15 lines
1.3 KiB
Markdown
15 lines
1.3 KiB
Markdown
# REPORT — controller v0.334.0 (2026-10-19, third day brief)
|
|
|
|
**Shipped and the floor for every box** (14:31 UTC, MinAgent 0.158.1) after Tester 1, demo-hp and demo-felhom took it by
|
|
the normal update path (per-box floors 14:16 UTC) and the box walk was green on all three. Image `0.334.0` digest
|
|
`sha256:deeabe59d932cd60f8939a37bccf94f145555101fc7be64b6c5cc15f3557031a`, built from `546eef3`; rc.1 on demo-hp only.
|
|
|
|
- **R-1159 (operator decision D19 „box key first, then lock"):** the live config refresh pulls `GET /api/v1/box-config/{id}`
|
|
with the box's own hub key (`report.PullConfigPreferKey`, wired in `main.go`'s `ConfigRefresher`); the retrieval
|
|
passphrase only against a hub without the route or before the box has a key; a refused key is never retried with the
|
|
passphrase. Hub 0.161.0 then refuses passphrase keys for a box on this version that has reported.
|
|
- Tests: `TestR1159_RefreshUsesTheBoxKey` (red-proved: the old pull made 0 key pulls), `TestR1159_MainWiresTheKeyFirstRefresh`.
|
|
- Live on demo-hp: the box's own key → 200 with its config, a wrong key → 401; after its first 0.334.0 report the
|
|
passphrase → 409 with no key (felhom.eu `audits/day-2026-10-19c/P4/`).
|
|
- Box walk (`P5/`): 0 unhealthy, 0 allow-list refusals, catalog in sync; https-only 28 OK; „Fájlok ↗" unchanged.
|