hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 13:05:00 +02:00
parent 0ed2e8de4c
commit 88b0a2e761
24 changed files with 1254 additions and 149 deletions
@@ -5,12 +5,19 @@
      "ring": 1,
      "enabled": true,
      "release": {
-        "id": "os-20261004-120000",
+        "id": "os-guest-20261004-120000",
        "snapshot": "20261004T120000Z",
        "packages": [
          {"name": "libc6", "version": "2.41-12+deb13u4", "origin": "Debian"},
          {"name": "openssl", "version": "3.5.7-1~deb13u3", "origin": "Debian-Security"}
        ]
+      },
+      "host_release": {
+        "id": "os-host-20261004-120000",
+        "snapshot": "20261004T120000Z",
+        "packages": [
+          {"name": "libssl3t64", "version": "3.5.7-1~deb13u3", "origin": "Debian-Security"}
+        ]
      }
    }
  }