admin 88b0a2e761 hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04 ...

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-04 13:05:00 +02:00

..

control-envelope.golden.json

…

desired-state-osupdate.golden.json

hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04

2026-10-04 13:05:00 +02:00

desired-state-wireguard.golden.json

hub: S2 API — box-facing WG registration + merge-at-read + hub-owned-key guard

2026-07-04 00:44:40 +02:00

desired-state.golden.json

…

host-report.golden.json

hub v0.85.0 — Network card: a host's addresses are visible at last

2026-07-31 08:49:44 +02:00