hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-05 11:12:56 +02:00
parent 9bb45eaaa2
commit 3d7a2761fc
24 changed files with 1148 additions and 17 deletions
@@ -690,6 +690,10 @@ var operatorOnlyEvents = map[string]bool{
 	"os_release_cancelled": true,
 	// R-840 (hub v0.133.0): a box's root-owned config bundle behind the vouched one for 7 days.
 	"os_config_bundle_behind":    true,
+	// hub v0.135.0: R-530 (a box behind the vouched agent for 7 days) and R-604 (a global floor raise that did not
+	// move every box). Fleet facts only the operator can act on — listed in the SAME commit that mints them.
+	"agent_behind":        true,
+	"floor_raise_skipped": true,
 	"os_update_settings_changed": true,
 	// R-841 (hub v0.131.0): the tunnel alarm — a box fact the household can do nothing about from inside.
 	"tunnel_down":      true,