admin
5e3dfcb714
Live-probed on felhom-pve under the PRODUCTION scoped token vs root: enumeration IS pool-filtered (T1: token sees [9201] of 4 guests); pool read 403s naming Pool.Audit (T2); Pool.Audit@/pool/felhom alone suffices (T3, throwaway identity, torn down); /cluster/resources withholds the pool field without Pool.Audit (T7); local ownership records all partial (T5). Recommendation for the A1 impl spec (now unblocked): Pool.Audit added to FelhomAgentGuest + GET /pools/felhom cross-check in staleLockController, fail-safe skip on read failure. Appendix: committed-secrets rotation micro-runbook (operator follow-up). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
22 lines
1.7 KiB
Markdown
22 lines
1.7 KiB
Markdown
# CONTEXT — felhom.eu working state
|
|
|
|
> Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
|
|
> `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
|
|
|
|
- **2026-07-03 — SPIKE A1 (pool-membership read) COMPLETE** —
|
|
`documentation/audits/SPIKE-a1-pool-membership-read-2026-07-03.md`. **The A1 impl spec is now
|
|
unblocked** and must cite it: winner = `Pool.Audit` added to `FelhomAgentGuest`
|
|
(`felhom-host-install.sh` L183) + `GET /pools/felhom` cross-check in
|
|
`staleLockController.Guests()` (fail-safe skip). Enumeration proven pool-filtered under the
|
|
production token; fix is defense-in-depth for the broad-token precondition. Appendix: operator
|
|
follow-up to rotate + de-git the 3 committed secrets in `manifests/felhom.secret.yaml`.
|
|
- **2026-07-03 — hub v0.31.0 LIVE** (critical-severity ingest fix + UI badges; ArgoCD Synced/Healthy;
|
|
live probe: critical event stored + operator email delivered).
|
|
- **2026-07-03 — Felhom skills exist**: `skills/{felhom-build-deploy,felhom-ui-design,felhom-testing}`,
|
|
installed via `scripts/install_skills.py` — **junction mode** (repo edits live immediately; no
|
|
re-install needed after editing). Fresh-session discovery verified.
|
|
- **2026-07-03 — CLAUDE.md refreshed** (all four repos): no version-pinned state in CLAUDE.md —
|
|
current state lives here / CHANGELOG / REUSE.md.
|
|
|
|
- **2026-07-03 — `REUSE.md` exists at the repo root** (hub helpers / website conventions / gate scripts / manifest patterns, code-verified); maintenance rule active: update it in the same commit that changes a shared helper. `scripts/reuse_refs_check.py` machine-checks its citations across all four felhom repos.
|