docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EPZ4GJ8L5Jqf8UiPwbn1kt
2026-06-29 19:46:17 +02:00
parent 1141d74532
commit 6b1c2892d6
2 changed files with 18 additions and 3 deletions
@@ -118,3 +118,14 @@ spike):
 /etc/sudoers` parses OK; remaining drop-ins `felhom-agent`, `README`, `zfs`; the real
 `felhom-agent` grant is untouched (lxc-info grant still present). No secrets recorded (the image ref
 is not a secret; no tokens were handled).
+
+---
+
+## IMPLEMENTED 2026-06-29 — felhom-agent v0.45.0
+
+Option A shipped per this spike's GO. `writeImage` now pipes the image on stdin into an in-guest
+`tee` (no `bash -c`); the 5 narrow grants live in the `FELHOM_CONTROLLERSWAP` sudoers alias + the
+capability manifest (Critical). Live: agent reports `capabilities self-check ok=45/45`; all 5 grants
+match (`sudo -n -l` exit 0) and the negative controls (`bash -c`, `tee /etc/passwd`, `docker rm -f`,
+`rm -rf`) are denied on the live host. **Live swap (Scenario D) awaiting supervised run** (restarts the
+controller). See `felhom-agent/REPORT.md` + CHANGELOG v0.45.0.