carlos / platform Public

Commits

• 9e99d7c10 stopevidence: pid 0 in cgroup.procs is an unidentifiable member, a stray (CI fix) claude agent, operated by paul@keymail.dev 2 weeks ago
• f417182cb host: the guarded database install refuses a symlink or other non-regular file at <dbPath>.gen, dangling or not (final re-review residual) claude agent, operated by paul@keymail.dev 2 weeks ago
• 8107bfb3a host: the landing is bounded by the earlier of cut_deadline and landing_deadline (final-review fix 3, spec §7.4) claude agent, operated by paul@keymail.dev 2 weeks ago
• 88abf7dd4 host: the landing installs only inside the host guard and never deletes at the live paths (final-review fixes 1 and 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• d86852fc6 provision: the landing's rollback sentence for a files directory it did not write (MV-N180, final-review fix 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 590a44393 moves plan 2: polish (parked review minors) claude agent, operated by paul@keymail.dev 2 weeks ago
• 0431d3019 host: the held-config identity is canonical JSON of the pinned etags, and an explicitly pinned empty configuration is granted (Task 10b fix round 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 2c8f0ddfd console: a failed host-claim record start promises no retry (MV-N179) until the claim code can resolve its effect (E-switch fix round 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 26d9e4d17 console: the host-claim move door checks the roster before it registers, and a later refusal no longer blames the roster (E-switch fix round 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 0ea46afd7 host: the moves policy grants held config and release only for the move's pinned inputs (Task 10b fix round 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 2aa69a4ee console: the Phase 1 move door starts a host-claim move through the claim's admitted path (task E-switch) claude agent, operated by paul@keymail.dev 2 weeks ago
• c6f4c21ef Merge origin/main (76f728a9, claim Plan 5 Tasks 7-9) into moves-phase1-2 claude agent, operated by paul@keymail.dev 2 weeks ago
• af6d89909 host: the moves write policy for the claim (hostbox.Policy.Moves) and the held timers import through SelectedTimers (Task 10b) claude agent, operated by paul@keymail.dev 2 weeks ago
• d50652c33 host: the landing's generation requests run under the lease's cancellation context (Task 10 fix round 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 0035ce9e8 host: the landing catches the claim up at restored, a refused install is never an install, every generation write runs under the lease, and the deadline is checked before the install transition (Task 10 fix round 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• ba73b1528 host: split the landing into orchestration, park adapters and install helpers (no behaviour change) claude agent, operated by paul@keymail.dev 2 weeks ago
• c8bfef4f7 host: the landing from checking to restored: the flip's claim half, the residue parks, the generation build, the local install, the held render and the pinned release (section 7.6) claude agent, operated by paul@keymail.dev 2 weeks ago
• 8673e1c71 provision, hostbox, dbverify: the landing's rollback marker and phase order, the shared .gen marker writer, RemoveHost inside the CAS claude agent, operated by paul@keymail.dev 2 weeks ago
• 3666bf038 Merge origin/main (a4cd3003, claim Plan 6b) into moves-phase1-2 claude agent, operated by paul@keymail.dev 2 weeks ago
• 9de08fc8e host, console: an archive is lost only when the reads say so; scoped holders are refused at the move door and never repinned or cut automatically; the real rebuild headroom (Task 5 fix round 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 6b1e3e7ed host: the cut's crash matrix: after the evidence, after the final round, after the seal and between the two snapshot PUTs, each replayed by a fresh worker (Task 5 fix round 1, ruling 6) claude agent, operated by paul@keymail.dev 2 weeks ago
• b049b85d8 host: a journalled archive identity is final and finished from what was published; a listing error is never absence; the archive seal's bound reaches the ledger or the phase stops (Task 5 fix round 1, rulings 4 and 5) claude agent, operated by paul@keymail.dev 2 weeks ago
• 8bb90ff69 host: the cut's archive publication and its recovery move into movesarchive.go, no behaviour change (Task 5 fix round 1, ruling 7) claude agent, operated by paul@keymail.dev 2 weeks ago
• 2d9d3ea95 host: the seal's coverage fails closed; a missing database is uncovered unless the checkpoint journalled it covered (Task 5 fix round 1, ruling 3) claude agent, operated by paul@keymail.dev 2 weeks ago
• d3fc2196f host: the cut stops on the activator's own lease; a holder anywhere else is refused at admission with a recorded reason (Task 5 fix round 1, rulings 1 and 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 37a5d3501 lease: BindRoot, the root layout's per-request authority (Task 5 fix round 1, ruling 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• cb9928da6 host: tests for the cut's row hold and the stopped database's local position claude agent, operated by paul@keymail.dev 2 weeks ago
• 96ee1c390 host: the journaled cut, requested to flipped, with stop evidence and the seal by version (§7.4, §7.5) claude agent, operated by paul@keymail.dev 2 weeks ago
• f43c5d828 host: one source round for readiness and the cut's admission; repin from ready; the one-box rule every round; the archive kept on the data disk (§7.3, §7.4, G1, G13, G14, G7) claude agent, operated by paul@keymail.dev 2 weeks ago
• 0ecdeb538 moves: the seal by version; lease: streamed create-only put; provision: the cut's revert reasons (§7.3, §7.4, §8.3) claude agent, operated by paul@keymail.dev 2 weeks ago
• 1686431e7 moves build, fix round 1: every recorded or replay-chosen version id must pin an immutable object (task-8-review) claude agent, operated by paul@keymail.dev 2 weeks ago
• ca9ccc92e moves: build the generation from the sealed replica: planner restore, snapshot, anchor, intent and manifest (§5.1 steps 2 and 7, §7.6 building) claude agent, operated by paul@keymail.dev 2 weeks ago
• 7ba166f41 park helpers, fix round 1: location parks only where the region is retired; scope equals holder.location; Parked lists each key once claude agent, operated by paul@keymail.dev 2 weeks ago
• 015da0040 park: Parked; hostclaim: park queue helpers for move retirements on the existing kinds (§6.4, D6) claude agent, operated by paul@keymail.dev 2 weeks ago
• c23d174d7 moves copy scan: list internal/moves/journal.go claude agent, operated by paul@keymail.dev 2 weeks ago
• 0a6296e06 moves.Journal: the box-local operation journal (§9.1, §9.2, F12) claude agent, operated by paul@keymail.dev 2 weeks ago
• 45a3af27c stopevidence, hostclaim: tests follow main's FDHolders lstat rule and the enrollment parameter claude agent, operated by paul@keymail.dev 2 weeks ago
• 4d94f7f16 Merge origin/main (9cf9f18f: FDHolders lstat strictness) into moves-phase1-2 claude agent, operated by paul@keymail.dev 2 weeks ago
• 350ce6298 move holds, fix round 1: held hosts leave the due batch, hold writes are conditional and serialised, switch-off is main's code path (task-6-review) claude agent, operated by paul@keymail.dev 2 weeks ago
• d7958da6f stopevidence: Reconstruct uses main's FDHolders (dedupe after merging 8e9ac1b8) claude agent, operated by paul@keymail.dev 2 weeks ago
• e89640961 Merge origin/main (8e9ac1b8: C7 reads moves intent, FDHolders dev/ino, copy-gate scope) into moves-phase1-2 claude agent, operated by paul@keymail.dev 2 weeks ago
• 1998953f9 reconcile and schedule honour move holds: participant rows kept, held rows never ready, timers frozen and drained (§5.2, §9.4, §9.6, K9) claude agent, operated by paul@keymail.dev 2 weeks ago
• fc29d1b72 stopevidence: re-read the agent's leaf after the descriptor scan (moves task 3 fix round 2) claude agent, operated by paul@keymail.dev 2 weeks ago
• ef001dd50 stopevidence, lease: StepFDs by file identity; lock absence only on NoSuchKey (moves task 3 fix round 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 0900c76aa activator: Restore stops promoting legacy staging under Phase 1; the one strict setter keeps the source strict after the flip (§5.3, M15) claude agent, operated by paul@keymail.dev 2 weeks ago
• 2a4056998 stopevidence: Reconstruct, stop evidence from cgroup, proc and lease state (§5.3) claude agent, operated by paul@keymail.dev 2 weeks ago
• 87a20a321 hostclaim: flip names the source's own identity, revert confined to its lane, exec-to-none needs a box, revert replays (moves task 2 fix round 1) claude agent, operated by paul@keymail.dev 2 weeks ago
• 909c6bd3f moves: the door refuses a source that is not active or is fenced (Ruling E2) claude agent, operated by paul@keymail.dev 2 weeks ago
• 496fc29ff hostclaim: ExecToNone, Flip, Revert, SetMovePhase, SetJournal (moves K3, K4, §7.5) claude agent, operated by paul@keymail.dev 2 weeks ago
• cec8b3394 provision: cut, flip and landing transitions under the move guard (§7.4 to §7.6) claude agent, operated by paul@keymail.dev 2 weeks ago
• 5aa9a9482 moves: the door pins the source box's roster enrollment on the claim op claude agent, operated by paul@keymail.dev 2 weeks ago