admin 3457415117 slice 10D (hub): DR capstone — recovery mode + re-enroll + directive serving (hub v0.11.0) ...

Recovery-mode toggle (global key, bounded auto-expiry) gates re-enroll +
restore-directive serving. Re-enroll rotates the agent<->hub credential to the
new box (old key revoked); returns the opaque escrow blobs + non-secret
directive. Store gains recovery_mode_until + identity_blob + directive_json.
Hub holds no usable secret + no Cloudflare write-power (operator-side rotation).
Doc 03 §9: slice 10 CLOSED.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-11 09:48:38 +02:00

..

host_test.go

feat(hub): host-domain ingest — tables + /host-report + per-host auth + host dead-man's-switch (v0.7.0, slice 3)

2026-06-08 16:36:16 +02:00

store.go

slice 10D (hub): DR capstone — recovery mode + re-enroll + directive serving (hub v0.11.0)

2026-06-11 09:48:38 +02:00

telemetry.go

chore(hub): revert incidental gofmt-only reformatting outside slice-3 scope

2026-06-08 16:38:18 +02:00