carlos / platform Public

Merge remote-tracking branch 'origin/main' into reserved-sqids-285

claude 1 week ago 2ea3249b0fb4707a477a4b766c96b29f172cda09 parent 29e6203parent 8b5c756

2 files changed, +390 −0

docs/site/changelog-links.json +24 −0
docs/site/changelog.json +366 −0

CI log

=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	352.485s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	3.105s
ok  	github.com/carlosframework/platform/cmd/moveprobe	93.347s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.718s
ok  	github.com/carlosframework/platform/internal/activator	234.512s
ok  	github.com/carlosframework/platform/internal/agentsock	0.017s
ok  	github.com/carlosframework/platform/internal/alerting	0.003s
ok  	github.com/carlosframework/platform/internal/analytics	0.020s
ok  	github.com/carlosframework/platform/internal/appconfig	2.355s
ok  	github.com/carlosframework/platform/internal/apperr	0.077s
ok  	github.com/carlosframework/platform/internal/applog	0.150s
ok  	github.com/carlosframework/platform/internal/awsinv	0.003s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.005s
ok  	github.com/carlosframework/platform/internal/boxid	0.592s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.008s
ok  	github.com/carlosframework/platform/internal/caps	0.012s
ok  	github.com/carlosframework/platform/internal/certwarm	0.002s
ok  	github.com/carlosframework/platform/internal/cgroup	0.721s
ok  	github.com/carlosframework/platform/internal/changelog	0.304s
ok  	github.com/carlosframework/platform/internal/clamd	0.054s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	365.215s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.372s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.009s
ok  	github.com/carlosframework/platform/internal/dbverify	0.005s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.005s
ok  	github.com/carlosframework/platform/internal/docsite	0.005s
ok  	github.com/carlosframework/platform/internal/domains	2.250s
ok  	github.com/carlosframework/platform/internal/doorkey	0.006s
ok  	github.com/carlosframework/platform/internal/economics	0.006s
ok  	github.com/carlosframework/platform/internal/edge	26.210s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.133s
ok  	github.com/carlosframework/platform/internal/gate	1.658s
ok  	github.com/carlosframework/platform/internal/genselect	0.015s
ok  	github.com/carlosframework/platform/internal/geo	0.016s
ok  	github.com/carlosframework/platform/internal/geoip	0.031s
ok  	github.com/carlosframework/platform/internal/host	129.435s
ok  	github.com/carlosframework/platform/internal/hostactors	0.337s
ok  	github.com/carlosframework/platform/internal/hostbox	2.260s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.524s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.007s
ok  	github.com/carlosframework/platform/internal/hostexec	4.801s
ok  	github.com/carlosframework/platform/internal/hostfence	0.031s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.407s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.013s
ok  	github.com/carlosframework/platform/internal/hostguard	1.014s
ok  	github.com/carlosframework/platform/internal/hostops	1.488s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.003s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.002s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.455s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.128s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.002s
ok  	github.com/carlosframework/platform/internal/infraview	0.002s
ok  	github.com/carlosframework/platform/internal/instancectl	1.814s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.701s
ok  	github.com/carlosframework/platform/internal/instancefs	0.006s
ok  	github.com/carlosframework/platform/internal/instancekey	0.002s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.006s
ok  	github.com/carlosframework/platform/internal/layout	1.435s
ok  	github.com/carlosframework/platform/internal/lease	9.441s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.005s
ok  	github.com/carlosframework/platform/internal/ledger	0.012s
ok  	github.com/carlosframework/platform/internal/mail	0.180s
ok  	github.com/carlosframework/platform/internal/maintenance	0.080s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.521s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.070s
ok  	github.com/carlosframework/platform/internal/metrics	0.005s
ok  	github.com/carlosframework/platform/internal/moves	21.226s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.781s
ok  	github.com/carlosframework/platform/internal/objstore	0.181s
ok  	github.com/carlosframework/platform/internal/ops	0.163s
ok  	github.com/carlosframework/platform/internal/park	0.194s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
ok  	github.com/carlosframework/platform/internal/provision	7.447s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.006s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	4.048s
ok  	github.com/carlosframework/platform/internal/relay	7.225s
ok  	github.com/carlosframework/platform/internal/release	19.059s
ok  	github.com/carlosframework/platform/internal/rollout	3.586s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.003s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.007s
ok  	github.com/carlosframework/platform/internal/rootstate	0.025s
ok  	github.com/carlosframework/platform/internal/s3compat	0.005s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.296s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	8.373s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.114s
ok  	github.com/carlosframework/platform/internal/status	0.039s
ok  	github.com/carlosframework/platform/internal/steering	0.006s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.180s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.003s
ok  	github.com/carlosframework/platform/internal/unixdial	0.003s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.004s
ok  	github.com/carlosframework/platform/internal/version	0.001s
ok  	github.com/carlosframework/platform/internal/vet	1.536s
=== cross ===
--- shard 0 of 5 ---
cross-compiling darwin/arm64
--- shard 1 of 5 ---
cross-compiling darwin/amd64
--- shard 2 of 5 ---
cross-compiling linux/arm64
--- shard 3 of 5 ---
cross-compiling windows/amd64
--- shard 4 of 5 ---
cross-compiling windows/arm64
=== minio-contract ===
minio contract: arm64, minio RELEASE.2025-09-07T16-13-09Z, mc RELEASE.2025-08-13T08-35-41Z
  minio: cached, digest verified
  mc: cached, digest verified
  minio healthy on 127.0.0.1:20999
Added `local` successfully.
Bucket created successfully `local/contract-bucket`.
Bucket created successfully `local/denied-bucket`.
Created policy `contract-only` successfully.
Added user `scopeduser` successfully.
Attached Policies: [contract-only]
To User: scopeduser
  buckets and scoped user ready
=== RUN   TestDeliveredContractMinio
=== RUN   TestDeliveredContractMinio/put
=== RUN   TestDeliveredContractMinio/get_round-trips_the_body
=== RUN   TestDeliveredContractMinio/list_shows_the_key
=== RUN   TestDeliveredContractMinio/head_and_list_agree_on_the_version
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed
=== RUN   TestDeliveredContractMinio/delete_removes_it
=== RUN   TestDeliveredContractMinio/cross-bucket_denial
--- PASS: TestDeliveredContractMinio (0.02s)
    --- PASS: TestDeliveredContractMinio/put (0.00s)
    --- PASS: TestDeliveredContractMinio/get_round-trips_the_body (0.00s)
    --- PASS: TestDeliveredContractMinio/list_shows_the_key (0.00s)
    --- PASS: TestDeliveredContractMinio/head_and_list_agree_on_the_version (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route (0.01s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed (0.00s)
    --- PASS: TestDeliveredContractMinio/delete_removes_it (0.00s)
    --- PASS: TestDeliveredContractMinio/cross-bucket_denial (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/objstore	0.022s
=== RUN   TestT4StorageProbeMinio
2026/10/14 14:57:18 moves: T4: STORE: list: operation error S3: ListObjectsV2, https response error StatusCode: 403, RequestID: 18DE6D4387B4A3DF, HostID: 7c420053e0fbcd7f41653fdd92ffa2802c903d05303b1aa15adc2e8bb65d183f, api error SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your key and signing method.
--- PASS: TestT4StorageProbeMinio (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/host	0.020s
minio contract: PASS

diff --git a/docs/site/changelog-links.json b/docs/site/changelog-links.json

index c74a15d3e..cfadf491c 100644

--- a/docs/site/changelog-links.json

+++ b/docs/site/changelog-links.json

@@ -1,5 +1,29 @@

{

"//": "For the changelog: each release-note bullet's bold lead, mapped to the branches behind it. Kept by hand, one release at a time, as step 10 of the release recipe in the README. go run ./cmd/changelog fails on a lead no bullet has, or a branch that did not land in that release.",

+ "v0.27.2": {

+ "Two builds at once keeps each build's socket name.": [

+ "zdd-gen-socket-names"

+ ],

+ "A long host name keeps stop-then-start updates.": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ "v0.27.1": {

+ "A box with many instances no longer fails its update while it starts.": [

+ "hotfix-startup-sweep-281"

+ ]

+ },

+ "v0.27.0": {

+ "Root keeps its own record of each box's releases.": [

+ "feat/claim-root-trusted-state"

+ ],

+ "`carlos __cgexec` can appear in `ps`.": [

+ "zdd-flag-readiness-3"

+ ],

+ "After the roll, check placement on each box.": [

+ "zdd-flag-readiness-3"

+ ]

+ },

"v0.26.0": {

"Two builds at once, off until your deployment turns it on.": [

"zdd-1-generations",

diff --git a/docs/site/changelog.json b/docs/site/changelog.json

index 8b0e6ad14..b3987ca74 100644

--- a/docs/site/changelog.json

+++ b/docs/site/changelog.json

@@ -2,6 +2,372 @@

"//": "Generated by go run ./cmd/changelog from git, the published release notes and Amadan. Do not edit; regenerate.",

"repo": "https://amadan.net/carlos/platform",

"releases": [

+ {

+ "tag": "v0.27.2",

+ "date": "2026-10-14",

+ "sha": "ebddcfc6f4c55a6239d07faa6b46d3773186327b",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.2",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**Two builds at once keeps each build's socket name.** Where a deployment turns on two builds at once, each build's socket now has the same file name it has with the switch off, in a directory of its own. An app that works out its own address from its socket's name now starts the same way either way. Before, such an app saw a different name for the new build and refused to start. Nothing changes where the switch is off, which is every deployment by default.",

+ "branches": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.26.x, read the [v0.27.0](https://github.com/carlosframework/releases/releases/tag/v0.27.0) and [v0.27.1](https://github.com/carlosframework/releases/releases/tag/v0.27.1) operator notes first.** They all still apply."

+ },

+ {

+ "md": "**A long host name keeps stop-then-start updates.** With two builds at once on, a host on a flat box whose name is longer than 59 bytes is updated the old way: stopped, then started on the new build. Its socket path would otherwise be too long.",

+ "branches": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ {

+ "md": "**Every dormant switch stays off.** Leave `CARLOS_SWAP`, `CARLOS_MOVES_PHASE1`, `CARLOS_HOST_CLAIM`, `CARLOS_HOST_CLAIM_ORIGINS`, `CARLOS_HOST_CLAIM_RETIRED_LOCATIONS`, `CARLOS_CONSOLE_ID`, `CARLOS_REGION_HA`, `CONSOLE_APP_REGIONS`, `CARLOS_TEMPORARY_APPS` and `CARLOS_REQUIRE_POINTER_DIGEST` unset, and don't run `carlos channels digests on`. With `CARLOS_HOST_CLAIM` set, instance control now refuses to start until a later release.",

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "ebddcfc6f4c55a6239d07faa6b46d3773186327b",

+ "date": "2026-10-14",

+ "subject": "zdd rev 19 amendment: generation sockets keep the flag-off file name",

+ "branch": "zdd-gen-socket-names",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-gen-socket-names",

+ "commits": 5,

+ "discussions": [

+ {

+ "id": 272,

+ "title": "Zero-downtime deploys: owed before CARLOS_SWAP can go on",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "d2f58fd330726e461b1022edfc9e4c4688696dd1",

+ "date": "2026-10-13",

+ "subject": "startup-largebox-test-281",

+ "branch": "startup-largebox-test-281",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/startup-largebox-test-281",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "21d91fd6087aa1ef7a21f35fc9188b263e3d0529",

+ "date": "2026-10-13",

+ "subject": "host: rootinventory_test.go is linux-only",

+ "branch": "fix-cross-test-compile",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/fix-cross-test-compile",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ {

+ "tag": "v0.27.1",

+ "date": "2026-10-13",

+ "sha": "6dfbff103985e1e81899f2e611b1afff0ddb3769",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.1",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**A box with many instances no longer fails its update while it starts.** On a box with over a hundred instances, v0.27.0's update could take longer than the 20 seconds it allows, because the edge waited for the agent to check every instance first. The box then rolled back after about 45 seconds of failed requests. The edge now starts serving straight away. Requests for an instance wait up to 30 seconds for that check to finish, then get the usual answer that the instance is waking.",

+ "branches": [

+ "hotfix-startup-sweep-281"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.26.x, read the [v0.27.0 operator notes](https://github.com/carlosframework/releases/releases/tag/v0.27.0) first.** They all still apply."

+ },

+ {

+ "md": "**After each box updates, check that it finished starting.** The update's 20-second check now passes once the edge serves, before the agent has checked every instance. So also check the box's journal for `agent: hibernation activator armed`, and that one request to a sleeping instance succeeds."

+ },

+ {

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "6dfbff103985e1e81899f2e611b1afff0ddb3769",

+ "date": "2026-10-13",

+ "subject": "hotfix #281: the edge no longer waits on the startup sweep and recovery",

+ "branch": "hotfix-startup-sweep-281",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/hotfix-startup-sweep-281",

+ "commits": 1,

+ "discussions": [

+ {

+ "id": 281,

+ "title": "Agent startup is not bounded under the 20s update gate: sweep and recovery still run before the edge listens",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell"

+ }

+ ]

+ }

+ ]

+ },

+ {

+ "tag": "v0.27.0",

+ "date": "2026-10-13",

+ "sha": "f4cf27dd0c48eac32d7b4beaec77686752ca6cff",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.0",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**Root keeps its own record of each box's releases.** A box's root process now keeps the builds it has seen run healthy, and the build each service ran before its current one, in directories only root can write. Before, it read them from places the platform's own service could write. Restarts, rollbacks and recovering from a bad build work exactly as they did.",

+ "branches": [

+ "feat/claim-root-trusted-state"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.25.x, read the [v0.26.0 operator notes](https://github.com/carlosframework/releases/releases/tag/v0.26.0) and the [v0.26.1 notes](https://github.com/carlosframework/releases/releases/tag/v0.26.1) first.** They all still apply."

+ },

+ {

+ "md": "**Before rolling, check two things on each box.** `/`, `/var` and `/var/lib` must be owned by root and not writable by group or others, and `/var/lib/carlos-claims` must not exist. If either check fails, root can't update a service that has its own unit, such as the console, on that box, and logs `repoint failed: permission denied` on every pass."

+ },

+ {

+ "md": "**Health history starts empty.** Root no longer reads the health history the service kept before this release. Don't add a `require` or `prove` entry for a service to `/etc/carlos/proof-policy.json` until both its current build and the one before it have been seen healthy since the roll. Otherwise rolling back to the earlier build waits for a proof."

+ },

+ {

+ "md": "**One earlier build per service is kept.** `/opt/carlos/previous/<host>` points at the build each service ran before its current one, and the box keeps that build when it prunes old versions. Disk use can grow by up to one build per service."

+ },

+ {

+ "md": "**`carlos __cgexec` can appear in `ps`.** Each new instance process now starts through a short-lived helper that places it in its cgroup before it runs. For a few milliseconds `ps` can show `carlos __cgexec` as a child of the agent. Monitoring, or a `pkill` that matches \"carlos\" in a command line, can catch it.",

+ "branches": [

+ "zdd-flag-readiness-3"

+ ]

+ },

+ {

+ "md": "**After the roll, check placement on each box.** `journalctl -u carlos-edge --since '<roll time>' | grep 'placement before exec failed'` should print nothing. A line there means a process was moved into its cgroup after it started instead. That affects resource accounting, not serving.",

+ "branches": [

+ "zdd-flag-readiness-3"

+ ]

+ },

+ {

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "f4cf27dd0c48eac32d7b4beaec77686752ca6cff",

+ "date": "2026-10-13",

+ "subject": "changelog: v0.26.1 (release step 10)",

+ "branch": "changelog-v0.26.1",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-v0.26.1",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "2e00b17e18f49cd391b2c6890f8abd68bbdeba23",

+ "date": "2026-10-13",

+ "subject": "plan: zdd flag readiness round 3 (draft)",

+ "branch": "zdd-flag-readiness-3",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-flag-readiness-3",

+ "commits": 23,

+ "discussions": [

+ {

+ "id": 272,

+ "title": "Zero-downtime deploys: owed before CARLOS_SWAP can go on",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "645a7d0541cc77bbf52523f88a901f720ceaf64a",

+ "date": "2026-10-13",

+ "subject": "claim Plan 14 Part 1 (#280): root-trusted state foundations, families B, C and D",

+ "branch": "feat/claim-root-trusted-state",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/feat%2Fclaim-root-trusted-state",

+ "commits": 1,

+ "discussions": [

+ {

+ "id": 280,

+ "title": "Root trusts service-writable hostguard and health records under /data (claim root paths)",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "codex"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "34a4328f7d29cfed7b5404cec39cef616e115a26",

+ "date": "2026-10-13",

+ "subject": "hotfix-instance-key-gate",

+ "branch": "hotfix-instance-key-gate",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/hotfix-instance-key-gate",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "ba52d5efe55a4a8a78acaa0af9d500e803aeb4c0",

+ "date": "2026-10-13",

+ "subject": "plan: zero-downtime flag readiness, round 2 (draft for Astra's review)",

+ "branch": "zdd-flag-readiness-2",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-flag-readiness-2",

+ "commits": 48,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "67698c9c016e1f34fbb4a337ebc833380d023937",

+ "date": "2026-10-13",

+ "subject": "changelog-nested-bullets",

+ "branch": "changelog-nested-bullets",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-nested-bullets",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "729e85080ff0891fc8c622367dc52a5d27823c8a",

+ "date": "2026-10-13",

+ "subject": "changelog-v0.26.0",

+ "branch": "changelog-v0.26.0",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-v0.26.0",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ }

+ ]

+ },

{

"tag": "v0.26.1",

"date": "2026-10-13",