carlos / platform Public

changelog-v0.27

Squashed from changelog-v0.27 into main.

Paul Campbell pushed by claude 1 week ago 8b5c75610c0c169d2213f7bb71a68b01b7dda96a parent a3bfa66

2 files changed, +390 −0

docs/site/changelog-links.json +24 −0
docs/site/changelog.json +366 −0

CI passed — run details

CI log

=== gate ===
cd launchctx && go vet ./... && go test ./... -count=1
ok  	amadan.net/carlos/platform.git/launchctx	0.011s
?   	amadan.net/carlos/platform.git/launchctx/controlname	[no test files]
?   	amadan.net/carlos/platform.git/launchctx/wireid	[no test files]
go vet ./...
gofmt -l .: clean
go test ./... -count=1 -timeout 30m
ok  	github.com/carlosframework/platform	368.477s
?   	github.com/carlosframework/platform/cmd/changelog	[no test files]
ok  	github.com/carlosframework/platform/cmd/console	3.253s
ok  	github.com/carlosframework/platform/cmd/moveprobe	92.327s
ok  	github.com/carlosframework/platform/cmd/zddprobe	0.715s
ok  	github.com/carlosframework/platform/internal/activator	234.208s
ok  	github.com/carlosframework/platform/internal/agentsock	0.018s
ok  	github.com/carlosframework/platform/internal/alerting	0.007s
ok  	github.com/carlosframework/platform/internal/analytics	0.020s
ok  	github.com/carlosframework/platform/internal/appconfig	2.367s
ok  	github.com/carlosframework/platform/internal/apperr	0.092s
ok  	github.com/carlosframework/platform/internal/applog	0.155s
ok  	github.com/carlosframework/platform/internal/awsinv	0.004s
ok  	github.com/carlosframework/platform/internal/boxchoice	0.004s
ok  	github.com/carlosframework/platform/internal/boxid	0.913s
?   	github.com/carlosframework/platform/internal/boxid/boxidtest	[no test files]
?   	github.com/carlosframework/platform/internal/boxid/internal/signtest	[no test files]
ok  	github.com/carlosframework/platform/internal/boxvolumes	0.008s
ok  	github.com/carlosframework/platform/internal/caps	0.012s
ok  	github.com/carlosframework/platform/internal/certwarm	0.003s
ok  	github.com/carlosframework/platform/internal/cgroup	0.725s
ok  	github.com/carlosframework/platform/internal/changelog	0.322s
ok  	github.com/carlosframework/platform/internal/clamd	0.055s
?   	github.com/carlosframework/platform/internal/cliflag	[no test files]
ok  	github.com/carlosframework/platform/internal/console	371.008s
?   	github.com/carlosframework/platform/internal/controlname	[no test files]
?   	github.com/carlosframework/platform/internal/controlsock	[no test files]
ok  	github.com/carlosframework/platform/internal/dbdoor	6.273s
ok  	github.com/carlosframework/platform/internal/dbdoor/dbdoortest	0.009s
ok  	github.com/carlosframework/platform/internal/dbverify	0.004s
ok  	github.com/carlosframework/platform/internal/dnsrec	0.003s
ok  	github.com/carlosframework/platform/internal/docsite	0.005s
ok  	github.com/carlosframework/platform/internal/domains	2.176s
ok  	github.com/carlosframework/platform/internal/doorkey	0.006s
ok  	github.com/carlosframework/platform/internal/economics	0.004s
ok  	github.com/carlosframework/platform/internal/edge	26.086s
?   	github.com/carlosframework/platform/internal/edgeproof	[no test files]
ok  	github.com/carlosframework/platform/internal/edgesfile	0.008s
ok  	github.com/carlosframework/platform/internal/fleetapi	0.125s
ok  	github.com/carlosframework/platform/internal/gate	1.655s
ok  	github.com/carlosframework/platform/internal/genselect	0.015s
ok  	github.com/carlosframework/platform/internal/geo	0.015s
ok  	github.com/carlosframework/platform/internal/geoip	0.030s
ok  	github.com/carlosframework/platform/internal/host	128.070s
ok  	github.com/carlosframework/platform/internal/hostactors	0.538s
ok  	github.com/carlosframework/platform/internal/hostbox	2.294s
ok  	github.com/carlosframework/platform/internal/hostclaim	0.544s
ok  	github.com/carlosframework/platform/internal/hostevidence	0.006s
ok  	github.com/carlosframework/platform/internal/hostexec	4.991s
ok  	github.com/carlosframework/platform/internal/hostfence	0.044s
ok  	github.com/carlosframework/platform/internal/hostfiles	10.519s
ok  	github.com/carlosframework/platform/internal/hostfloor	0.013s
ok  	github.com/carlosframework/platform/internal/hostguard	0.965s
ok  	github.com/carlosframework/platform/internal/hostops	1.479s
?   	github.com/carlosframework/platform/internal/hostops/fencerelease	[no test files]
ok  	github.com/carlosframework/platform/internal/hostops/internal/fencerelease	0.002s
ok  	github.com/carlosframework/platform/internal/hostquarantine	0.002s
ok  	github.com/carlosframework/platform/internal/hostrelocate	0.453s
ok  	github.com/carlosframework/platform/internal/hostresolve	0.142s
ok  	github.com/carlosframework/platform/internal/hostwrite	0.002s
ok  	github.com/carlosframework/platform/internal/infraview	0.002s
ok  	github.com/carlosframework/platform/internal/instancectl	1.816s
ok  	github.com/carlosframework/platform/internal/instanceexec	2.725s
ok  	github.com/carlosframework/platform/internal/instancefs	0.005s
ok  	github.com/carlosframework/platform/internal/instancekey	0.005s
ok  	github.com/carlosframework/platform/internal/instanceupdates	0.007s
ok  	github.com/carlosframework/platform/internal/layout	1.440s
ok  	github.com/carlosframework/platform/internal/lease	9.458s
ok  	github.com/carlosframework/platform/internal/lease/leasetest	0.007s
ok  	github.com/carlosframework/platform/internal/ledger	0.016s
ok  	github.com/carlosframework/platform/internal/mail	0.168s
ok  	github.com/carlosframework/platform/internal/maintenance	0.091s
ok  	github.com/carlosframework/platform/internal/maintenanceexec	5.571s
ok  	github.com/carlosframework/platform/internal/maintenanceguard	0.086s
ok  	github.com/carlosframework/platform/internal/metrics	0.014s
ok  	github.com/carlosframework/platform/internal/moves	21.115s
ok  	github.com/carlosframework/platform/internal/moves/archive	0.779s
ok  	github.com/carlosframework/platform/internal/objstore	0.171s
ok  	github.com/carlosframework/platform/internal/ops	0.163s
ok  	github.com/carlosframework/platform/internal/park	0.208s
ok  	github.com/carlosframework/platform/internal/privatefile	0.004s
ok  	github.com/carlosframework/platform/internal/provision	13.593s
ok  	github.com/carlosframework/platform/internal/publicrelease	0.007s
?   	github.com/carlosframework/platform/internal/regionname	[no test files]
ok  	github.com/carlosframework/platform/internal/registry	4.075s
ok  	github.com/carlosframework/platform/internal/relay	7.243s
ok  	github.com/carlosframework/platform/internal/release	19.833s
ok  	github.com/carlosframework/platform/internal/rollout	3.780s
ok  	github.com/carlosframework/platform/internal/rolloutwords	0.003s
ok  	github.com/carlosframework/platform/internal/rootaws	0.007s
ok  	github.com/carlosframework/platform/internal/rootparticipation	0.007s
ok  	github.com/carlosframework/platform/internal/rootstate	0.025s
ok  	github.com/carlosframework/platform/internal/s3compat	0.005s
ok  	github.com/carlosframework/platform/internal/safefile	0.004s
ok  	github.com/carlosframework/platform/internal/schedule	2.360s
ok  	github.com/carlosframework/platform/internal/sim/hostlife	9.999s
ok  	github.com/carlosframework/platform/internal/sim/litestreamfacts	4.634s
ok  	github.com/carlosframework/platform/internal/status	0.040s
ok  	github.com/carlosframework/platform/internal/steering	0.006s
ok  	github.com/carlosframework/platform/internal/stopevidence	0.190s
ok  	github.com/carlosframework/platform/internal/svcrole	0.002s
ok  	github.com/carlosframework/platform/internal/telemetry	0.004s
ok  	github.com/carlosframework/platform/internal/termfence	0.004s
ok  	github.com/carlosframework/platform/internal/tunnelclient	0.004s
ok  	github.com/carlosframework/platform/internal/unixdial	0.003s
ok  	github.com/carlosframework/platform/internal/updatewords	0.004s
ok  	github.com/carlosframework/platform/internal/usage	0.005s
ok  	github.com/carlosframework/platform/internal/version	0.002s
ok  	github.com/carlosframework/platform/internal/vet	1.601s
=== cross ===
--- shard 0 of 5 ---
cross-compiling darwin/arm64
--- shard 1 of 5 ---
cross-compiling darwin/amd64
--- shard 2 of 5 ---
cross-compiling linux/arm64
--- shard 3 of 5 ---
cross-compiling windows/amd64
--- shard 4 of 5 ---
cross-compiling windows/arm64
=== minio-contract ===
minio contract: arm64, minio RELEASE.2025-09-07T16-13-09Z, mc RELEASE.2025-08-13T08-35-41Z
  minio: cached, digest verified
  mc: cached, digest verified
  minio healthy on 127.0.0.1:20999
Added `local` successfully.
Bucket created successfully `local/contract-bucket`.
Bucket created successfully `local/denied-bucket`.
Created policy `contract-only` successfully.
Added user `scopeduser` successfully.
Attached Policies: [contract-only]
To User: scopeduser
  buckets and scoped user ready
=== RUN   TestDeliveredContractMinio
=== RUN   TestDeliveredContractMinio/put
=== RUN   TestDeliveredContractMinio/get_round-trips_the_body
=== RUN   TestDeliveredContractMinio/list_shows_the_key
=== RUN   TestDeliveredContractMinio/head_and_list_agree_on_the_version
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict
=== RUN   TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed
=== RUN   TestDeliveredContractMinio/delete_removes_it
=== RUN   TestDeliveredContractMinio/cross-bucket_denial
--- PASS: TestDeliveredContractMinio (0.03s)
    --- PASS: TestDeliveredContractMinio/put (0.00s)
    --- PASS: TestDeliveredContractMinio/get_round-trips_the_body (0.00s)
    --- PASS: TestDeliveredContractMinio/list_shows_the_key (0.00s)
    --- PASS: TestDeliveredContractMinio/head_and_list_agree_on_the_version (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/not_by_PutObjectTagging (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_its_own_object/and_not_by_x-amz-tagging_on_upload (0.00s)
    --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route (0.02s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CreateMultipartUpload (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/not_by_CopyObject_with_a_REPLACE_tagging_directive (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/but_multipart_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_copy_itself_is_allowed (0.00s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/a_POST-policy_forged_tag_with_a_matching_version_is_still_not_a_verdict (0.01s)
        --- PASS: TestDeliveredContractMinio/the_app_cannot_tag_by_any_other_route/and_an_ordinary_tagged-with-something-else_upload_is_allowed (0.00s)
    --- PASS: TestDeliveredContractMinio/delete_removes_it (0.00s)
    --- PASS: TestDeliveredContractMinio/cross-bucket_denial (0.00s)
PASS
ok  	github.com/carlosframework/platform/internal/objstore	0.035s
=== RUN   TestT4StorageProbeMinio
2026/10/14 14:52:04 moves: T4: STORE: list: operation error S3: ListObjectsV2, https response error StatusCode: 403, RequestID: 18DE6CFA744DFD8C, HostID: 7c420053e0fbcd7f41653fdd92ffa2802c903d05303b1aa15adc2e8bb65d183f, api error SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your key and signing method.
--- PASS: TestT4StorageProbeMinio (0.01s)
PASS
ok  	github.com/carlosframework/platform/internal/host	0.026s
minio contract: PASS

diff --git a/docs/site/changelog-links.json b/docs/site/changelog-links.json

index c74a15d3e..cfadf491c 100644

--- a/docs/site/changelog-links.json

+++ b/docs/site/changelog-links.json

@@ -1,5 +1,29 @@

{

"//": "For the changelog: each release-note bullet's bold lead, mapped to the branches behind it. Kept by hand, one release at a time, as step 10 of the release recipe in the README. go run ./cmd/changelog fails on a lead no bullet has, or a branch that did not land in that release.",

+ "v0.27.2": {

+ "Two builds at once keeps each build's socket name.": [

+ "zdd-gen-socket-names"

+ ],

+ "A long host name keeps stop-then-start updates.": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ "v0.27.1": {

+ "A box with many instances no longer fails its update while it starts.": [

+ "hotfix-startup-sweep-281"

+ ]

+ },

+ "v0.27.0": {

+ "Root keeps its own record of each box's releases.": [

+ "feat/claim-root-trusted-state"

+ ],

+ "`carlos __cgexec` can appear in `ps`.": [

+ "zdd-flag-readiness-3"

+ ],

+ "After the roll, check placement on each box.": [

+ "zdd-flag-readiness-3"

+ ]

+ },

"v0.26.0": {

"Two builds at once, off until your deployment turns it on.": [

"zdd-1-generations",

diff --git a/docs/site/changelog.json b/docs/site/changelog.json

index 8b0e6ad14..b3987ca74 100644

--- a/docs/site/changelog.json

+++ b/docs/site/changelog.json

@@ -2,6 +2,372 @@

"//": "Generated by go run ./cmd/changelog from git, the published release notes and Amadan. Do not edit; regenerate.",

"repo": "https://amadan.net/carlos/platform",

"releases": [

+ {

+ "tag": "v0.27.2",

+ "date": "2026-10-14",

+ "sha": "ebddcfc6f4c55a6239d07faa6b46d3773186327b",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.2",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**Two builds at once keeps each build's socket name.** Where a deployment turns on two builds at once, each build's socket now has the same file name it has with the switch off, in a directory of its own. An app that works out its own address from its socket's name now starts the same way either way. Before, such an app saw a different name for the new build and refused to start. Nothing changes where the switch is off, which is every deployment by default.",

+ "branches": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.26.x, read the [v0.27.0](https://github.com/carlosframework/releases/releases/tag/v0.27.0) and [v0.27.1](https://github.com/carlosframework/releases/releases/tag/v0.27.1) operator notes first.** They all still apply."

+ },

+ {

+ "md": "**A long host name keeps stop-then-start updates.** With two builds at once on, a host on a flat box whose name is longer than 59 bytes is updated the old way: stopped, then started on the new build. Its socket path would otherwise be too long.",

+ "branches": [

+ "zdd-gen-socket-names"

+ ]

+ },

+ {

+ "md": "**Every dormant switch stays off.** Leave `CARLOS_SWAP`, `CARLOS_MOVES_PHASE1`, `CARLOS_HOST_CLAIM`, `CARLOS_HOST_CLAIM_ORIGINS`, `CARLOS_HOST_CLAIM_RETIRED_LOCATIONS`, `CARLOS_CONSOLE_ID`, `CARLOS_REGION_HA`, `CONSOLE_APP_REGIONS`, `CARLOS_TEMPORARY_APPS` and `CARLOS_REQUIRE_POINTER_DIGEST` unset, and don't run `carlos channels digests on`. With `CARLOS_HOST_CLAIM` set, instance control now refuses to start until a later release.",

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "ebddcfc6f4c55a6239d07faa6b46d3773186327b",

+ "date": "2026-10-14",

+ "subject": "zdd rev 19 amendment: generation sockets keep the flag-off file name",

+ "branch": "zdd-gen-socket-names",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-gen-socket-names",

+ "commits": 5,

+ "discussions": [

+ {

+ "id": 272,

+ "title": "Zero-downtime deploys: owed before CARLOS_SWAP can go on",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "d2f58fd330726e461b1022edfc9e4c4688696dd1",

+ "date": "2026-10-13",

+ "subject": "startup-largebox-test-281",

+ "branch": "startup-largebox-test-281",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/startup-largebox-test-281",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "21d91fd6087aa1ef7a21f35fc9188b263e3d0529",

+ "date": "2026-10-13",

+ "subject": "host: rootinventory_test.go is linux-only",

+ "branch": "fix-cross-test-compile",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/fix-cross-test-compile",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ {

+ "tag": "v0.27.1",

+ "date": "2026-10-13",

+ "sha": "6dfbff103985e1e81899f2e611b1afff0ddb3769",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.1",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**A box with many instances no longer fails its update while it starts.** On a box with over a hundred instances, v0.27.0's update could take longer than the 20 seconds it allows, because the edge waited for the agent to check every instance first. The box then rolled back after about 45 seconds of failed requests. The edge now starts serving straight away. Requests for an instance wait up to 30 seconds for that check to finish, then get the usual answer that the instance is waking.",

+ "branches": [

+ "hotfix-startup-sweep-281"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.26.x, read the [v0.27.0 operator notes](https://github.com/carlosframework/releases/releases/tag/v0.27.0) first.** They all still apply."

+ },

+ {

+ "md": "**After each box updates, check that it finished starting.** The update's 20-second check now passes once the edge serves, before the agent has checked every instance. So also check the box's journal for `agent: hibernation activator armed`, and that one request to a sleeping instance succeeds."

+ },

+ {

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "6dfbff103985e1e81899f2e611b1afff0ddb3769",

+ "date": "2026-10-13",

+ "subject": "hotfix #281: the edge no longer waits on the startup sweep and recovery",

+ "branch": "hotfix-startup-sweep-281",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/hotfix-startup-sweep-281",

+ "commits": 1,

+ "discussions": [

+ {

+ "id": 281,

+ "title": "Agent startup is not bounded under the 20s update gate: sweep and recovery still run before the edge listens",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell"

+ }

+ ]

+ }

+ ]

+ },

+ {

+ "tag": "v0.27.0",

+ "date": "2026-10-13",

+ "sha": "f4cf27dd0c48eac32d7b4beaec77686752ca6cff",

+ "published": true,

+ "notes_url": "https://github.com/carlosframework/releases/releases/tag/v0.27.0",

+ "notes": {

+ "form": "bullets",

+ "sections": [

+ {

+ "title": "",

+ "bullets": [

+ {

+ "md": "**Root keeps its own record of each box's releases.** A box's root process now keeps the builds it has seen run healthy, and the build each service ran before its current one, in directories only root can write. Before, it read them from places the platform's own service could write. Restarts, rollbacks and recovering from a bad build work exactly as they did.",

+ "branches": [

+ "feat/claim-root-trusted-state"

+ ]

+ },

+ {

+ "md": "**Nothing changes for people using the CLI.**"

+ }

+ ]

+ },

+ {

+ "title": "For operators",

+ "bullets": [

+ {

+ "md": "**Roll the boxes first, then the console.**"

+ },

+ {

+ "md": "**Coming from v0.25.x, read the [v0.26.0 operator notes](https://github.com/carlosframework/releases/releases/tag/v0.26.0) and the [v0.26.1 notes](https://github.com/carlosframework/releases/releases/tag/v0.26.1) first.** They all still apply."

+ },

+ {

+ "md": "**Before rolling, check two things on each box.** `/`, `/var` and `/var/lib` must be owned by root and not writable by group or others, and `/var/lib/carlos-claims` must not exist. If either check fails, root can't update a service that has its own unit, such as the console, on that box, and logs `repoint failed: permission denied` on every pass."

+ },

+ {

+ "md": "**Health history starts empty.** Root no longer reads the health history the service kept before this release. Don't add a `require` or `prove` entry for a service to `/etc/carlos/proof-policy.json` until both its current build and the one before it have been seen healthy since the roll. Otherwise rolling back to the earlier build waits for a proof."

+ },

+ {

+ "md": "**One earlier build per service is kept.** `/opt/carlos/previous/<host>` points at the build each service ran before its current one, and the box keeps that build when it prunes old versions. Disk use can grow by up to one build per service."

+ },

+ {

+ "md": "**`carlos __cgexec` can appear in `ps`.** Each new instance process now starts through a short-lived helper that places it in its cgroup before it runs. For a few milliseconds `ps` can show `carlos __cgexec` as a child of the agent. Monitoring, or a `pkill` that matches \"carlos\" in a command line, can catch it.",

+ "branches": [

+ "zdd-flag-readiness-3"

+ ]

+ },

+ {

+ "md": "**After the roll, check placement on each box.** `journalctl -u carlos-edge --since '<roll time>' | grep 'placement before exec failed'` should print nothing. A line there means a process was moved into its cgroup after it started instead. That affects resource accounting, not serving.",

+ "branches": [

+ "zdd-flag-readiness-3"

+ ]

+ },

+ {

+ "docs": [

+ "/docs/cli#carlos-channels-digests"

+ ]

+ }

+ ]

+ }

+ ]

+ },

+ "changes": [

+ {

+ "sha": "f4cf27dd0c48eac32d7b4beaec77686752ca6cff",

+ "date": "2026-10-13",

+ "subject": "changelog: v0.26.1 (release step 10)",

+ "branch": "changelog-v0.26.1",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-v0.26.1",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "2e00b17e18f49cd391b2c6890f8abd68bbdeba23",

+ "date": "2026-10-13",

+ "subject": "plan: zdd flag readiness round 3 (draft)",

+ "branch": "zdd-flag-readiness-3",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-flag-readiness-3",

+ "commits": 23,

+ "discussions": [

+ {

+ "id": 272,

+ "title": "Zero-downtime deploys: owed before CARLOS_SWAP can go on",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "645a7d0541cc77bbf52523f88a901f720ceaf64a",

+ "date": "2026-10-13",

+ "subject": "claim Plan 14 Part 1 (#280): root-trusted state foundations, families B, C and D",

+ "branch": "feat/claim-root-trusted-state",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/feat%2Fclaim-root-trusted-state",

+ "commits": 1,

+ "discussions": [

+ {

+ "id": 280,

+ "title": "Root trusts service-writable hostguard and health records under /data (claim root paths)",

+ "state": "open"

+ }

+ ],

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "codex"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "34a4328f7d29cfed7b5404cec39cef616e115a26",

+ "date": "2026-10-13",

+ "subject": "hotfix-instance-key-gate",

+ "branch": "hotfix-instance-key-gate",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/hotfix-instance-key-gate",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "ba52d5efe55a4a8a78acaa0af9d500e803aeb4c0",

+ "date": "2026-10-13",

+ "subject": "plan: zero-downtime flag readiness, round 2 (draft for Astra's review)",

+ "branch": "zdd-flag-readiness-2",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/zdd-flag-readiness-2",

+ "commits": 48,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "67698c9c016e1f34fbb4a337ebc833380d023937",

+ "date": "2026-10-13",

+ "subject": "changelog-nested-bullets",

+ "branch": "changelog-nested-bullets",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-nested-bullets",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ },

+ {

+ "sha": "729e85080ff0891fc8c622367dc52a5d27823c8a",

+ "date": "2026-10-13",

+ "subject": "changelog-v0.26.0",

+ "branch": "changelog-v0.26.0",

+ "branch_url": "https://amadan.net/carlos/platform/-/branch/changelog-v0.26.0",

+ "commits": 1,

+ "credit": [

+ {

+ "person": "Paul Campbell",

+ "agents": [

+ "claude"

+ ]

+ }

+ ]

+ }

+ ]

+ },

{

"tag": "v0.26.1",

"date": "2026-10-13",