Commit Graph

  • c6b69d888e v0.205.0 — a run that skipped an app the customer selected is not successful (R-234) main admin 2026-08-06 21:58:21 +02:00
  • 53e9bf0224 v0.204.0 — the restore list is keyed on the store (R-237); the size gate stops refusing in silence (R-238) admin 2026-08-06 16:44:05 +02:00
  • 4d349d1106 REPORT + CONTEXT for v0.203.0: the retry shape, the marker answer, R-220's shape admin 2026-08-06 13:05:30 +02:00
  • 9dc26459ea v0.203.0: the box collects what the hub staged for it (R-218 consume half) + R-220's message admin 2026-08-06 12:56:12 +02:00
  • 66d80efb9f docs: R-168 is CLOSED — the "CI is still owed" sentence was stale (R-229 part 2) admin 2026-08-06 11:02:55 +02:00
  • 7db42c5fec docs: CLAUDE.md becomes a core plus path-scoped rules (R-229) admin 2026-08-06 09:38:27 +02:00
  • a62bb3874b REPORT + CONTEXT: v0.202.0's rule, its live proof, and what was NOT verified live admin 2026-08-06 08:34:19 +02:00
  • 7534ea203d CHANGELOG: controller v0.202.0 (MinAgent 0.126.0) admin 2026-08-06 08:19:07 +02:00
  • c7446f2d6a R-225/R-227/R-228 Parts 2-4: unknown is not zero, the gateway speaks Hungarian, the set-aside is visible admin 2026-08-06 08:17:48 +02:00
  • 1e759a16ec R-224/R-226 Part 1: why the unlock failed decides what we say admin 2026-08-06 08:06:57 +02:00
  • 05cf352a2f docs: CAMPAIGN-11 fix pass — REPORT + CONTEXT (controller v0.201.0) admin 2026-08-05 18:03:50 +02:00
  • a3499d1807 v0.201.0 — a correct recovery code is never called wrong again (CAMPAIGN-11) — MinAgent 0.125.0 admin 2026-08-05 17:48:08 +02:00
  • a315d623b8 docs: R-193 CLOSED — CONTEXT + REPORT (controller v0.200.0) admin 2026-08-05 12:56:43 +02:00
  • 62b85ecf13 CHANGELOG: controller v0.200.0 (R-193, the recovery screen) admin 2026-08-05 12:46:13 +02:00
  • 636c51e542 R-193: the recovery screen — unlocking, and only unlocking (v0.200.0) admin 2026-08-05 12:45:48 +02:00
  • be3c5fa7f6 docs: R-204 item 4 (box half) — CONTEXT + REPORT (controller v0.199.0) admin 2026-08-05 11:06:19 +02:00
  • 992803c10b CHANGELOG: controller v0.199.0 (R-204 item 4, box half) admin 2026-08-05 10:49:20 +02:00
  • a91f055960 pre-push: refuse a push from a clone outside the felhom workspace (R-204 rider) admin 2026-08-05 10:47:58 +02:00
  • 1214bae0a2 R-204 item 4 (box half): a rebuilt box DECLARES that it needs a credential (v0.199.0) admin 2026-08-05 10:47:51 +02:00
  • 68f195676b docs: R-204 items 1 & 3 — CONTEXT, REPORT, README (controller v0.198.0) admin 2026-08-05 07:37:25 +02:00
  • 33fcc502e4 CHANGELOG: controller v0.198.0 (R-204 items 1 and 3) admin 2026-08-05 07:17:32 +02:00
  • 2e936f43bf R-204 item 3: a restore says what it restored, and what it did not (v0.198.0) admin 2026-08-05 07:17:20 +02:00
  • 73b6dbc27d R-204 item 1: a freshly minted reset code works without a restart (v0.198.0) admin 2026-08-05 07:17:13 +02:00
  • f4796e0d00 docs: R-203 contract + report (controller v0.197.0, proven live) admin 2026-08-04 18:53:47 +02:00
  • 58c703bd44 R-203 Part 2: a run that missed a MANDATORY directory is not a successful run (v0.197.0) admin 2026-08-04 18:32:56 +02:00
  • a96c3d9473 R-203: the export-mount resolver takes the namespace root too (its own commit) admin 2026-08-04 18:21:17 +02:00
  • 73efb091d9 R-203: the app and its backup look in the same directory — one resolver, every caller admin 2026-08-04 18:17:05 +02:00
  • 532f5712a8 docs: R-200 Part 0 shipped; R-203 recorded (mandatory userdata dir missing from the offsite snapshot while the run says ok) admin 2026-08-04 15:00:40 +02:00
  • 1b1366bb6e controller v0.196.0: the recovered key installs itself (R-200 plumbing half) -- MinAgent 0.125.0 admin 2026-08-04 14:27:38 +02:00
  • bdab80c933 docs: R-200 diagnostic — CONTEXT + REPORT (proven live on demo-felhom) admin 2026-08-04 13:56:01 +02:00
  • 9640e51321 controller v0.195.0: prove the offsite key comes back (R-200 plumbing half) -- MinAgent 0.125.0 admin 2026-08-04 13:42:50 +02:00
  • 0887fd676d REPORT: R-182 — the run digest, the live proof, and the red-proof that did not fail first time admin 2026-08-03 13:59:42 +02:00
  • 88897a224e v0.194.0 — one operator email per backup run, and nothing dropped without a trace (R-182) admin 2026-08-03 13:46:14 +02:00
  • db0d4b129d REPORT: R-181 — the reserve, the live proof, the du measurement and the teardown admin 2026-08-03 11:37:33 +02:00
  • 6c43bf6156 v0.193.1 — the refusal's size estimate is rendered in bytes, not "0.00 GiB" (R-181 follow-on) admin 2026-08-03 11:05:02 +02:00
  • fef07c3923 v0.193.0 — the reserve guards the write that fills the disk, and its promise is true (R-181) admin 2026-08-03 10:53:48 +02:00
  • 4be6467b50 v0.192.0 — the capture floor replaces the bulkhead (R-165, decision B2) admin 2026-08-03 06:30:19 +02:00
  • d5be67b913 REPORT: CI run ids and conclusions (all three commits green) admin 2026-08-02 23:57:07 +02:00
  • 9a3c4855d7 v0.191.2 — a quiet fill check now says so (R-167) admin 2026-08-02 23:37:04 +02:00
  • 5adae4dad9 v0.191.1 — the fill check also runs at startup (R-167) admin 2026-08-02 23:27:35 +02:00
  • cf48214f6c v0.191.0 — warn before the wall comes down (R-167, R-158, R-174) admin 2026-08-02 23:18:51 +02:00
  • 95eb5c2c1a REPORT: record every CI run id, run number and conclusion admin 2026-08-02 20:38:52 +02:00
  • e6311f9fbc docs: CONTEXT + REPORT for v0.190.0 (R-157 A / R-170 / R-171) admin 2026-08-02 20:34:48 +02:00
  • 4bad6e06c9 CHANGELOG: the boot window's sample refreshes first admin 2026-08-02 20:17:24 +02:00
  • dcc3363d2f boot window: sample REFRESHES first — a cached fleet made 'settled' meaningless admin 2026-08-02 20:17:12 +02:00
  • 582135f861 v0.190.0 — the boot settle window, both gates on intent, and R-171 admin 2026-08-02 19:56:20 +02:00
  • 3446609420 REPORT: record all three CI run IDs and their conclusions admin 2026-08-02 18:58:56 +02:00
  • a8f7c61d41 docs: CONTEXT + REPORT for v0.189.0 (R-166) admin 2026-08-02 18:58:11 +02:00
  • dbcb306fcf v0.189.0 — desired state + the app-stop crash marker (R-166 / D-b) admin 2026-08-02 18:40:17 +02:00
  • e7c44c0e0f docs: CHANGELOG + REPORT for the CI workflow (no version bump) admin 2026-08-02 16:35:42 +02:00
  • dcc400e175 ci: run the gate entry point on every push (R-168) admin 2026-08-02 16:27:25 +02:00
  • eaded79b18 REPORT: gate enforcement session (no version bump) admin 2026-08-02 15:37:02 +02:00
  • 7c32c74140 docs: CHANGELOG + README for the gate entry point (no version bump) admin 2026-08-02 15:28:40 +02:00
  • 8cb3d7af91 gates: one entry point (controller/scripts/controller_gates.py) + pre-push hook admin 2026-08-02 15:22:53 +02:00
  • c432f701dd gate: allowlist appexport/estimate.go named-volume -v mount (R-29 leg a) admin 2026-08-02 15:11:08 +02:00
  • 4115e88f68 REPORT: D5 — restore from the drive alone (v0.188.0), proven live admin 2026-07-30 17:00:32 +02:00
  • 4ed938cce4 D5: an app restore works from the drive alone (v0.188.0) admin 2026-07-30 16:33:06 +02:00
  • 2f27a363d5 R-108: network storage may not host an app's data namespace (v0.187.0) admin 2026-07-30 14:10:20 +02:00
  • b331f18424 v0.186.0 — R-114 + R-112: tell the truth about the backup target, then show it admin 2026-07-29 19:21:32 +02:00
  • cdaeb36972 v0.185.1 — E-2: the offer endpoints were mounted where nothing routed to them admin 2026-07-29 09:13:13 +02:00
  • 3f7cf2a965 v0.185.0 — E-2 Parts 3+4: the offer, and the honest degraded state admin 2026-07-29 09:10:20 +02:00
  • 4d6c8a6056 v0.184.1 — E-2b keying fix: the backup-target branch was unreachable admin 2026-07-29 08:30:36 +02:00
  • c1a63de1c7 v0.184.0 — E-2b + Part 5: wire the drive-absent alarm that was never called admin 2026-07-29 08:21:25 +02:00
  • ff058a4f10 E-2 Part 1: the backup-target role on StoragePath (foundation, not yet wired) admin 2026-07-29 08:00:47 +02:00
  • fd50a73e65 C9-F1 + C9-F2: a restore that restored nothing, and a crash loop nobody saw (v0.183.0) admin 2026-07-28 18:53:56 +02:00
  • d8b3279731 REPORT + CONTEXT: R-101 + F-DIAG (v0.182.0), rendered dialog proven live admin 2026-07-28 16:46:16 +02:00
  • 3f048e042b R-101 + F-DIAG: the restore dialog names the last SUCCESSFUL copy (v0.182.0) admin 2026-07-28 16:36:47 +02:00
  • 3db8bfb953 REPORT + CONTEXT: R-100 producer half (v0.181.0), proven live admin 2026-07-28 13:36:00 +02:00
  • e000e201af R-100: record the offsite last-SUCCESS anchor (v0.181.0) admin 2026-07-28 13:12:37 +02:00
  • 4056feccee REPORT + CONTEXT: F-OBS shipped (v0.180.0); same shape found and fixed in the agent watchdog admin 2026-07-28 11:22:04 +02:00
  • fb91c8d766 F-OBS: the dead-app check gets a positive observable (v0.180.0) admin 2026-07-28 10:27:28 +02:00
  • a63409c843 docs: F-CRIT-1 + F-A1 — REPORT, CONTEXT (v0.179.0) admin 2026-07-28 09:47:55 +02:00
  • 079265ad8e F-CRIT-1 + F-A1: one alarm that never fired, one that fired wrongly (v0.179.0) admin 2026-07-28 08:50:11 +02:00
  • 8f46495426 seam sweep: move the TieredBackend witness into production code (no version bump) admin 2026-07-27 18:23:50 +02:00
  • ca013c8d27 docs: REPORT for controller v0.178.0 (R-88 Part 2 + R-97c) admin 2026-07-27 18:12:35 +02:00
  • 86ea482fc1 controller v0.178.0 — R-88 Part 2: only a positive 'never' fires the valve admin 2026-07-27 18:08:56 +02:00
  • ba8bf9cd75 docs: REPORT for R-97 (controller v0.177.0 + hub v0.78.0) admin 2026-07-27 17:07:10 +02:00
  • e9c99566b0 R-97: a failing backup is heard, and stops blaming the apps (v0.177.0) admin 2026-07-27 17:01:41 +02:00
  • ccefff4f39 docs: record POSITIVE post-deploy verification for v0.176.0 admin 2026-07-27 16:36:30 +02:00
  • b8598361b8 docs: REPORT for R-88 Part 1 (v0.176.0) admin 2026-07-27 16:27:21 +02:00
  • 32200c7b5f R-88 Part 1: a failing backup stops re-quiescing (v0.176.0) admin 2026-07-27 16:21:58 +02:00
  • 3f0420ff9c REPORT: correct a STALE deployment section — v0.175.0 IS deployed on both boxes Claude Code 2026-07-26 20:43:02 +02:00
  • f5e106440d REPORT: R-82 Slice B (controller v0.175.0) — unit-proven, deliberately NOT deployed Claude Code 2026-07-26 17:56:10 +02:00
  • 9e5ea56853 v0.175.0 — R-82: a tier that overruns the quiesce bound defers the rest Claude Code 2026-07-26 15:06:10 +02:00
  • de96efc0c5 v0.174.0 — R-82 Slice B: one quiesce window, two backup tiers Claude Code 2026-07-26 14:40:44 +02:00
  • 47fda06ba1 REPORT: R-77 v0.173.0 — Part 0 repair, red-proofs, live legs 1-4 admin 2026-07-26 09:25:15 +02:00
  • 9056f01fae v0.173.0 — R-77: endpoint-drift detection, samba protected-set gate, channel log honesty admin 2026-07-26 09:13:52 +02:00
  • c7a3a90782 REPORT: R-75 v0.172.0 — Part 1.0 probe, switch audit, red-proofs, live legs admin 2026-07-26 08:30:43 +02:00
  • 8fadbd9891 v0.172.0 fixup 2: drop import/* from the carry-list admin 2026-07-26 08:22:13 +02:00
  • 4773809334 v0.172.0 fixup: EnsureImportRoot must apply the convention to the parent userdata dir admin 2026-07-26 08:15:47 +02:00
  • 2958946517 v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces admin 2026-07-26 08:12:57 +02:00
  • 3b672ba74c docs(CLAUDE.md): add demo-hp (t740) host row — designated drill/build VM host (no drill VM yet) admin 2026-07-25 09:59:11 +02:00
  • 7d5b0163ef v0.171.0: REPORT (overwrite) — device-model card labels live on 9201 admin 2026-07-25 08:32:21 +02:00
  • f6a8249593 v0.171.0: disk-health card device-model label (pairs with agent v0.95.0) admin 2026-07-25 08:23:30 +02:00
  • de14eedb9f v0.170.0: REPORT (overwrite) — root→launcher, gofmt, stale-note, gate-check finding, SMART spike admin 2026-07-25 07:57:00 +02:00
  • 9cc8424954 v0.170.0: root → Indítópult (302); Vezérlőpult at /dashboard; CLAUDE.md stale-note fix admin 2026-07-25 07:44:08 +02:00
  • 2487681396 style: gofmt normalization — no logic changes admin 2026-07-25 07:37:02 +02:00
  • 0a582ea07b v0.169.x: REPORT — appended (disk-health card + degradation notification, live-validated on 9201) admin 2026-07-24 21:41:02 +02:00
  • dbf631312e v0.169.1: disk-health card excludes logical/network storage (pbs/lvm/nfs/cifs) admin 2026-07-24 21:30:54 +02:00
  • c97975c1df v0.169.0: disk-health card + degradation notification (Lemezek állapota) admin 2026-07-24 21:27:16 +02:00