2 Commits

Author	SHA1	Message	Date
admin	49d1233391	hub v0.40.0: store escrow restic_pw_sha256 + serve escrow status in the report ACK (SLICE 3) ... Additive host_escrow migration; SaveHostEscrow/HostEscrow gain the hash (NULL-safe for legacy rows); GetEscrowStatusForCustomer joins hosts; the report ACK gains escrow:{identity_blob_present,restic_pw_sha256, created_at} (omitted without a row). Contract test mirrors the agent's v0.79.0 emit struct. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6	2026-07-09 23:10:29 +02:00
admin	3457415117	slice 10D (hub): DR capstone — recovery mode + re-enroll + directive serving (hub v0.11.0) ... Recovery-mode toggle (global key, bounded auto-expiry) gates re-enroll + restore-directive serving. Re-enroll rotates the agent<->hub credential to the new box (old key revoked); returns the opaque escrow blobs + non-secret directive. Store gains recovery_mode_until + identity_blob + directive_json. Hub holds no usable secret + no Cloudflare write-power (operator-side rotation). Doc 03 §9: slice 10 CLOSED. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-11 09:48:38 +02:00