← Branches
instance-key-build
Commits
-
258dd81ee
docs: the instance-key rollout orders the backfill before any move of a keyless instance (merge review residual)
Paul Campbell
-
f6a2aa5f2
Merge origin/main into instance-key-build (zdd surfaces)
Paul Campbell
-
114ef7412
activator: the two-phase ensure's unasked-mint deferral is pinned by a test, and the slow-read test waits for host A to be inside its read before host B starts.
Paul Campbell
-
5fe080b68
activator: the mint's bucket read runs outside adminTokenMu, and the decision is the locked read's alone (final re-review)
Paul Campbell
-
a0c906cc1
docs: the instance-key plan carries the final fix wave: the delivery rule under ruling 5, the Built note, four known gaps and the #273 line (final review I2, I5, minor 6)
Paul Campbell
-
b628e4eea
activator: one guard for the two ensure entry points, one open and one sync for both layouts, the test seams in one struct, the dropped key fields named (final review minors 3, 4, 7)
Paul Campbell
-
1ea86df4c
activator: an adoption body is one object and nothing after it (Astra P3, final review minor 1)
Paul Campbell
-
0ee78be84
activator: the replica gate's refusal is logged once an hour per host and reason, and the rollout lists keyless replicas' sidecars and workers (final review I5, minor 5)
Paul Campbell
-
3c213fda5
host: the claim path's backend gets the instance-key readers (final review I1)
Paul Campbell
-
92e6d5c3c
activator: the replica gate leaves the claim's identity check and runs in the launch sources only (final review I4)
Paul Campbell
-
96a5ac092
activator: nothing is minted until the row's configuration is delivered (final review I2, Astra P2; minor 2)
Paul Campbell
-
c74d0cda4
activator: flat env and config reads open O_NONBLOCK and accept only a regular file (final review I3, minor 6)
Paul Campbell
-
365422843
Instance key provision: Astra final build review, unedited
Paul Campbell
-
3e32533ea
Instance key provision: Astra final build review brief
Paul Campbell
-
8ff16f4ee
docs: the instance-key plan matches what was built, with a Built note, the rollout's two pre-roll checks, the known gaps, O6's threading and loop obligations, and the follow-ups (end sweep)
Paul Campbell
-
c283e1b2a
test: the re-render test proves SyncExec rendered and checks its errors, the moves tests print lengths, and a flat row's Start is pinned end to end (end sweep, tasks 3 and 7)
Paul Campbell
-
69fd647e4
hostfiles: the platform relay logs a stage's failure and recovery once each, as the publisher's loop logs a scan, not every retry (end sweep, task 5)
Paul Campbell
-
42f0cd8bd
activator: the adoption verb answers 500 for a launch state whose record the pinner could not read, the 500 guards are tested, the swapped sync is restored by t.Cleanup, and no test message prints a record (end sweep, task 5)
Paul Campbell
-
b0a6a3889
activator: the claim path's mode comment says what the key's ensure does, the claim snapshot test pins the delivered configured key, and a failure message prints the own file's length (end sweep, task 4)
Paul Campbell
-
b42dedcfb
test: the instance key survives re-render and travels byte for byte through a move (L21)
Paul Campbell
-
0e766ee2a
activator: the claim launch source names the host once around a key refusal, and the tests pin host-once on every path (task 6 fix round 1)
Paul Campbell
-
f9372fd5f
agent: the activator's start sequence is a named, tested function, so a claim box never backfills and a legacy box backfills between recovery and the pass's publication (task 6 fix round 1)
Paul Campbell
-
2cd8d79a7
activator: the instance-key refusals name the host once, through their callers (task 3 review minor)
Paul Campbell
-
4c9256bb3
agent: backfill the instance key into existing <host>.env files at startup (L21)
Paul Campbell
-
1fbc04cf8
activator: the instance key's adoption verb, bound to the launch's writer and published on the session (L21)
Paul Campbell
-
4a7ee0e60
claim: the launch source mints the instance key under the guard, syncs it before Establish, gates a replica on its home's key, and names the key it delivers (L21)
Paul Campbell
-
3ab3cbe19
activator: the legacy co-spawned sidecar on a replica host is gated as the worker is, and refusals name /etc/carlos/replica-home-keys (L21 fix round 1)
Paul Campbell
-
37d652df6
activator: a replica row's worker is gated as its seed is, and the nested test isolates the home-key digest check (L21)
Paul Campbell
-
366067d54
activator: a replica launches only with its home's key, verified, or none and a socket its helper refuses on (L21)
Paul Campbell
-
f896570c3
activator: seed, start and nested prepare mint the instance key durably before the env is read, and the mint refuses a row fenced or conflicting on the launch body's own paths (L21)
Paul Campbell
-
4415e1ba8
activator: undo a partial instance-key append, test the append open's own link refusal, and name the fsync-after-EIO limit (task 2 review fixes)
Paul Campbell
-
ba7c661c6
activator: refuse a symlink at a flat row's <host>.env on every instance-key path, in the open itself (O_NOFOLLOW)
Paul Campbell
-
4c2e881ae
activator: mint CARLOS_INSTANCE_KEY create-only into <host>.env, durable on every call (L21)
Paul Campbell
-
6509c2dcf
Instance key provision: Astra round 7 (ready to build) unedited, plus its two P3 corrections in the plan
Paul Campbell
-
3416f1b88
Instance key provision: Astra round 7 brief (confirming)
Paul Campbell
-
7a2e46967
Instance key provision plan rev 5.1: one read for the replica gate, the list read at every launch (rulings 29, 30)
Paul Campbell
-
e8487c3a1
instancekey: accept only the canonical adoption record, pin ParseEnv's behaviour and name the empty-key exception (task 1 review minors 1-5)
Paul Campbell
-
c18d6b04c
Instance key provision: Astra round 6, unedited
Paul Campbell
-
afa890573
activator: test that an empty own instance key neither overrides the configured key nor reports it as shadowed
Paul Campbell
-
c568c13b8
instancekey: one rule for the instance key's parse, effective layer and adoption record (L21)
Paul Campbell
-
2c39819c1
Instance key provision: Astra round 6 brief (confirming)
Paul Campbell
-
caa2609d8
Instance key provision plan rev 5: configured keys are never changed in place (rulings 27, 28)
Paul Campbell
-
16a57b0d2
Instance key provision: Astra round 5, unedited
Paul Campbell
-
37c48a403
Instance key provision: Astra round 5 brief
Paul Campbell
-
3e42e8e7f
Instance key provision plan rev 4: a replica gets its home's key (ruling 26)
Paul Campbell
-
5d90d8548
Instance key provision: Astra round 4, unedited
Paul Campbell
-
cba8ae4ea
Instance key provision: Astra round 4 brief (confirming)
Paul Campbell
-
0317f5d1f
Instance key provision plan rev 3.1: answers Astra round 3
Paul Campbell
-
794c45ed6
Instance key provision: Astra round 3, unedited
Paul Campbell
-
f649d9728
Instance key provision: Astra round 3 brief
Paul Campbell
-
b6fa2ed1f
Instance key provision: rev 3 planner's report
Paul Campbell
-
3947e1d98
Instance key provision plan rev 3: answers Astra round 2
Paul Campbell
-
f3ac9ee39
Instance key provision: Astra round 2, unedited
Paul Campbell
-
a21e82252
Instance key provision: Astra round 2 brief
Paul Campbell
-
7fa74e51a
Instance key provision: rev 2 planner's report
Paul Campbell
-
f2c8149c4
Instance key provision plan rev 2: answers Astra round 1
Paul Campbell
-
55b22cb5f
Instance key provision: Astra round 1, unedited
Paul Campbell
amadan