admin 375cb082e2 host-install v1.16.0 (FELHOM_ESCROW via canonical sudoers fetch; hub hostInstallVersion synced, no deploy) + RUNBOOK-escrow-ceremony rewrite: controller wizard PRIMARY, CLI operator fallback, F1 threat-model paragraph (R over CF tunnel accepted 2026-07-13), stale-blob/supersede/void semantics

2026-07-13 19:01:46 +02:00

..

api

hub: F-15 instant reset codes — reset-request response carries the rotated {code_hash, generation, issued_at} (same shape/guarantee as the report ACK); claim-resent flash now states the operator-resend ACK lag

2026-07-13 08:04:53 +02:00

assets

feat(hub): Configuration page, asset seedOrUpdate, English UI

2026-02-25 09:34:43 +01:00

claim

test: claim engine — reset requests never alter claimed state (Scenario C non-DoS; leftover from the claim-arc session)

2026-07-12 19:38:42 +02:00

cloudflare

Hub v0.6.0: Geo-restriction display + disable button + UUID cleanup

2026-02-25 12:43:00 +01:00

configgen

hub: customer-claim password arc parts 1+2 — code engine, emails, ACK, configgen bake, UI (v0.50.0)

2026-07-12 18:12:48 +02:00

gitea

hub v0.29.0: Day-0 artifact manifest — version dropdowns + auto-derived sha

2026-07-01 09:02:13 +02:00

hetznerapi

hub v0.39.0: offsite hardening — F4 credential re-issue, F2 scan retry, F5 save UX

2026-07-09 22:39:08 +02:00

mailrelay

hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP

2026-06-29 08:45:22 +02:00

monitor

hub v0.41.0: OffsiteChecker (fill 90/95 + staleness >48h) + operator freeze lever (SLICE 4)

2026-07-09 23:57:12 +02:00

notify

hub: customer-claim password arc parts 1+2 — code engine, emails, ACK, configgen bake, UI (v0.50.0)

2026-07-12 18:12:48 +02:00

offsite

hub v0.41.0: OffsiteChecker (fill 90/95 + staleness >48h) + operator freeze lever (SLICE 4)

2026-07-09 23:57:12 +02:00

semver

hub v0.45.0: floor-UI separation + effective-floor source + per-box MinAgent conditional floor

2026-07-11 15:33:14 +02:00

store

hub: F-14 part 1 — host-deletion provenance (host_deletions, in-tx)

2026-07-13 14:44:42 +02:00

tenantsync

hub v0.44.0: PBS DR tier SLICE 1 — felhom-tenantsync surface (script+client) + hub provisioning flow (consume-once host secret, pbs_dr desired-state descriptor, fail-closed + idempotent, re-issue)

2026-07-10 20:49:48 +02:00

web

host-install v1.16.0 (FELHOM_ESCROW via canonical sudoers fetch; hub hostInstallVersion synced, no deploy) + RUNBOOK-escrow-ceremony rewrite: controller wizard PRIMARY, CLI operator fallback, F1 threat-model paragraph (R over CF tunnel accepted 2026-07-13), stale-blob/supersede/void semantics

2026-07-13 19:01:46 +02:00

wgsync

hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type

2026-07-03 23:52:08 +02:00