3 Commits

Author	SHA1	Message	Date
admin	7747a16ff1	feat(hub): v0.57.0 reinstall-of-existing-customer arc — claim/offsite/escrow continuity ... F2 claim re-issue on clean-slate re-enroll (ReissueForReenroll, host-enroll mint path, single-bump, reset code; hub never stores the password so fork B). F3 offsite re-issue on re-enroll (ReissueOffsiteForCustomer, same machinery as the manual button). 2.3 escrow honesty (red-proofed): re-issuing offsite marks the escrow stale (MarkEscrowStale), withholds the mismatched restic hash from auto-confirm, DR checklist shows stale not done. Events: claim_reissued_reenroll / offsite_reissued / escrow_stale. Controller + scripts unchanged (source contradicted both premises): the controller reads escrow prereqs live from the agent; the installer can't know the descriptor-provisioned storage id. F4 root fix is agent-side -> ROADMAP R-22; demo unblocked live (Part 0 ACL grant). VALIDATION doc F2 erratum + F3/F4 dispositions. Green gate + Scenario-C red-proof pass.	2026-07-16 18:00:13 +02:00
admin	e205a2d6a1	test: claim engine — reset requests never alter claimed state (Scenario C non-DoS; leftover from the claim-arc session) ... Claude-Session: https://claude.ai/code/session_01NptTCFtu7dz2Ru89qHRagN	2026-07-12 19:38:42 +02:00
admin	6b40eb8619	hub: customer-claim password arc parts 1+2 — code engine, emails, ACK, configgen bake, UI (v0.50.0) ... Closes DRILL-day0-vm F-4 hub-side: per-customer claim state (customer_claims, bcrypt-only custody), the claim engine (issue at real config retrieve = Day-0 bake; first-report issue for live boxes; resend rotates generation; reset rate-limited 3/day), three Hungarian emails via the dispatcher, report-ACK claim object {code_hash, generation, issued_at} + set-only claimed ingest, web.claim_code_* baked into generated controller.yaml, Setup-tab status chip + resend button, POST /api/v1/claim/reset-request (self-scoped), claim_lockout event allowlisted. 13 new tests; full repo green. Claude-Session: https://claude.ai/code/session_01NptTCFtu7dz2Ru89qHRagN	2026-07-12 18:12:48 +02:00