admin pushed to main at admin/felhom.eu 2026-06-29 20:06:08 +02:00
0d470b1e05 spike: controller-agent channel health — GO (Q1 classify map; Q2 memoized client self-heals, fresh probe faithful)
admin pushed to main at admin/felhom.eu 2026-06-29 19:46:19 +02:00
6b1c2892d6 docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved
admin pushed to main at admin/felhom-agent 2026-06-29 19:45:19 +02:00
de6b72651b docs: REPORT + README for v0.45.0 controller-swap (stdin tee + FELHOM_CONTROLLERSWAP)
admin pushed to main at admin/felhom-agent 2026-06-29 19:42:32 +02:00
8a4ccab3e6 controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)
admin pushed to main at admin/felhom.eu 2026-06-29 19:27:17 +02:00
1141d74532 spike: narrow-grant controller-swap mechanics — GO (stdin tee + sudoers * spans spaces, grants stay scoped)
admin pushed to main at admin/felhom.eu 2026-06-29 18:57:25 +02:00
eea3cd4040 docs: hub REPORT (v0.19.0 capability alert) + multidrive audit countermeasure pointer
admin pushed to main at admin/felhom-agent 2026-06-29 18:57:24 +02:00
61c89a7efa docs: REPORT + README for v0.44.0 capability self-probe
admin pushed to main at admin/felhom.eu 2026-06-29 18:53:25 +02:00
2312572411 manifest: hub 0.18.0 → 0.19.0 (agent capability-degraded alert)
admin pushed to main at admin/felhom.eu 2026-06-29 18:50:52 +02:00
b7b165bff5 hub: HostCapabilityChecker — operator alert on agent capability-degraded (v0.19.0)
admin pushed to main at admin/felhom-agent 2026-06-29 18:43:52 +02:00
25024d9dda capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0
admin pushed to main at admin/felhom.eu 2026-06-29 16:06:42 +02:00
c6bae9515a audit(multidrive): §8 Outcome — FIXED via sudoers completeness pass; controller-swap surfaced
admin pushed to main at admin/felhom-agent 2026-06-29 16:06:40 +02:00
19582046ba REPORT: sudoers completeness audit — multi-drive restored; controller-swap surfaced
admin pushed to main at admin/felhom-agent 2026-06-29 15:58:43 +02:00
55888e5686 sudoers: close non-root allowlist gaps (lxc-info, make-private, restart dnsmasq, pct reboot/onboot) — restores multi-drive
admin pushed to main at admin/felhom.eu 2026-06-29 15:33:45 +02:00
66a001de0b spike: multi-drive mutual-exclusion — root cause is bound_under_parent detection bug (lxc-info denied under non-root agent), not propagation/gate
admin pushed to main at admin/felhom.eu 2026-06-29 15:09:00 +02:00
1777c89fb9 spike(pin-mismatch): §9 Outcome — R1 executed, controller↔agent service restored
admin pushed to main at admin/felhom-controller 2026-06-29 15:09:00 +02:00
77bccf1212 context: OPS R1 — agent local-API leaf restored, controller↔agent service restored (no code change)
admin pushed to main at admin/felhom.eu 2026-06-29 14:44:10 +02:00
8254b8823e spike(pin-mismatch): follow-up — aside-var-lib holds matching token store; R1 = one-copy fix for pin+token
admin pushed to main at admin/felhom.eu 2026-06-29 14:38:45 +02:00
2de9659592 spike: controller↔agent TLS leaf-pin mismatch — root→non-root migration regenerated agent leaf (findings)
admin pushed to main at admin/felhom-controller 2026-06-29 13:56:51 +02:00
f10d74f993 docs: REPORT — v0.89.0 gap closure, calcom+nextcloud send-tested live
admin pushed to main at admin/app-catalog-felhom.eu 2026-06-29 13:56:51 +02:00
bb81cd414a app-email: calcom+nextcloud wired & send-tested; calcom healthcheck GET fix + docs