Merge main into self-serve object storage
358 commits, and the one that matters here is virus scanning: EnsureUser now takes a DenyTag and storePolicyJSON writes an enforce Deny, which is exactly the change the scanning plan said "must land before the first member grant, not after it". It has. The first store this deployment ever provisions will be created under its final policy rather than migrated into one. Four conflicts were textual and additive — a usage line, a switch, two terraform blocks, a struct. One was not: regrantForScanning calls objstore.Grant, which grew a `source` parameter on this branch. Scanning's re-grant exists only to converge an app's inline policy, so it now carries the source from the record rather than restating "operator". Grant writes that block only when it is absent, so an account-approval store keeps its provenance either way today; the point is that toggling scan enforcement can never come to mean "an operator granted this" if that ever changes. The closed-door count is 26 + 4: scanning's system and antivirus doors plus this branch's four store-entitlement doors.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AuiZoEUxEooEfFBAs8XPLB
.amadan/ci.d/30-minio-contract+23 −8.gitignore+2 −0AGENTS.md+90 −0accounts_list_test.go+2 −2analytics_cmd.go+195 −0analytics_cmd_test.go+130 −0apimode.go+796 −50apimode_test.go+15 −9appconfig_cli.go+253 −24appconfig_restart_test.go+142 −0apps.go+13 −1apps_buildprobe.go+97 −0auth.go+10 −1canary.go+588 −0canary_test.go+266 −0cli.go+249 −19cmd/console/main.go+240 −13cmd/console/wiring_test.go+66 −0config.go+39 −0config_test.go+43 −3deploy.go+51 −9deploy_e2e_test.go+16 −2deploy_test.go+47 −6docs/site/cli.md+506 −21docs/superpowers/plans/2026-09-01-carloku-scanning-rollout.md+249 −0docs/superpowers/plans/2026-09-01-object-storage-virus-scanning.md+1680 −0docs/superpowers/plans/2026-09-02-scan-on-demand.md+558 −0docs/superpowers/plans/2026-09-03-path-based-routing.md+1929 −0docs/superpowers/plans/2026-09-04-carlos-canary.md+108 −0docs/superpowers/plans/2026-09-04-scanning-to-deployable.md+425 −0docs/superpowers/plans/2026-09-06-carlos-system-update-pinfra.md+17 −0docs/superpowers/plans/2026-09-06-carlos-system-update.md+5934 −0docs/superpowers/plans/2026-09-07-analytics-step2-edge-counting.md+2224 −0docs/superpowers/plans/2026-09-07-errors-step1-log-and-edge.md+3287 −0docs/superpowers/plans/2026-09-07-password-gate.md+2130 −0docs/superpowers/plans/2026-09-07-relay-stun-turn.md+2048 −0docs/superpowers/specs/2026-09-01-object-storage-virus-scanning-design.md+696 −0docs/superpowers/specs/2026-09-02-path-based-routing-design.md+610 −0docs/superpowers/specs/2026-09-02-scan-on-demand-design.md+1005 −0docs/superpowers/specs/2026-09-06-carlos-system-update-design.md+946 −0docs/superpowers/specs/2026-09-07-errors-and-analytics-design.md+843 −0docs/superpowers/specs/2026-09-07-media-platform-roadmap-design.md+1000 −0docs/superpowers/specs/2026-09-07-password-gate-design.md+445 −0docs/superpowers/specs/2026-09-07-relay-stun-turn-design.md+725 −0docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R2.md+169 −0docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R3.md+106 −0docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R4.md+96 −0docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R5.md+36 −0docs/superpowers/specs/CODEX-FINDINGS-MEDIA.md+196 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY-R2.md+205 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY-R3.md+156 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY-R4.md+61 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY-R5.md+31 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY-R6.md+15 −0docs/superpowers/specs/CODEX-FINDINGS-RELAY.md+237 −0docs/superpowers/specs/CODEX-REVIEW-BRIEF-MEDIA.md+96 −0docs/superpowers/specs/CODEX-REVIEW-BRIEF-RELAY.md+69 −0domains_cli.go+69 −1domains_cli_test.go+95 −0errors_cmd.go+146 −0errors_cmd_test.go+25 −0features_cli.go+6 −1gate_cli.go+232 −0gate_cli_test.go+273 −0go.mod+10 −2go.sum+18 −2implementation/always-awake-consumers.json+682 −0implementation/always-awake-exec.md+224 −0implementation/maintenance-checker-launch.md+54 −0implementation/maintenance-checker-launch.schema.json+154 −0implementation/maintenance-exec.md+113 −0implementation/maintenance-launch.md+49 −0implementation/maintenance-protocol/proposal.json+348 −0implementation/maintenance-protocol/schemas.json+1214 −0implementation/runtime-contract-signing.md+76 −0infra/modules/README.md+133 −9infra/modules/region-host/README.md+113 −0infra/modules/region-host/main.tf+127 −2infra/modules/region-host/outputs.tf+5 −0infra/modules/region-host/variables.tf+80 −1instances_cli.go+114 −9instances_cli_test.go+20 −0instances_environment_test.go+98 −0internal/activator/activator.go+226 −40internal/activator/admission_ordering_test.go+70 −0internal/activator/maintenance.go+188 −0internal/activator/maintenance_test.go+618 −0internal/activator/scheduled_token.go+36 −0internal/activator/scheduled_token_test.go+96 −0internal/activator/waketiming_test.go+74 −0internal/analytics/bots.go+32 −0internal/analytics/bots_test.go+27 −0internal/analytics/day.go+174 −0internal/analytics/day_test.go+94 −0internal/analytics/hll.go+116 −0internal/analytics/hll_test.go+71 −0internal/analytics/meter.go+265 −0internal/analytics/meter_test.go+239 −0internal/analytics/read.go+127 −0internal/analytics/read_test.go+46 −0internal/analytics/salt.go+98 −0internal/analytics/salt_test.go+64 −0internal/analytics/topk.go+106 −0internal/analytics/topk_test.go+57 −0internal/appconfig/appconfig.go+1 −1internal/appconfig/awaitingrestart_test.go+263 −0internal/appconfig/configack.go+173 −0internal/appconfig/configack_test.go+229 −0internal/appconfig/crypto.go+31 −0internal/appconfig/crypto_test.go+58 −5internal/appconfig/sync.go+49 −8internal/appconfig/sync_test.go+28 −28internal/appconfig/syncexec.go+335 −53internal/appconfig/syncexec_test.go+182 −42internal/apperr/fingerprint.go+76 −0internal/apperr/fingerprint_test.go+62 −0internal/apperr/group.go+80 −0internal/apperr/group_test.go+33 −0internal/apperr/read.go+122 −0internal/apperr/read_test.go+87 −0internal/apperr/record.go+77 −0internal/apperr/sanitize.go+130 −0internal/apperr/sanitize_test.go+53 −0internal/apperr/sink.go+158 −0internal/apperr/sink_test.go+172 −0internal/applog/chunk.go+57 −16internal/applog/chunk_test.go+58 −0internal/applog/read.go+35 −19internal/applog/read_test.go+29 −0internal/awsinv/ec2.go+19 −0internal/cgroup/strict.go+10 −0internal/cgroup/strict_kernel_linux_test.go+343 −0internal/cgroup/strict_linux.go+356 −0internal/cgroup/strict_linux_test.go+246 −0internal/cgroup/strict_other.go+17 −0internal/clamd/clamd.go+296 −0internal/clamd/clamd_test.go+308 −0internal/console/accountreview.go+99 −0internal/console/accountreview_test.go+283 −0internal/console/activity.go+45 −0internal/console/activity_test.go+111 −0internal/console/analyticsview.go+409 −0internal/console/apianalytics.go+94 −0internal/console/apianalytics_test.go+184 −0internal/console/apibuildprobe.go+77 −0internal/console/apibuildprobe_test.go+88 −0internal/console/apicli.go+55 −13internal/console/apiconfig.go+94 −3internal/console/apiconfigrestart_test.go+208 −0internal/console/apidomainpaths_test.go+348 −0internal/console/apidomains.go+179 −11internal/console/apidomains_test.go+40 −1internal/console/apierrors.go+155 −0internal/console/apierrors_test.go+242 −0internal/console/apifeatures.go+11 −3internal/console/apifeatures_test.go+11 −7internal/console/apiinstancemove.go+37 −4internal/console/apiinstancemove_test.go+6 −3internal/console/apiinstances.go+160 −26internal/console/apiinstances_test.go+153 −6internal/console/apiinstancesenvironment_test.go+196 −0internal/console/apilogs_test.go+169 −0internal/console/apiregions.go+3 −1internal/console/apirelay.go+747 −0internal/console/apirelay_test.go+743 −0internal/console/apirestartscope.go+405 −0internal/console/apirestartscope_test.go+453 −0internal/console/apiroutes.go+63 −1internal/console/apiroutes_test.go+113 −1internal/console/apiscan.go+633 −0internal/console/apiscan_test.go+549 −0internal/console/apiservices.go+6 −0internal/console/apiservices_test.go+35 −0internal/console/apistatusinstances.go+162 −0internal/console/apistatusinstances_test.go+198 −0internal/console/apistore.go+8 −0internal/console/apisystem.go+194 −0internal/console/apisystem_test.go+165 −0internal/console/apisystemupdate.go+739 −0internal/console/apisystemupdate_test.go+492 −0internal/console/appdomains.go+8 −3internal/console/appdomains_test.go+4 −4internal/console/appsettings.go+216 −47internal/console/appsettings_gate_test.go+132 −0internal/console/appsettings_sections_test.go+120 −0internal/console/appsettings_test.go+33 −29internal/console/archestate.go+248 −0internal/console/archestate_test.go+285 −0internal/console/archfits_test.go+108 −0internal/console/archgraph.go+288 −44internal/console/archgraph_test.go+125 −37internal/console/archlayout.go+150 −80internal/console/archlayout_test.go+118 −56internal/console/archlegibility_test.go+112 −17internal/console/archpage.go+6 −1internal/console/archpage_test.go+48 −0internal/console/archregion.go+179 −0internal/console/archregion_test.go+343 −0internal/console/authcli.go+148 −1internal/console/browserrestart.go+148 −0internal/console/browserrestart_test.go+88 −0internal/console/channelmove.go+5 −5internal/console/confirm.go+2 −2internal/console/controlplane.go+3 −4internal/console/controlplane_test.go+107 −12internal/console/deletion_test.go+1 −1internal/console/deployments.go+92 −0internal/console/deployments_test.go+83 −0internal/console/deploymentstatus.go+70 −0internal/console/deploymentstatus_test.go+49 −0internal/console/domainattach.go+17 −4internal/console/economicspage_test.go+2 −2internal/console/economicspass.go+16 −3internal/console/errorsview.go+301 −0internal/console/icons.go+2 −0internal/console/instancecopy.go+28 −0internal/console/instancepage.go+164 −0internal/console/instancepage_test.go+221 −0internal/console/instancesplacement.go+130 −20internal/console/instancesplacement_test.go+103 −0internal/console/listquery.go+58 −17internal/console/listquery_test.go+27 −0internal/console/logsview_test.go+31 −0internal/console/metricsview.go+9 −6internal/console/mismatchcopy.go+23 −0internal/console/overview.go+30 −56internal/console/overview_test.go+98 −63internal/console/ownership.go+16 −1internal/console/pendinghandlers.go+4 −4internal/console/pipelinepage.go+7 −2internal/console/pipelinepage_test.go+4 −4internal/console/placementdoors_test.go+137 −0internal/console/relayops.go+1527 −0internal/console/relayops_test.go+711 −0internal/console/releasesummary.go+12 −27internal/console/releasesummary_test.go+10 −11internal/console/scanpass.go+290 −0internal/console/scanpass_test.go+508 −0internal/console/server.go+610 −59internal/console/server_account_test.go+5 −8internal/console/server_test.go+50 −16internal/console/statuscopy.go+40 −0internal/console/statuscopy_test.go+70 −0internal/console/store.go+32 −9internal/console/store_test.go+25 −0internal/console/svcpage.go+22 −0internal/console/svcpage_test.go+26 −0internal/console/svcprincipal.go+19 −0internal/console/svcroutes_test.go+83 −6internal/console/templates/account_review.html+24 −0internal/console/templates/account_settings.html+44 −0internal/console/templates/app_activity.html+6 −3internal/console/templates/app_analytics.html+46 −0internal/console/templates/app_deployments.html+35 −0internal/console/templates/app_errors.html+80 −0internal/console/templates/app_instance.html+27 −0internal/console/templates/app_instances.html+39 −19internal/console/templates/app_logs.html+160 −13internal/console/templates/app_overview.html+16 −34internal/console/templates/app_releases.html+18 −29internal/console/templates/app_settings.html+129 −8internal/console/templates/appnav.html+10 −2internal/console/templates/apps.html+2 −2internal/console/templates/architecture.html+78 −13internal/console/templates/economics_accounts.html+1 −2internal/console/templates/layout.html+58 −3internal/console/templates/pipeline.html+7 −0internal/console/view.go+18 −66internal/console/view_test.go+6 −12internal/controlname/names.go+28 −0internal/domains/aliases.go+158 −14internal/domains/aliases_paths_test.go+269 −0internal/domains/claimcache_test.go+2 −1internal/domains/claims.go+145 −0internal/domains/claims_test.go+3 −2internal/domains/paths_test.go+254 −0internal/edge/analytics.go+127 −0internal/edge/analytics_test.go+111 −0internal/edge/answered.go+37 −0internal/edge/answered_test.go+19 −0internal/edge/edge.go+458 −24internal/edge/edgeerrors_test.go+172 −0internal/edge/gate_test.go+508 −0internal/edge/noactivator_test.go+97 −0internal/edge/path_e2e_test.go+117 −0internal/edge/path_test.go+471 −0internal/edge/purge_header.go+55 −2internal/edge/purge_path_test.go+156 −0internal/edge/storedoor.go+55 −21internal/edge/storedoor_test.go+30 −2internal/edge/usagemeter.go+34 −5internal/edge/usagemeter_test.go+26 −0internal/fleetapi/fleetapi.go+26 −0internal/fleetapi/fleetapi_test.go+27 −0internal/gate/cookie.go+61 −0internal/gate/gate.go+259 −0internal/gate/gate_test.go+399 −0internal/gate/limiter.go+64 −0internal/gate/login.html+55 −0internal/gate/page.go+41 −0internal/host/adoptlock.go+66 −0internal/host/agent.go+175 −12internal/host/bootstrap.go+183 −16internal/host/edgesfile.go+56 −7internal/host/edgesfile_test.go+62 −11internal/host/errship.go+109 −0internal/host/errship_test.go+37 −0internal/host/fileowner_other.go+10 −0internal/host/fileowner_unix.go+20 −0internal/host/host_test.go+166 −3internal/host/logship.go+7 −22internal/host/logship_test.go+2 −9internal/host/metrics_loop.go+7 −0internal/host/probes.go+14 −0internal/host/registryowner.go+237 −0internal/host/registryowner_test.go+368 −0internal/host/restart.go+168 −33internal/host/restart_test.go+34 −13internal/host/restartscope.go+289 −0internal/host/restartscope_test.go+577 −0internal/host/schedule_token_fence_test.go+102 −0internal/host/schedule_wake_test.go+2 −2internal/host/schedule_wiring.go+11 −3internal/host/schedule_wiring_test.go+3 −3internal/host/systemapply.go+1086 −0internal/host/systemapply_other.go+20 −0internal/host/systemapply_test.go+1255 −0internal/host/systemapply_unix.go+55 −0internal/host/systemapply_unix_test.go+63 −0internal/host/systemleg.go+305 −0internal/host/systemleg_test.go+365 −0internal/host/systemprobe.go+48 −0internal/host/systemprobe_test.go+83 −0internal/host/systemstate.go+253 −0internal/host/systemstate_test.go+131 −0internal/host/systemunits.go+138 −0internal/host/systemunits_test.go+203 −0internal/host/telemetry_pass.go+69 −0internal/host/telemetry_pass_test.go+38 −0internal/host/units/carlos-relay.service+50 −0internal/host/units/carlos-system-recover.service+36 −0internal/host/units/carlos-system-update.path+13 −0internal/host/units/carlos-system-update.service+42 −0internal/host/usage_loop.go+31 −6internal/host/usage_loop_test.go+31 −3internal/host/versionsweep.go+94 −0internal/host/versionsweep_test.go+187 −0internal/lease/checkpoint.go+56 −0internal/lease/checkpoint_test.go+691 −0internal/lease/health.go+170 −0internal/lease/lease.go+129 −104internal/maintenance/envelope.go+196 −0internal/maintenance/envelope_test.go+235 −0internal/maintenance/input.go+127 −0internal/maintenance/input_test.go+118 −0internal/maintenance/result.go+90 −0internal/maintenance/result_test.go+195 −0internal/maintenance/testdata/envelope-vector.json+19 −0internal/maintenance/testdata/generate-vector.mjs+18 −0internal/maintenanceguard/guard.go+174 −0internal/maintenanceguard/guard_test.go+337 −0internal/maintenanceguard/json.go+106 −0internal/maintenanceguard/lifecycle.go+213 −0internal/maintenanceguard/store.go+89 −0internal/maintenanceguard/types.go+241 −0internal/maintenanceguard/wire_test.go+282 −0internal/objstore/aws.go+93 −5internal/objstore/aws_test.go+21 −8internal/objstore/clamav.go+568 −0internal/objstore/clamav_test.go+1251 −0internal/objstore/contract_test.go+465 −0internal/objstore/enforce_test.go+237 −0internal/objstore/memprovisioner.go+24 −2internal/objstore/memprovisioner_test.go+1 −1internal/objstore/memscanner.go+252 −0internal/objstore/objstore.go+48 −0internal/objstore/provisioner.go+5 −1internal/objstore/queue.go+550 −0internal/objstore/queue_test.go+897 −0internal/objstore/scanblock_test.go+153 −0internal/objstore/scanner.go+144 −0internal/objstore/scanner_contract_test.go+141 −0internal/objstore/scanresult.go+221 −0internal/objstore/scanresult_test.go+216 −0internal/objstore/scantag.go+163 −0internal/objstore/scantag_test.go+262 −0internal/objstore/sidecar.go+137 −0internal/objstore/sidecar_test.go+125 −0internal/objstore/sweep.go+421 −0internal/objstore/sweep_test.go+568 −0internal/objstore/teardown_scan_test.go+127 −0internal/objstore/walk.go+55 −7internal/objstore/walk_test.go+14 −14internal/privatefile/io_linux.go+114 −0internal/privatefile/io_linux_test.go+207 −0internal/privatefile/io_other.go+6 −0internal/privatefile/privatefile.go+25 −0internal/provision/maintenance.go+94 −0internal/provision/maintenance_test.go+233 −0internal/provision/provision.go+59 −31internal/provision/provision_test.go+11 −0internal/provision/reconcile.go+68 −6internal/provision/reconcile_test.go+112 −0internal/publicrelease/feed.go+130 −0internal/publicrelease/feed_test.go+87 −0internal/registry/paths_test.go+132 −0internal/registry/registry.go+324 −27internal/registry/registry_test.go+77 −0internal/registry/replication_test.go+219 −0internal/relay/authority.go+123 −0internal/relay/authority_test.go+70 −0internal/relay/config.go+71 −0internal/relay/config_appconfig_test.go+34 −0internal/relay/config_test.go+44 −0internal/relay/conn.go+110 −0internal/relay/conn_test.go+123 −0internal/relay/keys.go+94 −0internal/relay/keys_test.go+18 −0internal/relay/limits.go+241 −0internal/relay/limits_test.go+94 −0internal/relay/masters.go+118 −0internal/relay/masters_test.go+102 −0internal/relay/memstore_test.go+15 −0internal/relay/meter.go+224 −0internal/relay/meter_test.go+238 −0internal/relay/record.go+108 −0internal/relay/record_test.go+36 −0internal/relay/serve.go+478 −0internal/relay/serve_test.go+427 −0internal/relay/server.go+1140 −0internal/relay/server_test.go+659 −0internal/relay/vector_test.go+22 −0internal/release/adopt.go+11 −4internal/release/conditional_delete.go+103 −0internal/release/conditional_delete_test.go+187 −0internal/release/fetch.go+70 −0internal/release/fetch_test.go+105 −0internal/release/pagelister_test.go+199 −0internal/release/qualified.go+3 −10internal/release/release.go+2 −6internal/release/restartscope.go+314 −0internal/release/restartscope_test.go+301 −0internal/release/stage_blocked_test.go+72 −0internal/release/store.go+149 −0internal/release/sweep.go+201 −0internal/release/sweep_test.go+256 −0internal/release/system.go+95 −0internal/release/system_test.go+100 −0internal/release/systempointer.go+315 −0internal/release/systempointer_test.go+212 −0internal/status/dryrun.go+45 −8internal/status/dryrun_internal_test.go+27 −0internal/status/snapshot.go+29 −6internal/status/snapshot_test.go+50 −0internal/svcrole/service_role_test.go+51 −0internal/svcrole/svcrole.go+13 −2internal/telemetry/telemetry.go+139 −0internal/telemetry/telemetry_test.go+47 −0mail_cli.go+1 −1main.go+24 −2mutation_message.go+70 −0mutation_message_test.go+234 −0relay.go+453 −0relay_test.go+351 −0restart.go+162 −7restart_test.go+182 −0route_replication_test.go+333 −0routes_cli.go+51 −4routes_cli_test.go+118 −3scan.go+361 −0scan_test.go+198 −0services.go+3 −3status_instances.go+161 −0status_instances_test.go+43 −0store.go+46 −3store_test.go+1 −1storescan_test.go+94 −0system.go+568 −0system_test.go+247 −0update.go+15 −68
CI passed — run details
.amadan/ci.d/30-minio-contractLoading diff…
.gitignoreLoading diff…
AGENTS.mdLoading diff…
accounts_list_test.goLoading diff…
analytics_cmd.goLoading diff…
analytics_cmd_test.goLoading diff…
apimode.goLoading diff…
apimode_test.goLoading diff…
appconfig_cli.goLoading diff…
appconfig_restart_test.goLoading diff…
apps.goLoading diff…
apps_buildprobe.goLoading diff…
auth.goLoading diff…
canary.goLoading diff…
canary_test.goLoading diff…
cli.goLoading diff…
cmd/console/main.goLoading diff…
cmd/console/wiring_test.goLoading diff…
config.goLoading diff…
config_test.goLoading diff…
deploy.goLoading diff…
deploy_e2e_test.goLoading diff…
deploy_test.goLoading diff…
docs/site/cli.mdLoading diff…
docs/superpowers/plans/2026-09-01-carloku-scanning-rollout.mdLoading diff…
docs/superpowers/plans/2026-09-01-object-storage-virus-scanning.mdLoading diff…
docs/superpowers/plans/2026-09-02-scan-on-demand.mdLoading diff…
docs/superpowers/plans/2026-09-03-path-based-routing.mdLoading diff…
docs/superpowers/plans/2026-09-04-carlos-canary.mdLoading diff…
docs/superpowers/plans/2026-09-04-scanning-to-deployable.mdLoading diff…
docs/superpowers/plans/2026-09-06-carlos-system-update-pinfra.mdLoading diff…
docs/superpowers/plans/2026-09-06-carlos-system-update.mdLoading diff…
docs/superpowers/plans/2026-09-07-analytics-step2-edge-counting.mdLoading diff…
docs/superpowers/plans/2026-09-07-errors-step1-log-and-edge.mdLoading diff…
docs/superpowers/plans/2026-09-07-password-gate.mdLoading diff…
docs/superpowers/plans/2026-09-07-relay-stun-turn.mdLoading diff…
docs/superpowers/specs/2026-09-01-object-storage-virus-scanning-design.mdLoading diff…
docs/superpowers/specs/2026-09-02-path-based-routing-design.mdLoading diff…
docs/superpowers/specs/2026-09-02-scan-on-demand-design.mdLoading diff…
docs/superpowers/specs/2026-09-06-carlos-system-update-design.mdLoading diff…
docs/superpowers/specs/2026-09-07-errors-and-analytics-design.mdLoading diff…
docs/superpowers/specs/2026-09-07-media-platform-roadmap-design.mdLoading diff…
docs/superpowers/specs/2026-09-07-password-gate-design.mdLoading diff…
docs/superpowers/specs/2026-09-07-relay-stun-turn-design.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R2.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R3.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R4.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-MEDIA-R5.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-MEDIA.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY-R2.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY-R3.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY-R4.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY-R5.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY-R6.mdLoading diff…
docs/superpowers/specs/CODEX-FINDINGS-RELAY.mdLoading diff…
docs/superpowers/specs/CODEX-REVIEW-BRIEF-MEDIA.mdLoading diff…
docs/superpowers/specs/CODEX-REVIEW-BRIEF-RELAY.mdLoading diff…
domains_cli.goLoading diff…
domains_cli_test.goLoading diff…
errors_cmd.goLoading diff…
errors_cmd_test.goLoading diff…
features_cli.goLoading diff…
gate_cli.goLoading diff…
gate_cli_test.goLoading diff…
go.modLoading diff…
go.sumLoading diff…
implementation/always-awake-consumers.jsonLoading diff…
implementation/always-awake-exec.mdLoading diff…
implementation/maintenance-checker-launch.mdLoading diff…
implementation/maintenance-checker-launch.schema.jsonLoading diff…
implementation/maintenance-exec.mdLoading diff…
implementation/maintenance-launch.mdLoading diff…
implementation/maintenance-protocol/proposal.jsonLoading diff…
implementation/maintenance-protocol/schemas.jsonLoading diff…
implementation/runtime-contract-signing.mdLoading diff…
infra/modules/README.mdLoading diff…
infra/modules/region-host/README.mdLoading diff…
infra/modules/region-host/main.tfLoading diff…
infra/modules/region-host/outputs.tfLoading diff…
infra/modules/region-host/variables.tfLoading diff…
instances_cli.goLoading diff…
instances_cli_test.goLoading diff…
instances_environment_test.goLoading diff…
internal/activator/activator.goLoading diff…
internal/activator/admission_ordering_test.goLoading diff…
internal/activator/maintenance.goLoading diff…
internal/activator/maintenance_test.goLoading diff…
internal/activator/scheduled_token.goLoading diff…
internal/activator/scheduled_token_test.goLoading diff…
internal/activator/waketiming_test.goLoading diff…
internal/analytics/bots.goLoading diff…
internal/analytics/bots_test.goLoading diff…
internal/analytics/day.goLoading diff…
internal/analytics/day_test.goLoading diff…
internal/analytics/hll.goLoading diff…
internal/analytics/hll_test.goLoading diff…
internal/analytics/meter.goLoading diff…
internal/analytics/meter_test.goLoading diff…
internal/analytics/read.goLoading diff…
internal/analytics/read_test.goLoading diff…
internal/analytics/salt.goLoading diff…
internal/analytics/salt_test.goLoading diff…
internal/analytics/topk.goLoading diff…
internal/analytics/topk_test.goLoading diff…
internal/appconfig/appconfig.goLoading diff…
internal/appconfig/awaitingrestart_test.goLoading diff…
internal/appconfig/configack.goLoading diff…
internal/appconfig/configack_test.goLoading diff…
internal/appconfig/crypto.goLoading diff…
internal/appconfig/crypto_test.goLoading diff…
internal/appconfig/sync.goLoading diff…
internal/appconfig/sync_test.goLoading diff…
internal/appconfig/syncexec.goLoading diff…
internal/appconfig/syncexec_test.goLoading diff…
internal/apperr/fingerprint.goLoading diff…
internal/apperr/fingerprint_test.goLoading diff…
internal/apperr/group.goLoading diff…
internal/apperr/group_test.goLoading diff…
internal/apperr/read.goLoading diff…
internal/apperr/read_test.goLoading diff…
internal/apperr/record.goLoading diff…
internal/apperr/sanitize.goLoading diff…
internal/apperr/sanitize_test.goLoading diff…
internal/apperr/sink.goLoading diff…
internal/apperr/sink_test.goLoading diff…
internal/applog/chunk.goLoading diff…
internal/applog/chunk_test.goLoading diff…
internal/applog/read.goLoading diff…
internal/applog/read_test.goLoading diff…
internal/awsinv/ec2.goLoading diff…
internal/cgroup/strict.goLoading diff…
internal/cgroup/strict_kernel_linux_test.goLoading diff…
internal/cgroup/strict_linux.goLoading diff…
internal/cgroup/strict_linux_test.goLoading diff…
internal/cgroup/strict_other.goLoading diff…
internal/clamd/clamd.goLoading diff…
internal/clamd/clamd_test.goLoading diff…
internal/console/accountreview.goLoading diff…
internal/console/accountreview_test.goLoading diff…
internal/console/activity.goLoading diff…
internal/console/activity_test.goLoading diff…
internal/console/analyticsview.goLoading diff…
internal/console/apianalytics.goLoading diff…
internal/console/apianalytics_test.goLoading diff…
internal/console/apibuildprobe.goLoading diff…
internal/console/apibuildprobe_test.goLoading diff…
internal/console/apicli.goLoading diff…
internal/console/apiconfig.goLoading diff…
internal/console/apiconfigrestart_test.goLoading diff…
internal/console/apidomainpaths_test.goLoading diff…
internal/console/apidomains.goLoading diff…
internal/console/apidomains_test.goLoading diff…
internal/console/apierrors.goLoading diff…
internal/console/apierrors_test.goLoading diff…
internal/console/apifeatures.goLoading diff…
internal/console/apifeatures_test.goLoading diff…
internal/console/apiinstancemove.goLoading diff…
internal/console/apiinstancemove_test.goLoading diff…
internal/console/apiinstances.goLoading diff…
internal/console/apiinstances_test.goLoading diff…
internal/console/apiinstancesenvironment_test.goLoading diff…
internal/console/apilogs_test.goLoading diff…
internal/console/apiregions.goLoading diff…
internal/console/apirelay.goLoading diff…
internal/console/apirelay_test.goLoading diff…
internal/console/apirestartscope.goLoading diff…
internal/console/apirestartscope_test.goLoading diff…
internal/console/apiroutes.goLoading diff…
internal/console/apiroutes_test.goLoading diff…
internal/console/apiscan.goLoading diff…
internal/console/apiscan_test.goLoading diff…
internal/console/apiservices.goLoading diff…
internal/console/apiservices_test.goLoading diff…
internal/console/apistatusinstances.goLoading diff…
internal/console/apistatusinstances_test.goLoading diff…
internal/console/apistore.goLoading diff…
internal/console/apisystem.goLoading diff…
internal/console/apisystem_test.goLoading diff…
internal/console/apisystemupdate.goLoading diff…
internal/console/apisystemupdate_test.goLoading diff…
internal/console/appdomains.goLoading diff…
internal/console/appdomains_test.goLoading diff…
internal/console/appsettings.goLoading diff…
internal/console/appsettings_gate_test.goLoading diff…
internal/console/appsettings_sections_test.goLoading diff…
internal/console/appsettings_test.goLoading diff…
internal/console/archestate.goLoading diff…
internal/console/archestate_test.goLoading diff…
internal/console/archfits_test.goLoading diff…
internal/console/archgraph.goLoading diff…
internal/console/archgraph_test.goLoading diff…
internal/console/archlayout.goLoading diff…
internal/console/archlayout_test.goLoading diff…
internal/console/archlegibility_test.goLoading diff…
internal/console/archpage.goLoading diff…
internal/console/archpage_test.goLoading diff…
internal/console/archregion.goLoading diff…
internal/console/archregion_test.goLoading diff…
internal/console/authcli.goLoading diff…
internal/console/browserrestart.goLoading diff…
internal/console/browserrestart_test.goLoading diff…
internal/console/channelmove.goLoading diff…
internal/console/confirm.goLoading diff…
internal/console/controlplane.goLoading diff…
internal/console/controlplane_test.goLoading diff…
internal/console/deletion_test.goLoading diff…
internal/console/deployments.goLoading diff…
internal/console/deployments_test.goLoading diff…
internal/console/deploymentstatus.goLoading diff…
internal/console/deploymentstatus_test.goLoading diff…
internal/console/domainattach.goLoading diff…
internal/console/economicspage_test.goLoading diff…
internal/console/economicspass.goLoading diff…
internal/console/errorsview.goLoading diff…
internal/console/icons.goLoading diff…
internal/console/instancecopy.goLoading diff…
internal/console/instancepage.goLoading diff…
internal/console/instancepage_test.goLoading diff…
internal/console/instancesplacement.goLoading diff…
internal/console/instancesplacement_test.goLoading diff…
internal/console/listquery.goLoading diff…
internal/console/listquery_test.goLoading diff…
internal/console/logsview_test.goLoading diff…
internal/console/metricsview.goLoading diff…
internal/console/mismatchcopy.goLoading diff…
internal/console/overview.goLoading diff…
internal/console/overview_test.goLoading diff…
internal/console/ownership.goLoading diff…
internal/console/pendinghandlers.goLoading diff…
internal/console/pipelinepage.goLoading diff…
internal/console/pipelinepage_test.goLoading diff…
internal/console/placementdoors_test.goLoading diff…
internal/console/relayops.goLoading diff…
internal/console/relayops_test.goLoading diff…
internal/console/releasesummary.goLoading diff…
internal/console/releasesummary_test.goLoading diff…
internal/console/scanpass.goLoading diff…
internal/console/scanpass_test.goLoading diff…
internal/console/server.goLoading diff…
internal/console/server_account_test.goLoading diff…
internal/console/server_test.goLoading diff…
internal/console/statuscopy.goLoading diff…
internal/console/statuscopy_test.goLoading diff…
internal/console/store.goLoading diff…
internal/console/store_test.goLoading diff…
internal/console/svcpage.goLoading diff…
internal/console/svcpage_test.goLoading diff…
internal/console/svcprincipal.goLoading diff…
internal/console/svcroutes_test.goLoading diff…
internal/console/templates/account_review.htmlLoading diff…
internal/console/templates/account_settings.htmlLoading diff…
internal/console/templates/app_activity.htmlLoading diff…
internal/console/templates/app_analytics.htmlLoading diff…
internal/console/templates/app_deployments.htmlLoading diff…
internal/console/templates/app_errors.htmlLoading diff…
internal/console/templates/app_instance.htmlLoading diff…
internal/console/templates/app_instances.htmlLoading diff…
internal/console/templates/app_logs.htmlLoading diff…
internal/console/templates/app_overview.htmlLoading diff…
internal/console/templates/app_releases.htmlLoading diff…
internal/console/templates/app_settings.htmlLoading diff…
internal/console/templates/appnav.htmlLoading diff…
internal/console/templates/apps.htmlLoading diff…
internal/console/templates/architecture.htmlLoading diff…
internal/console/templates/economics_accounts.htmlLoading diff…
internal/console/templates/layout.htmlLoading diff…
internal/console/templates/pipeline.htmlLoading diff…
internal/console/view.goLoading diff…
internal/console/view_test.goLoading diff…
internal/controlname/names.goLoading diff…
internal/domains/aliases.goLoading diff…
internal/domains/aliases_paths_test.goLoading diff…
internal/domains/claimcache_test.goLoading diff…
internal/domains/claims.goLoading diff…
internal/domains/claims_test.goLoading diff…
internal/domains/paths_test.goLoading diff…
internal/edge/analytics.goLoading diff…
internal/edge/analytics_test.goLoading diff…
internal/edge/answered.goLoading diff…
internal/edge/answered_test.goLoading diff…
internal/edge/edge.goLoading diff…
internal/edge/edgeerrors_test.goLoading diff…
internal/edge/gate_test.goLoading diff…
internal/edge/noactivator_test.goLoading diff…
internal/edge/path_e2e_test.goLoading diff…
internal/edge/path_test.goLoading diff…
internal/edge/purge_header.goLoading diff…
internal/edge/purge_path_test.goLoading diff…
internal/edge/storedoor.goLoading diff…
internal/edge/storedoor_test.goLoading diff…
internal/edge/usagemeter.goLoading diff…
internal/edge/usagemeter_test.goLoading diff…
internal/fleetapi/fleetapi.goLoading diff…
internal/fleetapi/fleetapi_test.goLoading diff…
internal/gate/cookie.goLoading diff…
internal/gate/gate.goLoading diff…
internal/gate/gate_test.goLoading diff…
internal/gate/limiter.goLoading diff…
internal/gate/login.htmlLoading diff…
internal/gate/page.goLoading diff…
internal/host/adoptlock.goLoading diff…
internal/host/agent.goLoading diff…
internal/host/bootstrap.goLoading diff…
internal/host/edgesfile.goLoading diff…
internal/host/edgesfile_test.goLoading diff…
internal/host/errship.goLoading diff…
internal/host/errship_test.goLoading diff…
internal/host/fileowner_other.goLoading diff…
internal/host/fileowner_unix.goLoading diff…
internal/host/host_test.goLoading diff…
internal/host/logship.goLoading diff…
internal/host/logship_test.goLoading diff…
internal/host/metrics_loop.goLoading diff…
internal/host/probes.goLoading diff…
internal/host/registryowner.goLoading diff…
internal/host/registryowner_test.goLoading diff…
internal/host/restart.goLoading diff…
internal/host/restart_test.goLoading diff…
internal/host/restartscope.goLoading diff…
internal/host/restartscope_test.goLoading diff…
internal/host/schedule_token_fence_test.goLoading diff…
internal/host/schedule_wake_test.goLoading diff…
internal/host/schedule_wiring.goLoading diff…
internal/host/schedule_wiring_test.goLoading diff…
internal/host/systemapply.goLoading diff…
internal/host/systemapply_other.goLoading diff…
internal/host/systemapply_test.goLoading diff…
internal/host/systemapply_unix.goLoading diff…
internal/host/systemapply_unix_test.goLoading diff…
internal/host/systemleg.goLoading diff…
internal/host/systemleg_test.goLoading diff…
internal/host/systemprobe.goLoading diff…
internal/host/systemprobe_test.goLoading diff…
internal/host/systemstate.goLoading diff…
internal/host/systemstate_test.goLoading diff…
internal/host/systemunits.goLoading diff…
internal/host/systemunits_test.goLoading diff…
internal/host/telemetry_pass.goLoading diff…
internal/host/telemetry_pass_test.goLoading diff…
internal/host/units/carlos-relay.serviceLoading diff…
internal/host/units/carlos-system-recover.serviceLoading diff…
internal/host/units/carlos-system-update.pathLoading diff…
internal/host/units/carlos-system-update.serviceLoading diff…
internal/host/usage_loop.goLoading diff…
internal/host/usage_loop_test.goLoading diff…
internal/host/versionsweep.goLoading diff…
internal/host/versionsweep_test.goLoading diff…
internal/lease/checkpoint.goLoading diff…
internal/lease/checkpoint_test.goLoading diff…
internal/lease/health.goLoading diff…
internal/lease/lease.goLoading diff…
internal/maintenance/envelope.goLoading diff…
internal/maintenance/envelope_test.goLoading diff…
internal/maintenance/input.goLoading diff…
internal/maintenance/input_test.goLoading diff…
internal/maintenance/result.goLoading diff…
internal/maintenance/result_test.goLoading diff…
internal/maintenance/testdata/envelope-vector.jsonLoading diff…
internal/maintenance/testdata/generate-vector.mjsLoading diff…
internal/maintenanceguard/guard.goLoading diff…
internal/maintenanceguard/guard_test.goLoading diff…
internal/maintenanceguard/json.goLoading diff…
internal/maintenanceguard/lifecycle.goLoading diff…
internal/maintenanceguard/store.goLoading diff…
internal/maintenanceguard/types.goLoading diff…
internal/maintenanceguard/wire_test.goLoading diff…
internal/objstore/aws.goLoading diff…
internal/objstore/aws_test.goLoading diff…
internal/objstore/clamav.goLoading diff…
internal/objstore/clamav_test.goLoading diff…
internal/objstore/contract_test.goLoading diff…
internal/objstore/enforce_test.goLoading diff…
internal/objstore/memprovisioner.goLoading diff…
internal/objstore/memprovisioner_test.goLoading diff…
internal/objstore/memscanner.goLoading diff…
internal/objstore/objstore.goLoading diff…
internal/objstore/provisioner.goLoading diff…
internal/objstore/queue.goLoading diff…
internal/objstore/queue_test.goLoading diff…
internal/objstore/scanblock_test.goLoading diff…
internal/objstore/scanner.goLoading diff…
internal/objstore/scanner_contract_test.goLoading diff…
internal/objstore/scanresult.goLoading diff…
internal/objstore/scanresult_test.goLoading diff…
internal/objstore/scantag.goLoading diff…
internal/objstore/scantag_test.goLoading diff…
internal/objstore/sidecar.goLoading diff…
internal/objstore/sidecar_test.goLoading diff…
internal/objstore/sweep.goLoading diff…
internal/objstore/sweep_test.goLoading diff…
internal/objstore/teardown_scan_test.goLoading diff…
internal/objstore/walk.goLoading diff…
internal/objstore/walk_test.goLoading diff…
internal/privatefile/io_linux.goLoading diff…
internal/privatefile/io_linux_test.goLoading diff…
internal/privatefile/io_other.goLoading diff…
internal/privatefile/privatefile.goLoading diff…
internal/provision/maintenance.goLoading diff…
internal/provision/maintenance_test.goLoading diff…
internal/provision/provision.goLoading diff…
internal/provision/provision_test.goLoading diff…
internal/provision/reconcile.goLoading diff…
internal/provision/reconcile_test.goLoading diff…
internal/publicrelease/feed.goLoading diff…
internal/publicrelease/feed_test.goLoading diff…
internal/registry/paths_test.goLoading diff…
internal/registry/registry.goLoading diff…
internal/registry/registry_test.goLoading diff…
internal/registry/replication_test.goLoading diff…
internal/relay/authority.goLoading diff…
internal/relay/authority_test.goLoading diff…
internal/relay/config.goLoading diff…
internal/relay/config_appconfig_test.goLoading diff…
internal/relay/config_test.goLoading diff…
internal/relay/conn.goLoading diff…
internal/relay/conn_test.goLoading diff…
internal/relay/keys.goLoading diff…
internal/relay/keys_test.goLoading diff…
internal/relay/limits.goLoading diff…
internal/relay/limits_test.goLoading diff…
internal/relay/masters.goLoading diff…
internal/relay/masters_test.goLoading diff…
internal/relay/memstore_test.goLoading diff…
internal/relay/meter.goLoading diff…
internal/relay/meter_test.goLoading diff…
internal/relay/record.goLoading diff…
internal/relay/record_test.goLoading diff…
internal/relay/serve.goLoading diff…
internal/relay/serve_test.goLoading diff…
internal/relay/server.goLoading diff…
internal/relay/server_test.goLoading diff…
internal/relay/vector_test.goLoading diff…
internal/release/adopt.goLoading diff…
internal/release/conditional_delete.goLoading diff…
internal/release/conditional_delete_test.goLoading diff…
internal/release/fetch.goLoading diff…
internal/release/fetch_test.goLoading diff…
internal/release/pagelister_test.goLoading diff…
internal/release/qualified.goLoading diff…
internal/release/release.goLoading diff…
internal/release/restartscope.goLoading diff…
internal/release/restartscope_test.goLoading diff…
internal/release/stage_blocked_test.goLoading diff…
internal/release/store.goLoading diff…
internal/release/sweep.goLoading diff…
internal/release/sweep_test.goLoading diff…
internal/release/system.goLoading diff…
internal/release/system_test.goLoading diff…
internal/release/systempointer.goLoading diff…
internal/release/systempointer_test.goLoading diff…
internal/status/dryrun.goLoading diff…
internal/status/dryrun_internal_test.goLoading diff…
internal/status/snapshot.goLoading diff…
internal/status/snapshot_test.goLoading diff…
internal/svcrole/service_role_test.goLoading diff…
internal/svcrole/svcrole.goLoading diff…
internal/telemetry/telemetry.goLoading diff…
internal/telemetry/telemetry_test.goLoading diff…
mail_cli.goLoading diff…
main.goLoading diff…
mutation_message.goLoading diff…
mutation_message_test.goLoading diff…
relay.goLoading diff…
relay_test.goLoading diff…
restart.goLoading diff…
restart_test.goLoading diff…
route_replication_test.goLoading diff…
routes_cli.goLoading diff…
routes_cli_test.goLoading diff…
scan.goLoading diff…
scan_test.goLoading diff…
services.goLoading diff…
status_instances.goLoading diff…
status_instances_test.goLoading diff…
store.goLoading diff…
store_test.goLoading diff…
storescan_test.goLoading diff…
system.goLoading diff…
system_test.goLoading diff…
update.goLoading diff…