diff --git a/REPORT.md b/REPORT.md index e18d9f5..9e9f1b1 100644 --- a/REPORT.md +++ b/REPORT.md @@ -39,8 +39,17 @@ tick converged: created the storage, ran `felhom-pbs-apply grant`, **seeded `esc the hash is withheld. **Red-proof run-fail-revert:** with `MarkEscrowStale` gutted → FAIL ("escrow must be STALE… advertising ceremony-done against a key the repo no longer accepts"); restored → PASS. - Green gate: `go build ./... && go vet ./... && go test ./...` all clean. -- Deployed versions + Scenario E (escrow prereqs green on the live demo): see the deploy section / the - task's verification. +- **Deployed:** `felhom-hub:0.57.0` (manifest `dd563a0`, ArgoCD Synced/Healthy, rolled out, clean + startup incl. the `stale_at` migration). Controller/scripts/agent unchanged. +- **Scenario E (live demo):** the agent's `/escrow/preflight` is **all 6 green** — `pbs_storage_id` + (felhom-offsite), `dr_tier` applied, `age_binary`, `hub_upload`, `staged_secret`, `sudo_grant`; + overall `ok`. The wizard's start is offered. **CC STOPPED — the ceremony is Viktor's step.** + +### Observation (agent-side, recorded not acted on) +The agent seeds `escrow.pbs_storage_id` into agent.json on PBS-DR convergence, but the **running** +agent's escrow-preflight kept reporting "not configured" until a `systemctl restart felhom-agent` +(config reload). The seed writes the file but doesn't propagate to the live preflight path — a small +agent-reload gap to fold into the R-22 agent train. ### F4 — NOT an installer fix (reported) The DR storage id lives in the agent-domain **pbs_dr descriptor** (`web/pbsdr.go`), provisioned post-WG