carlos / platform Public

Merge origin/main (a4cd3003, claim Plan 6b) into feat/hostclaim-console: integrate the box assembly with Plan 5's app gate

Receipts carry both plans' fields, signed in full; Plan 5's enrolled
evidence key is wired into 6b's production construction (instance-control
only); 6b's wake-retry reset runs under a typed reset-wake-retry
registration and lifecycle grant, with census coverage. Report:
merge-5x6b-report.md.

Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

codex pushed by claude 2 weeks ago 348d213261618ae3a85de7d9cf335a70eb1b9850 parent 4cd936cparent a4cd300

152 files changed, +16501 −430

internal/activator/claim_isolation_test.go +64 −0
internal/activator/claimlaunchassembly_test.go +44 −0
internal/activator/claimproducer_test.go +61 −0
internal/activator/claimspawn.go +3 −23
internal/activator/claimspawn_kernel_linux_test.go +9 −7
internal/activator/claimspawn_test.go +3 −2
internal/activator/claimwake.go +74 −5
internal/activator/claimwindow_test.go +1 −1
internal/activator/rolelaunch.go +35 −0
internal/activator/rolelaunch_linux.go +156 −0
internal/activator/rolelaunch_order_linux_test.go +47 −0
internal/activator/rolelaunch_other.go +19 −0
internal/activator/servingretry.go +238 −0
internal/activator/servingretry_test.go +169 −0
internal/cgroup/cgroup.go +13 −3
internal/cgroup/cgroup_test.go +14 −0
internal/cgroup/role_intention_linux_test.go +124 −0
internal/cgroup/role_linux.go +25 −2
internal/cgroup/role_other.go +4 −0
internal/console/apihostclaim.go +12 −1
internal/console/claim_authority_census_test.go +1 −1
internal/console/claim_invariant_test.go +11 −0
internal/console/claim_invariant_wakereset_test.go +497 −0
internal/console/claim_runtime.go +5 −0
internal/console/hostwakereset.go +235 −0
internal/console/hostwakereset_test.go +156 −0
internal/console/server.go +5 −4
internal/console/testdata/claim-authority-sites.txt +3 −1
internal/host/agent.go +99 −45
internal/host/bootstrap.go +22 −1
internal/host/claim_evidence_wiring.go +19 −0
internal/host/claim_evidence_wiring_test.go +86 −0
internal/host/claim_isolation_test.go +80 −0
internal/host/claimadopt_order_test.go +140 −0
internal/host/claimassembly.go +295 −0
internal/host/claimassembly_test.go +46 −0
internal/host/claimcensus.go +152 −0
internal/host/claimcensus_test.go +465 −0
internal/host/claimconstruction.go +328 −0
internal/host/claimcontainment_test.go +24 −0
internal/host/claimhandover_recovery_test.go +212 −0
internal/host/claimhandover_transport.go +90 −0
internal/host/claimproducer_compaction_test.go +212 −0
internal/host/claimretire_transport.go +247 −0
internal/host/claimretire_transport_test.go +65 −0
internal/host/claimretirerecovery_test.go +284 −0
internal/host/claimretryrecovery_test.go +624 −0
internal/host/claimreview_test.go +204 −0
internal/host/claimroleassembly.go +48 −0
internal/host/claimroleassembly_linux.go +364 −0
internal/host/claimroleassembly_linux_test.go +69 −0
internal/host/claimroleassembly_other.go +29 −0
internal/host/claimstate_linux.go +145 −0
internal/host/claimstate_linux_test.go +71 −0
internal/host/claimstate_other.go +10 −0
internal/host/claimstop.go +127 −55
internal/host/claimstop_drain_test.go +34 −0
internal/host/claimstop_evidence_integration_test.go +109 −0
internal/host/claimstop_kernel_linux.go +528 −0
internal/host/claimstop_kernel_linux_test.go +126 −0
internal/host/claimstop_kernel_other.go +9 −0
internal/host/claimstop_producers.go +223 −0
internal/host/claimstop_producers_test.go +69 −0
internal/host/claimstop_production.go +71 −0
internal/host/claimstop_recovery.go +78 −0
internal/host/claimstop_run.go +59 −0
internal/host/claimstop_serving_test.go +63 −0
internal/host/claimstop_test.go +1 −1
internal/host/claimstop_transport.go +243 −0
internal/host/claimstop_transport_test.go +61 −0
internal/host/claimtimer.go +50 −0
internal/host/claimunit.go +128 −0
internal/host/claimunit_test.go +282 −0
internal/host/claimwakeassembly.go +608 −0
internal/host/claimwakeassembly_test.go +46 −0
internal/host/claimwakestop.go +314 −0
internal/host/claimwiring.go +15 −4
internal/host/registryowner_test.go +34 −16
internal/host/schedule_wiring.go +24 −0
internal/host/systemapply.go +26 −2
internal/host/systemunits.go +24 −2
internal/hostbox/admission_refusal_test.go +212 −0
internal/hostbox/cleanup_authority.go +15 −0
internal/hostbox/coldhandover.go +607 −0
internal/hostbox/coldhandover_test.go +162 −0
internal/hostbox/empty_census.go +290 −0
internal/hostbox/empty_census_classes_test.go +142 −0
internal/hostbox/empty_census_test.go +66 −0
internal/hostbox/hold.go +43 −0
internal/hostbox/identity.go +7 −2
internal/hostbox/identity_region_test.go +87 −0
internal/hostbox/intended_recovery_test.go +504 −0
internal/hostbox/journalpath.go +22 −0
internal/hostbox/journalpath_test.go +42 −0
internal/hostbox/launchjournal.go +266 −0
internal/hostbox/launchjournal_test.go +149 −0
internal/hostbox/reconcile_adapter.go +228 −0
internal/hostbox/reconcile_adapter_layout_test.go +85 −0
internal/hostbox/registryrows.go +56 −0
internal/hostbox/registryrows_test.go +67 −0
internal/hostbox/renewing.go +110 −0
internal/hostbox/renewing_test.go +72 −0
internal/hostbox/roleintention.go +39 −0
internal/hostbox/roleintention_linux.go +155 −0
internal/hostbox/roleintention_linux_test.go +107 −0
internal/hostbox/stopinventory.go +24 −0
internal/hostbox/stopinventory_db.go +74 −0
internal/hostbox/stopjournal.go +28 −0
internal/hostbox/stopjournal_producers.go +69 −0
internal/hostbox/stopjournal_reader.go +46 −0
internal/hostbox/typedpark_linux.go +36 −0
internal/hostbox/typedpark_other.go +2 −0
internal/hostbox/typedretire.go +36 −6
internal/hostevidence/signature.go +9 −1
internal/hostevidence/signature_test.go +38 −0
internal/hostguard/coldhandover.go +106 −0
internal/hostguard/coldhandover_test.go +51 −0
internal/hostguard/fence.go +27 −1
internal/hostguard/fence_test.go +3 −2
internal/hostguard/recoveryfence.go +70 −0
internal/hostops/control_writer.go +1 −1
internal/hostops/evidence.go +3 −0
internal/hostops/evidence_consumer_test.go +31 −1
internal/hostops/purge_control.go +1 −0
internal/hostops/wake_retry_reset.go +21 −0
internal/hostops/wake_retry_reset_test.go +101 −0
internal/instancectl/claim.go +18 −0
internal/instancectl/claim_test.go +24 −0
internal/instancectl/server.go +26 −7
internal/instanceexec/claim_isolation_linux_test.go +109 −0
internal/park/remote.go +5 −0
internal/provision/claimassembly.go +48 −0
internal/provision/claimassembly_test.go +611 −0
internal/provision/reconcile.go +195 −161
internal/provision/sidecar_reconcile.go +52 −25
internal/registry/claimfingerprint_test.go +99 −0
internal/registry/claimhold.go +29 −0
internal/registry/claimhold_test.go +48 −0
internal/registry/claimreview_test.go +167 −0
internal/registry/claimrows.go +219 −0
internal/registry/claimrows_test.go +118 −0
internal/registry/claimtimerownership_test.go +48 −0
internal/registry/claimtimers.go +29 −14
internal/registry/claimtransaction.go +74 −0
internal/registry/coldhandover.go +148 −0
internal/registry/registry.go +57 −9
internal/registry/timers.go +122 −10
internal/schedule/claimdelivery.go +26 −0
internal/schedule/claimdelivery_test.go +73 −0
internal/schedule/claimintegration_test.go +13 −0
internal/schedule/runner.go +22 −12
main.go +1 −2

CI passed — run details

internal/activator/claim_isolation_test.go

Loading diff…

internal/activator/claimlaunchassembly_test.go

Loading diff…

internal/activator/claimproducer_test.go

Loading diff…

internal/activator/claimspawn.go

Loading diff…

internal/activator/claimspawn_kernel_linux_test.go

Loading diff…

internal/activator/claimspawn_test.go

Loading diff…

internal/activator/claimwake.go

Loading diff…

internal/activator/claimwindow_test.go

Loading diff…

internal/activator/rolelaunch.go

Loading diff…

internal/activator/rolelaunch_linux.go

Loading diff…

internal/activator/rolelaunch_order_linux_test.go

Loading diff…

internal/activator/rolelaunch_other.go

Loading diff…

internal/activator/servingretry.go

Loading diff…

internal/activator/servingretry_test.go

Loading diff…

internal/cgroup/cgroup.go

Loading diff…

internal/cgroup/cgroup_test.go

Loading diff…

internal/cgroup/role_intention_linux_test.go

Loading diff…

internal/cgroup/role_linux.go

Loading diff…

internal/cgroup/role_other.go

Loading diff…

internal/console/apihostclaim.go

Loading diff…

internal/console/claim_authority_census_test.go

Loading diff…

internal/console/claim_invariant_test.go

Loading diff…

internal/console/claim_invariant_wakereset_test.go

Loading diff…

internal/console/claim_runtime.go

Loading diff…

internal/console/hostwakereset.go

Loading diff…

internal/console/hostwakereset_test.go

Loading diff…

internal/console/server.go

Loading diff…

internal/console/testdata/claim-authority-sites.txt

Loading diff…

internal/host/agent.go

Loading diff…

internal/host/bootstrap.go

Loading diff…

internal/host/claim_evidence_wiring.go

Loading diff…

internal/host/claim_evidence_wiring_test.go

Loading diff…

internal/host/claim_isolation_test.go

Loading diff…

internal/host/claimadopt_order_test.go

Loading diff…

internal/host/claimassembly.go

Loading diff…

internal/host/claimassembly_test.go

Loading diff…

internal/host/claimcensus.go

Loading diff…

internal/host/claimcensus_test.go

Loading diff…

internal/host/claimconstruction.go

Loading diff…

internal/host/claimcontainment_test.go

Loading diff…

internal/host/claimhandover_recovery_test.go

Loading diff…

internal/host/claimhandover_transport.go

Loading diff…

internal/host/claimproducer_compaction_test.go

Loading diff…

internal/host/claimretire_transport.go

Loading diff…

internal/host/claimretire_transport_test.go

Loading diff…

internal/host/claimretirerecovery_test.go

Loading diff…

internal/host/claimretryrecovery_test.go

Loading diff…

internal/host/claimreview_test.go

Loading diff…

internal/host/claimroleassembly.go

Loading diff…

internal/host/claimroleassembly_linux.go

Loading diff…

internal/host/claimroleassembly_linux_test.go

Loading diff…

internal/host/claimroleassembly_other.go

Loading diff…

internal/host/claimstate_linux.go

Loading diff…

internal/host/claimstate_linux_test.go

Loading diff…

internal/host/claimstate_other.go

Loading diff…

internal/host/claimstop.go

Loading diff…

internal/host/claimstop_drain_test.go

Loading diff…

internal/host/claimstop_evidence_integration_test.go

Loading diff…

internal/host/claimstop_kernel_linux.go

Loading diff…

internal/host/claimstop_kernel_linux_test.go

Loading diff…

internal/host/claimstop_kernel_other.go

Loading diff…

internal/host/claimstop_producers.go

Loading diff…

internal/host/claimstop_producers_test.go

Loading diff…

internal/host/claimstop_production.go

Loading diff…

internal/host/claimstop_recovery.go

Loading diff…

internal/host/claimstop_run.go

Loading diff…

internal/host/claimstop_serving_test.go

Loading diff…

internal/host/claimstop_test.go

Loading diff…

internal/host/claimstop_transport.go

Loading diff…

internal/host/claimstop_transport_test.go

Loading diff…

internal/host/claimtimer.go

Loading diff…

internal/host/claimunit.go

Loading diff…

internal/host/claimunit_test.go

Loading diff…

internal/host/claimwakeassembly.go

Loading diff…

internal/host/claimwakeassembly_test.go

Loading diff…

internal/host/claimwakestop.go

Loading diff…

internal/host/claimwiring.go

Loading diff…

internal/host/registryowner_test.go

Loading diff…

internal/host/schedule_wiring.go

Loading diff…

internal/host/systemapply.go

Loading diff…

internal/host/systemunits.go

Loading diff…

internal/hostbox/admission_refusal_test.go

Loading diff…

internal/hostbox/cleanup_authority.go

Loading diff…

internal/hostbox/coldhandover.go

Loading diff…

internal/hostbox/coldhandover_test.go

Loading diff…

internal/hostbox/empty_census.go

Loading diff…

internal/hostbox/empty_census_classes_test.go

Loading diff…

internal/hostbox/empty_census_test.go

Loading diff…

internal/hostbox/hold.go

Loading diff…

internal/hostbox/identity.go

Loading diff…

internal/hostbox/identity_region_test.go

Loading diff…

internal/hostbox/intended_recovery_test.go

Loading diff…

internal/hostbox/journalpath.go

Loading diff…

internal/hostbox/journalpath_test.go

Loading diff…

internal/hostbox/launchjournal.go

Loading diff…

internal/hostbox/launchjournal_test.go

Loading diff…

internal/hostbox/reconcile_adapter.go

Loading diff…

internal/hostbox/reconcile_adapter_layout_test.go

Loading diff…

internal/hostbox/registryrows.go

Loading diff…

internal/hostbox/registryrows_test.go

Loading diff…

internal/hostbox/renewing.go

Loading diff…

internal/hostbox/renewing_test.go

Loading diff…

internal/hostbox/roleintention.go

Loading diff…

internal/hostbox/roleintention_linux.go

Loading diff…

internal/hostbox/roleintention_linux_test.go

Loading diff…

internal/hostbox/stopinventory.go

Loading diff…

internal/hostbox/stopinventory_db.go

Loading diff…

internal/hostbox/stopjournal.go

Loading diff…

internal/hostbox/stopjournal_producers.go

Loading diff…

internal/hostbox/stopjournal_reader.go

Loading diff…

internal/hostbox/typedpark_linux.go

Loading diff…

internal/hostbox/typedpark_other.go

Loading diff…

internal/hostbox/typedretire.go

Loading diff…

internal/hostevidence/signature.go

Loading diff…

internal/hostevidence/signature_test.go

Loading diff…

internal/hostguard/coldhandover.go

Loading diff…

internal/hostguard/coldhandover_test.go

Loading diff…

internal/hostguard/fence.go

Loading diff…

internal/hostguard/fence_test.go

Loading diff…

internal/hostguard/recoveryfence.go

Loading diff…

internal/hostops/control_writer.go

Loading diff…

internal/hostops/evidence.go

Loading diff…

internal/hostops/evidence_consumer_test.go

Loading diff…

internal/hostops/purge_control.go

Loading diff…

internal/hostops/wake_retry_reset.go

Loading diff…

internal/hostops/wake_retry_reset_test.go

Loading diff…

internal/instancectl/claim.go

Loading diff…

internal/instancectl/claim_test.go

Loading diff…

internal/instancectl/server.go

Loading diff…

internal/instanceexec/claim_isolation_linux_test.go

Loading diff…

internal/park/remote.go

Loading diff…

internal/provision/claimassembly.go

Loading diff…

internal/provision/claimassembly_test.go

Loading diff…

internal/provision/reconcile.go

Loading diff…

internal/provision/sidecar_reconcile.go

Loading diff…

internal/registry/claimfingerprint_test.go

Loading diff…

internal/registry/claimhold.go

Loading diff…

internal/registry/claimhold_test.go

Loading diff…

internal/registry/claimreview_test.go

Loading diff…

internal/registry/claimrows.go

Loading diff…

internal/registry/claimrows_test.go

Loading diff…

internal/registry/claimtimerownership_test.go

Loading diff…

internal/registry/claimtimers.go

Loading diff…

internal/registry/claimtransaction.go

Loading diff…

internal/registry/coldhandover.go

Loading diff…

internal/registry/registry.go

Loading diff…

internal/registry/timers.go

Loading diff…

internal/schedule/claimdelivery.go

Loading diff…

internal/schedule/claimdelivery_test.go

Loading diff…

internal/schedule/claimintegration_test.go

Loading diff…

internal/schedule/runner.go

Loading diff…

main.go

Loading diff…