+
+
+ | controllerswap-image-inspect critical |
+ ok |
+ controller-swap / managed auto-update |
+
+
+
+ | controllerswap-inspect critical |
+ ok |
+ controller-swap / managed auto-update |
+
+
+
+ | controllerswap-read critical |
+ ok |
+ controller-swap / managed auto-update |
+
+
+
+ | controllerswap-restart critical |
+ ok |
+ controller-swap / managed auto-update |
+
+
+
+ | controllerswap-write critical |
+ ok |
+ controller-swap / managed auto-update |
+
+
+
+ | disk-blkid critical |
+ ok |
+ disk data-bearing classify (format gate) |
+
+
+
+ | disk-lsblk critical |
+ ok |
+ disk topology read (format gate) |
+
+
+
+ | disk-lvs |
+ ok |
+ thin-pool usage read |
+
+
+
+ | disk-mkfs-ext4 critical |
+ ok |
+ guarded format (ext4) |
+
+
+
+ | disk-mkfs-xfs |
+ ok |
+ guarded format (xfs) |
+
+
+
+ | disk-smart |
+ ok |
+ disk SMART health read |
+
+
+
+ | dnsmasq-enable |
+ ok |
+ dnsmasq enable |
+
+
+
+ | dnsmasq-guest-domain |
+ ok |
+ guest domain discovery |
+
+
+
+ | dnsmasq-guest-ip |
+ ok |
+ guest LAN IP discovery |
+
+
+
+ | dnsmasq-install |
+ ok |
+ dnsmasq package install |
+
+
+
+ | dnsmasq-reload |
+ ok |
+ dnsmasq reload |
+
+
+
+ | dnsmasq-restart |
+ ok |
+ dnsmasq restart (LAN-DNS self-heal) |
+
+
+
+ | dnsmasq-rm |
+ ok |
+ dnsmasq drop-in remove (decommission) |
+
+
+
+ | dnsmasq-write |
+ ok |
+ dnsmasq drop-in write |
+
+
+
+ | drive-bind critical |
+ ok |
+ drive attach (felhom-data bind under parent) |
+
+
+
+ | drive-umount critical |
+ ok |
+ drive detach (fail-closed unmount) |
+
+
+
+ | drives-chown-data |
+ ok |
+ felhom-data guest-root chown |
+
+
+
+ | drives-mkdir-data |
+ ok |
+ felhom-data namespace create |
+
+
+
+ | drives-mkdir-parent |
+ ok |
+ stable parent dir create |
+
+
+
+ | drives-mkdir-sub |
+ ok |
+ per-drive stable dir create |
+
+
+
+ | escrow-ceremony critical |
+ ok |
+ customer recovery-code ceremony (controller-driven) |
+
+
+
+ | guest-init-pid critical |
+ ok |
+ drive-gate guest-sees check (multi-drive concurrency) |
+
+
+
+ | guest-reboot |
+ ok |
+ enroll activate-binds reboot |
+
+
+
+ | guesthook-delete-mp |
+ ok |
+ dead mountpoint slot delete (C1 net) |
+
+
+
+ | guesthook-install |
+ ok |
+ pre-start hook snippet install |
+
+
+
+ | guesthook-register |
+ ok |
+ pre-start hook register |
+
+
+
+ | guestnet-dhclient-probe |
+ ok |
+ guest DHCP-client liveness probe |
+
+
+
+ | guestnet-heal |
+ ok |
+ guest DHCP-client restart (the 2026-07-20 heal) |
+
+
+
+ | guestnet-ifaces |
+ ok |
+ guest interface-mode read |
+
+
+
+ | guestnet-route |
+ ok |
+ guest default-route probe |
+
+
+
+ | mount-daemon-reload |
+ ok |
+ systemd reload after unit write |
+
+
+
+ | mount-unit-disable |
+ ok |
+ mount unit disable |
+
+
+
+ | mount-unit-enable |
+ ok |
+ mount unit enable |
+
+
+
+ | mount-unit-install |
+ ok |
+ fs-UUID mount unit install |
+
+
+
+ | mount-unit-stop |
+ ok |
+ mount unit stop |
+
+
+
+ | netmount-reset-failed |
+ ok |
+ NAS automount re-arm after start-limit (F10) |
+
+
+
+ | netmount-rmdir |
+ ok |
+ removed-share mountpoint cleanup (F1) |
+
+
+
+ | parent-bind-mp8 |
+ ok |
+ parent bind into guest at provision |
+
+
+
+ | parent-make-private critical |
+ ok |
+ intermediary shared-parent peer-group isolation |
+
+
+
+ | parent-make-shared critical |
+ ok |
+ intermediary shared-parent propagation |
+
+
+
+ | parent-script-install |
+ ok |
+ shared-parent boot script install |
+
+
+
+ | parent-self-bind critical |
+ ok |
+ intermediary shared-parent self-bind |
+
+
+
+ | parent-unit-enable |
+ ok |
+ shared-parent boot-persistence enable |
+
+
+
+ | parent-unit-install |
+ ok |
+ shared-parent boot unit install |
+
+
+
+ | pbsdr-create |
+ ok |
+ PBS DR storage-entry create (K autogen) |
+
+
+
+ | pbsdr-grant |
+ ok |
+ PBS DR storage ACL self-grant |
+
+
+
+ | pbsdr-read |
+ ok |
+ PBS DR credential read (verify-loop auth probe) |
+
+
+
+ | pbsdr-reconcile |
+ ok |
+ PBS DR storage-entry reconcile (set-only) |
+
+
+
+ | provision-chown |
+ ok |
+ bootstrap mount guest-root chown |
+
+
+
+ | provision-config-mount |
+ ok |
+ bootstrap config bind mount |
+
+
+
+ | provision-onboot |
+ ok |
+ customer guest autostart (onboot) |
+
+
+
+ | pve:pool-read |
+ ok |
+ stale-lock recovery scoping (pool ownership check) |
+
+
+
+ | pve:store-grant:felhom-pbs critical |
+ ok |
+ backup tier felhom-pbs readable by the agent (archive listing, restore-test candidacy) |
+
+
+
+ | pve:store-grant:local |
+ ok |
+ backup tier local readable by the agent (archive listing, restore-test candidacy) |
+
+
+
+ | selfheal-networking-start |
+ ok |
+ appliance networking recovery at boot (F12 defense in depth) |
+
+
+
+ | selfupdate-apply |
+ ok |
+ agent self-update apply (A/B flip) |
+
+
+
+ | selfupdate-commit |
+ ok |
+ agent self-update commit |
+
+
+
+ | selfupdate-rollback |
+ ok |
+ agent self-update rollback |
+
+
+
+ | stalelock-unlock critical |
+ ok |
+ reboot-during-backup stale-lock recovery |
+
+
+
+ | wg-conf-install critical |
+ ok |
+ wg-felhom conf install |
+
+
+
+ | wg-disable |
+ ok |
+ wg-quick@wg-felhom disable (revocation) |
+
+
+
+ | wg-enable critical |
+ ok |
+ wg-quick@wg-felhom enable |
+
+
+
+ | wg-handshake-read critical |
+ ok |
+ tunnel handshake-age read |
+
+
+
+ | wg-restart critical |
+ ok |
+ wg-quick@wg-felhom restart (conf change) |
+
+
+
+ | wg-tools-install |
+ ok |
+ wireguard-tools package install |
+
+
+
+