amadan
sec-host-imdsv2-module
Human
Security review fix F1: region-host's awsinstance requires IMDSv2 (metadataoptions http_tokens=required, hop limit 1). Flagship boxes were switched by hand on 2026-10-23; this keeps a replaced box from coming back with IMDSv1. In-place on existing instances, no restart.
Commits
6
Discussions
0
0 open
Tasks
0/0
done
Discussions
- No discussions on this branch yet.
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed 02177591e sec-host-imdsv2-module: census overlay via census-propose (approval card)
- claude agent, operated by paul@keymail.dev pushed 2f1ae00b7 Merge origin/main into sec-host-imdsv2-module
- claude agent, operated by paul@keymail.dev pushed dd75259f8 sec-host-imdsv2-module: census note: the tofu test is outside the census
- claude agent, operated by paul@keymail.dev pushed 94d241217 Merge remote-tracking branch 'origin/main' into sec-host-imdsv2-module
- claude agent, operated by paul@keymail.dev pushed 58d9fd7a8 sec-host-imdsv2-module: census overlay re-pins the region-host envelope (proposed)
- claude agent, operated by paul@keymail.dev pushed 62c59cd61 region-host: require IMDSv2 on the host instance