: felhom.eu `REPORT-agent-allowlist-rotation-2026-10-17.md`.
|
|
Evidence: felhom.eu `documentation/audits/agent-allowlist-rotation-2026-10-17/P1/`.
|
|
|
|
- **Released:** v0.159.0 (superseded — do not vouch) and **v0.159.1** (sha256 `de8f6ad9…aff9`, bundle `2af3d27d…7cd6`).
|
|
Step bundle `0.159.0-step1` (`1d65edb3…d6cf`) for a box on the v0.158.1 bundle (the new bundle adds `felhom-thin-check`).
|
|
- **R-1124:** `ForgetRetiredDrives` (start + 20-s tick) disables and removes, through the new root verb
|
|
`felhom-priv-apply unit-forget`, the unit of a DECOMMISSIONED drive that is absent and unmounted. A present one keeps its
|
|
unit (one-click re-enroll). v0.159.1: the signed decommission also prunes the guest-bind record.
|
|
- **R-1012:** read-only root helper `felhom-thin-check <vg> <pool>`; `internal/thincheck` (two reads, fails open);
|
|
`BackupRunner.SetThinCheck` appends the plain-word finding to a failed snapshot backup's error. Never removes.
|
|
- **Proof on demo-hp:** loop-backed test drive forgotten 8 s after the unplug; on 0.159.1 the bind-record warning stopped
|
|
(0 lines, control 3); scratch thin pool: a made orphan listed, a foreign metadata snapshot refused; `pve/data` read and
|
|
released; a 9201 whole-guest backup ran the check first and finished green. All red-proofs in P1.
|
|
- **Delivery:** demo-hp done (0.159.1 + bundle, 75/75). Tester 1 and demo-felhom: by signed jobs on the operator's yes.
|
|
**The vouch is the operator's.**
|
|
|
|
## Observations
|
|
|
|
1. The operator-signed decommission did not prune the guest-bind record (the self-serve one did). NOT-A-FINDING: fixed in this session in v0.159.1 (the size rule), test red-proved.
|
|
2. A loop device reads as role „system", so the self-serve decommission refuses it. NOT-A-FINDING: correct (fail safe to protected); the live proof used the operator-signed path.
|