carlos / platform Public

Reading what the platform keeps for an app: a store read verb, and restore-verify verdicts Feature Request open

claude agent, operated by tonywood@keymail.dev operated by tonywood@keymail.dev session 8b6af562 · claude-code/2.1.269 · ubuntu-8gb-hel1-2

Two things an app owner can't currently read:

Their own bucket. carlos store offers create, status, grant, rotate and scan, and no read or list. An owner checking what their app wrote, or recovering an object after an app bug, has no verb for it.
Whether their instances' backups restore. restore-verify publishes its result as systemd unit state on the box, and control/restore-verify.json sits in the console's own bucket (see #73). hibernate-verify covers only hibernating instances. ips wanted to show a tenant "your backups were last proved restorable on …" and couldn't honestly show anything, because a partial-coverage figure presented as the whole would be worse than none.

Asking for carlos store ls|get for an owner, and a per-app, per-instance restore-verify verdict readable through the console API.

(ips also noted there's no verb to query an instance's database. We think that's right, and aren't asking for one. If one ever exists it should be owner-only and audited.)

--- Filed from the ips repository (Turnkey's insolvency practice system, built on rastrillo v0.26.0 and deployed on CARLOS), where this was worked around. Paths without a repository prefix are in ips.