admin 6ab1e7c56c R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned ...

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-05 12:00:43 +02:00

..

archivetier_test.go

v0.100.0 — R-82: the restore tier comes from the ARCHIVE, not the configured target

2026-07-26 15:22:08 +02:00

escrow_contract_test.go

v0.79.0: escrow upload carries restic_pw_sha256 (SLICE 3 auto-confirm, agent third)

2026-07-09 23:05:30 +02:00

escrow_recover_wiring_test.go

agent v0.125.0: open the sealed bundle, return one field (R-199 links 7-8)

2026-08-04 13:41:12 +02:00

guesthook_bulletproof_test.go

agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)

2026-07-12 07:48:49 +02:00

guesthook_wiring_test.go

v0.84.0: ReassertNetworkMounts — NAS automount survives guest reboots (RCA fix 1)

2026-07-11 20:46:59 +02:00

guestnet_wiring_test.go

feat(v0.92.0): guest-network watchdog (R-54) — supervise the guest's DHCP client

2026-07-21 12:29:37 +02:00

janitor_test.go

v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)

2026-09-24 16:23:15 +02:00

janitor.go

v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)

2026-09-24 16:23:15 +02:00

main.go

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

r861_escrow_storage_id_test.go

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

r866_selftest_block_test.go

v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)

2026-10-05 07:14:32 +02:00

restoretest_due_wiring_test.go

v0.122.0: three ways the signals lied about themselves (R-189, R-188, R-186)

2026-08-03 16:40:18 +02:00

seam_witnesses.go

seam sweep: compile-time witness for BackupArchiveLister (no version bump)

2026-07-27 18:23:49 +02:00

selftest_flag_test.go

selftest flag accepts os-update and wgtunnel (both dispatched, both refused); a test pins every dispatched mode

2026-10-04 11:04:03 +02:00

storegrant_test.go

v0.124.1: the repair record must survive the probe that did NOT feed the hub (R-190)

2026-08-04 09:44:56 +02:00