admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CONTEXT + REPORT: v0.290.0 (floored, golden 0.290.0 vouched)
gates / gates (push) Successful in 27s
Details

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-04 07:39:45 +02:00
parent c1a73b24b3
commit 99a1497560
2 changed files with 14 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTEXT.md
+6 -1
View File
@@ -7,7 +7,12 @@
>
> Ask Claude Code: "Please update CONTEXT.md with what we did today"
Last updated: 2026-10-03 evening (v0.289.1 — the off-site key cannot delete, decisions 68–69)
Last updated: 2026-10-04 (v0.290.0 — the clean-up guard lets honest windows through, the set-aside deletion is the hub's)
> **2026-10-04 — v0.290.0 (floored, golden 0.290.0 vouched, needs hub v0.128.0):** `offsiteGuard` EXCLUDES a young
> snapshot superseded the same day in its group (R-824) and REFUSES above the hub's `max_remove` (half); a due
> abandonment on the pinned tier is handed to the hub (`OffsiteAbandonClient`), which deletes after 7 days unless
> cancelled (decision 74); a recovery cancels at the hub. Weekly windows ON fleet-wide since 2026-10-04.
> **2026-10-03 (evening) — v0.289.0 + v0.289.1 (floored 0.289.1, golden 0.289.1 vouched, needs hub v0.127.0):** the
> hub-provisioned off-site tier is reached through an APPEND-ONLY key the hub's registrar pins
REPORT.md
+8 -14
View File
@@ -1,16 +1,10 @@
# REPORT — v0.289.0 / v0.289.1: the off-site key cannot delete (decisions 68–69) — 2026-10-03
# REPORT — v0.290.0: the clean-up guard lets honest windows through; set-aside deletion via the hub — 2026-10-04
Full session report: `felhom.eu/REPORT-offsite-lock-build-2026-10-03.md`. Architecture: `07-backup-architecture.md`
(custody block, threat rows 9/10/12), `06` §3.6, `09` §3 decisions 68–70.
Full session report: `felhom.eu/REPORT-offsite-finish-2026-10-04.md`. Decisions 68–74 (`09` §3).
- **v0.289.0:** append-only `rclone:` transport for the hub tier; the box sends only its public key to the hub
registrar and proves the pin before configuring; both `forget` sites, the move-aside and the abandonment leave the
box on that tier; retention only inside a hub window behind the fake-snapshot guard (R-822).
- **v0.289.1 (found live):** the provider's rclone NOTICE broke every `--json` parse → the box recorded 0 snapshots as
measured and the hub mailed a false `offsite_snapshots_dropped`. The notice is stripped; an unreadable count keeps
the last value with `stats_known=false`. **Two releases this session — the second one fixes a defect the first put
live; the one-release rule was broken on purpose and is named here.**
- Tests + red-proofs: `felhom.eu/documentation/audits/offsite-lock-build-2026-10-03/partC/red-proofs-controller.txt`.
- Live: demo-felhom 11→13 snapshots, demo-hp 91→100 (history kept); a delete from each box refused (403); restore of
one file and `check` through the pinned key on each. Floor 0.289.1 served to both; golden 0.289.1 baked + vouched.
- **MinAgent 0.131.0** (unchanged).
- **R-824:** a young snapshot superseded the same day is excluded (kept for a later window), not a refusal; a plan above
the hub's weekly cap refuses (R-833 records the cost). Live: window 2 on demo-hp, no refusal, 127→127.
- **R-823 / decision 74:** a due abandonment is handed to the hub (7-day wait, cancellable); a recovery cancels at the hub;
the page keeps the hub's date. Live on tester-1 via the hub.
- Red-proofs: `felhom.eu/documentation/audits/offsite-finish-2026-10-04/red-proofs-controller.txt`.
- Both demo boxes on 0.290.0; floor 0.290.0 served; golden 0.290.0 baked and vouched. **MinAgent 0.131.0** (unchanged).