amadan
docs: carlos system guard-arm and guard-exec (claim Plan 8b) — AWAITING PAUL'S COPY REVIEW
Co-Authored-By: Codex <noreply@openai.com> Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 file changed,
+12
−0
docs/site/cli.md+12 −0
CI passed — run details
diff --git a/docs/site/cli.md b/docs/site/cli.md| index c4e6a485b..aeeb65469 100644 |
| --- a/docs/site/cli.md |
| +++ b/docs/site/cli.md |
| @@ -1691,6 +1691,18 @@ apply` is the root oneshot behind `carlos-system-update.service`; it is not |
| for operators. The console is an app — update it with `carlos deploy --app |
| console`. |
| +#### Host lifecycle guard |
| + |
| +`carlos system guard-arm` is a root-only deployment command that installs and |
| +arms the persistent host lifecycle checker. Supply `--policy`, `--identity` |
| +and `--enrollment`; console hosts also supply `--console` with the root-owned |
| +console executable and its `.prev` recovery image in place. |
| + |
| +`carlos system guard-exec` is the root service entry point for checking an |
| +image before starting `apply`, `recover`, `edge` or `console`. Once armed, |
| +the local floor remains enforced independently of `CARLOS_HOST_CLAIM`. |
| +The member command remains `carlos ops host resolve`. |
| + |
| #### Deployment-wide object scanning |
| ```sh |