admin 9c5cf2975f hub: HostLeafChecker — proactive agent re-key detection (host_leaf_changed) v0.22.0 ...

Watches each host's reported local-API leaf fp; alerts on change (trust-on-first-report). Sibling of
HostCapabilityChecker; store.GetHostLeafFingerprints reads report_json (no migration); hub-generated
event (no allowlist change). Change red-proof + first-obs-seed + empty-skip + blocked-drop tests.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ

2026-06-29 23:15:22 +02:00

..

control-envelope.golden.json

slice 10A: hub desired-state serving + signed-jobs queue (Down channel) (hub v0.9.0)

2026-06-10 19:03:14 +02:00

desired-state.golden.json

slice 10A: hub desired-state serving + signed-jobs queue (Down channel) (hub v0.9.0)

2026-06-10 19:03:14 +02:00

host-report.golden.json

hub: HostLeafChecker — proactive agent re-key detection (host_leaf_changed) v0.22.0

2026-06-29 23:15:22 +02:00