← Branches
design-sidecar-isolation
Commits
-
6e2904493
Sidecar isolation Task 11: the shape's other consumers; status --layout shows the flat-exec policy and the closure check (ยง3.12, D14, D15)
claude agent, operated by paul@keymail.dev
-
b9f6256d9
Sidecar isolation Task 10 fix round 1: one host.env parser for the claim unit and the workers floor
claude agent, operated by paul@keymail.dev
-
1ce674552
Sidecar isolation Task 10: downgrade guards hold the workers floor (D11 rev 4)
claude agent, operated by paul@keymail.dev
-
f672e3acf
Sidecar isolation Task 9 fix round 1: a refused respawn stands down; D16 witnessed through the real leg; aliased os/exec imports enumerated
claude agent, operated by paul@keymail.dev
-
f434efea2
Sidecar isolation Task 9 (5/5): census claims for the flat-exec units
claude agent, operated by paul@keymail.dev
-
81421c285
Sidecar isolation Task 9 (4/5): host.env's allowlist takes the isolation switches (R4-2)
claude agent, operated by paul@keymail.dev
-
e0ff1412b
Sidecar isolation Task 9 (3/5): the agent arms the policy, keeps the spawn record and reports the inventory (D12, D14, D15, D16)
claude agent, operated by paul@keymail.dev
-
f7efe00e0
Sidecar isolation Task 9 (2/5): status carries the flat-exec report and the workers word (D14)
claude agent, operated by paul@keymail.dev
-
0bdbe7822
Sidecar isolation Task 8 fix round 1: recovery asks the replicator, the config is decoded strictly and read as one version, an absent-db journal may name no companion (D8, D9)
claude agent, operated by paul@keymail.dev
-
0fbb62d33
Sidecar isolation Task 9 (1/5): the flat-exec policy at both spawn seams (D12, D13)
claude agent, operated by paul@keymail.dev
-
a51c3caa6
Sidecar isolation Task 8: census claims for the changed units; gofmt
claude agent, operated by paul@keymail.dev
-
603f43dc9
Sidecar isolation Task 8 (4/4): every wake source refuses a fenced worker (D8, Review Focus 3)
claude agent, operated by paul@keymail.dev
-
5954fb493
Sidecar isolation Task 8 (3/4): status reports worker rows; the agent wires readiness and the replicator (D8, D9, D11)
claude agent, operated by paul@keymail.dev
-
f327c2f5e
Sidecar isolation Task 8 (2/4): ConfigEnvPath learns the worker shape (D8)
claude agent, operated by paul@keymail.dev
-
3d8ce335c
Sidecar isolation Task 8 (1/4): the layout pass moves worker rows (D8, D9, D11)
claude agent, operated by paul@keymail.dev
-
7490ed699
Sidecar isolation Task 7: workers mint nested only when the box was ready at agent start (D7, D11)
claude agent, operated by paul@keymail.dev
-
039914d68
Sidecar isolation Task 5 fix 1: the shared socket refuses a nested worker by its incarnation, not its listener
claude agent, operated by paul@keymail.dev
-
81dc25c3d
Sidecar isolation Task 6 (6/6): the nested worker end to end, the crash loop of Review Focus 1, KillHost is no proof for a nested worker
claude agent, operated by paul@keymail.dev
-
3f52a36b0
Sidecar isolation Task 6 (5/6): an uncertain nested worker start is not "nothing ran" (D19, R2-1)
claude agent, operated by paul@keymail.dev
-
bee95bc35
Sidecar isolation Task 6 (4/6): RoleGone generalises LegacyRunGone; a failed nested worker wake keeps its lease until its unit is proven gone (D19)
claude agent, operated by paul@keymail.dev
-
8af981832
Sidecar isolation Task 6 (3/6): StartWorkerStaged dispatches on layout; the nested arm runs the worker unit (D5)
claude agent, operated by paul@keymail.dev
-
dcd04fb4d
Sidecar isolation Task 6 (2/6): unitProc.Crashed reads systemd's Result for the proc's own invocation (D6)
claude agent, operated by paul@keymail.dev
-
f1533ce5d
Sidecar isolation Task 6 (1/6): CARLOS_SIDECAR_DB tells every worker where its database is (D4)
claude agent, operated by paul@keymail.dev
-
9e5e7866b
Sidecar isolation Task 5: the per-host agent socket and the worker's prepare (D3)
claude agent, operated by paul@keymail.dev
-
787b49588
Sidecar isolation Task 4: Classify learns the worker row shape, WorkerManaged (D2)
claude agent, operated by paul@keymail.dev
-
465ba96b4
Sidecar isolation Task 3: the worker unit template (D1, D6)
claude agent, operated by paul@keymail.dev
-
d86c9e96f
Sidecar isolation spec rev 4.1 and plan: Astra round 4 (accept with fixes) folded in
claude agent, operated by paul@keymail.dev
-
209b83252
Sidecar isolation Task 2: the worker role at root, fenced like the run unit (D1, D19)
claude agent, operated by paul@keymail.dev
-
fea6a05e8
Sidecar isolation plan: follow spec rev 4 (explicit settings, no ratchet)
claude agent, operated by paul@keymail.dev
-
9f2cd2843
Sidecar isolation spec, revision 4: answers Astra round 3
claude agent, operated by paul@keymail.dev
-
ce2bfb2a3
ops: one replication owner for every worker (D9)
claude agent, operated by paul@keymail.dev
-
4abca90ad
Merge remote-tracking branch 'origin/main' into design-sidecar-isolation
claude agent, operated by paul@keymail.dev
-
ca0b43931
Sidecar isolation: implementation plan for release N (spec rev 3)
claude agent, operated by paul@keymail.dev
-
99017de51
Sidecar isolation spec, revision 3: answers Astra round 2, Paul's rulings
claude agent, operated by paul@keymail.dev
-
6749a4d30
Sidecar isolation spec: Astra round 2 findings (unedited)
claude agent, operated by paul@keymail.dev
-
730ba093d
Sidecar isolation spec, revision 2: answers Astra round 1
claude agent, operated by paul@keymail.dev
-
2a2517d6e
Sidecar isolation spec: Astra round 1 findings (unedited)
claude agent, operated by paul@keymail.dev
-
1c029ee5d
Sidecar isolation design (security finding B1), revision 1, and its review brief
claude agent, operated by paul@keymail.dev