feat/hostclaim-boxguard
Human
Host lifecycle claim, Plan 3: box-local guard and stop evidence. internal/hostguard (strict local record, context-aware flock, fresh-claim admission, activation, installation retirement; descriptor-relative I/O, no chown), cgroup.OpenCleanup (reopen-only, no spawn authority), internal/stopevidence (complete /proc fd scan, composite evidence), tmpfiles for the two directories. Libraries only; nothing calls them yet. Built on feat/hostclaim-library (Plan 1), so it merges after it.
Commits
28
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed eb3fe844b Merge remote-tracking branch 'origin/main' into feat/hostclaim-boxguard
- claude agent, operated by paul@keymail.dev pushed 695b6d38b stopevidence: the unshared-thread test tolerates landing on the thread-group leader
- claude agent, operated by paul@keymail.dev pushed 8c40aca61 hostguard, stopevidence: per-task fd scan, durable idempotent retries, bounded filenames (Plan 3 review round 1)
- claude agent, operated by paul@keymail.dev pushed 01ed2bd9b Merge remote-tracking branch 'origin/main' into feat/hostclaim-boxguard
- claude agent, operated by paul@keymail.dev pushed 4b67594b1 host: tmpfiles provisions /run/carlos/hostguard and /data/hostguard (claim Plan 3 Task 7)
- claude agent, operated by paul@keymail.dev pushed 8e90a399d stopevidence: composite stop evidence and cleanup-only entry point (claim Plan 3 Task 6)
- claude agent, operated by paul@keymail.dev pushed b3c19f903 stopevidence: complete /proc descriptor-holder scan, EACCES is incomplete (claim Plan 3 Task 5)
- claude agent, operated by paul@keymail.dev pushed b4ff0e859 cgroup: reopen-only cleanup handle with no spawn authority (claim Plan 3 Task 4)
- claude agent, operated by paul@keymail.dev pushed 4c12aec5f hostguard: cross-process exclusion, cancellation and lock lifetime tests (claim Plan 3 Task 3)
- claude agent, operated by paul@keymail.dev pushed 992dd4f46 hostguard: fresh-claim admission, activation and installation retirement under a context-aware flock (claim Plan 3 Task 2)
- claude agent, operated by paul@keymail.dev pushed 8975c3076 hostguard: the strict local record, capture and descriptor-relative atomic writes (claim Plan 3 Task 1)
- claude agent, operated by paul@keymail.dev pushed 47426cc18 hostclaim: coverage is per region (moves rev 7.12 note 5, claim rev 6.13)
- claude agent, operated by paul@keymail.dev pushed 34224a29a hostclaim: holder.admissions, Coverage, PublishGeneration, Adopt writer_box (spec rev 6.12)
- claude agent, operated by paul@keymail.dev pushed 090fb7a2d hostclaim: spec rev 6.10 admission (refuse creating, KeepStamp, sealed baseline, QueueGenerationRetire, @root)
- claude agent, operated by paul@keymail.dev pushed fdff530f7 hostclaim: admission bound to op, phase and kind; writer_box; writes_lost; park-generation (spec rev 6.9)
- claude agent, operated by paul@keymail.dev pushed a67d9f474 hostclaim: AdmitWriter replaces NewGeneration (writer sessions, spec rev 6.8 §6.4a)
- claude agent, operated by paul@keymail.dev pushed cabbd4141 hostclaim: final review fixes (union write set, effective vs record region, CompleteCreate keeps authority, tests)
- claude agent, operated by paul@keymail.dev pushed 4d91a7448 hostclaim: the orphan predicate (record first, then claim; no claim = legacy)
- claude agent, operated by paul@keymail.dev pushed 5aaa1ac47 hostclaim: one helper builds parking chores for delete and adoption
- claude agent, operated by paul@keymail.dev pushed c677ae68f hostclaim: cold recovery installs a new generation and stamp (§6.4a, R7-1)
- claude agent, operated by paul@keymail.dev pushed faa557312 hostclaim: one adoption routine, discovery chores and their completion (CC4, CC8)
- claude agent, operated by paul@keymail.dev pushed 5f8f1fccf hostclaim: delete (CC11 over its write set, keeps exec), parking chores, completion and free
- claude agent, operated by paul@keymail.dev pushed 2aadfd904 hostclaim: CancelCreate refuses a claim carrying execution authority
- claude agent, operated by paul@keymail.dev pushed ed1c2c96a hostclaim: create (record body in intent, host-bound), complete (stamp) and cancel
- claude agent, operated by paul@keymail.dev pushed 8ef009916 hostclaim: op-id guard (C2) and the start guard (one op, CC11)
- claude agent, operated by paul@keymail.dev pushed 1ca5f371f hostclaim: Update refuses a non-absent observation with no ETag (C5a)
- claude agent, operated by paul@keymail.dev pushed 5f2742405 hostclaim: strict Read and the single Update (central gen, host-bound, never delete)
- claude agent, operated by paul@keymail.dev pushed ac0278b32 hostclaim: the claim object (schema v2), key, validation and incarnation