amadan

carlos / platform Public

Merge origin/main into feat/hostclaim-floor (system verbs: guard-arm/guard-exec plus main's geoip)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude a9e6070529b69c4849cba477f1528aee032a432c parent 39b7afeparent e0bec09
268 files changed, +46563 −463
  • README.md +4 −0
  • analytics_cmd.go +3 −0
  • apimode.go +178 −10
  • apimode_test.go +67 −22
  • apps.go +83 −28
  • apps_test.go +74 −19
  • auth_e2e_test.go +1 −1
  • canary.go +2 −2
  • cli.go +76 −7
  • cli_test.go +128 −0
  • cmd/console/main.go +130 −3
  • cmd/console/main_test.go +6 −0
  • cmd/console/region_test.go +51 −0
  • deploy.go +34 −4
  • docs/site/cli.md +175 −7
  • docs/superpowers/plans/2026-09-26-temporary-static-sites-copy.md +113 −0
  • docs/superpowers/plans/2026-09-26-temporary-static-sites.md +6342 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-1-d1.md +1957 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-2-d2.md +721 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-3-d3.md +3599 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-4-d4.md +437 −0
  • docs/superpowers/plans/2026-10-06-platform-geoip-FACTS.md +60 −0
  • docs/superpowers/plans/2026-10-06-platform-geoip-plan1.md +4210 −0
  • docs/superpowers/plans/2026-10-07-platform-geoip-plan2.md +242 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R1.md +13 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R10.md +47 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R11.md +44 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R12.md +43 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R13.md +35 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R14.md +37 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R2.md +29 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R3.md +25 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R4.md +33 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R5.md +28 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R6.md +29 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R7.md +33 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R8.md +34 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R9.md +39 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-PLAN1-R1.md +45 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R1.md +23 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R2.md +23 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R3.md +42 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R4.md +41 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R5.md +42 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R6.md +43 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R7.md +39 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-CODE1.md +47 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-PLAN1.md +39 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-TEMPORARY-SITES-PLAN.md +45 −0
  • docs/superpowers/specs/2026-09-11-isolated-exec-design.md +11 −4
  • docs/superpowers/specs/2026-09-25-temporary-static-sites-design.md +619 −0
  • docs/superpowers/specs/2026-10-06-console-release-defences-design.md +653 −0
  • docs/superpowers/specs/2026-10-06-platform-geoip-design.md +1482 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R1.md +45 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R10.md +30 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R11.md +31 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R12.md +28 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R2.md +46 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R3.md +43 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R4.md +24 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R5.md +20 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R6.md +27 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R7.md +41 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R8.md +37 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R9.md +34 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R1.md +21 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R2.md +38 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R3.md +40 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R4.md +42 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R5.md +48 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R6.md +24 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R7.md +40 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R8.md +30 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R9.md +18 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r2.md +21 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r3.md +14 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r4.md +13 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences.md +19 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-GEOIP.md +75 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-TEMPORARY-SITES.md +60 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-console-release-defences.md +58 −0
  • geo_cmd.go +100 −0
  • geo_cmd_test.go +35 −0
  • infra/modules/deployment-buckets/main.tf +24 −0
  • internal/activator/backend_exec.go +2 −2
  • internal/analytics/countries_test.go +99 −0
  • internal/analytics/day.go +63 −4
  • internal/analytics/meter.go +9 −1
  • internal/analytics/read.go +6 −0
  • internal/console/alertwatch.go +55 −4
  • internal/console/alertwatch_test.go +33 −0
  • internal/console/analyticsview.go +44 −0
  • internal/console/apianalytics.go +43 −1
  • internal/console/apianalytics_geo_test.go +26 −0
  • internal/console/apianalytics_test.go +43 −0
  • internal/console/apicli.go +166 −54
  • internal/console/apicli_test.go +165 −0
  • internal/console/apidomains.go +3 −0
  • internal/console/apigeo.go +62 −0
  • internal/console/apigeo_test.go +58 −0
  • internal/console/apiinstances.go +12 −0
  • internal/console/apimail.go +12 −0
  • internal/console/apipipeline.go +8 −0
  • internal/console/apirelay.go +3 −0
  • internal/console/apisidecars.go +6 −0
  • internal/console/apistore.go +6 −0
  • internal/console/apistore_provision.go +3 −0
  • internal/console/apisystemgeoip.go +389 −0
  • internal/console/apisystemgeoip_test.go +384 −0
  • internal/console/apisystemupdate.go +43 −2
  • internal/console/apitemporary.go +431 −0
  • internal/console/apitemporary_test.go +462 −0
  • internal/console/applocks.go +59 −0
  • internal/console/appsettings.go +48 −3
  • internal/console/authcli.go +33 −0
  • internal/console/controlplane.go +14 −0
  • internal/console/deletion_test.go +53 −0
  • internal/console/domainattach.go +3 −0
  • internal/console/domaincatchall.go +12 −0
  • internal/console/expirypass.go +253 −0
  • internal/console/expirypass_test.go +339 −0
  • internal/console/fleets.go +8 −0
  • internal/console/geoipfeed.go +399 −0
  • internal/console/geoipfeed_test.go +407 −0
  • internal/console/geoipfollower.go +108 −0
  • internal/console/geoipfollower_test.go +147 −0
  • internal/console/geoippublish.go +421 −0
  • internal/console/geoippublish_test.go +597 −0
  • internal/console/geoipverify.go +148 −0
  • internal/console/geoipverify_linux.go +14 −0
  • internal/console/geoipverify_main_test.go +28 −0
  • internal/console/geoipverify_other.go +6 −0
  • internal/console/instanceprivatestore.go +3 −0
  • internal/console/materialize.go +22 −6
  • internal/console/ownership.go +44 −5
  • internal/console/pendingflow_test.go +89 −0
  • internal/console/pendinghandlers.go +18 −3
  • internal/console/regionpicker.go +40 −4
  • internal/console/restore.go +192 −0
  • internal/console/restore_test.go +445 −0
  • internal/console/server.go +148 −13
  • internal/console/settle.go +127 −0
  • internal/console/settle_test.go +245 −0
  • internal/console/store.go +151 −39
  • internal/console/svcprincipal.go +7 −0
  • internal/console/svcroutes_test.go +14 −2
  • internal/console/temphook_test.go +66 −0
  • internal/console/templates/app_analytics.html +3 −0
  • internal/console/templates/app_new.html +1 −1
  • internal/console/templates/app_settings.html +3 −2
  • internal/console/templates/appnav.html +7 −0
  • internal/console/templates/apps.html +2 −2
  • internal/console/templates/trash.html +11 −8
  • internal/console/tempnames_test.go +95 −0
  • internal/console/temprefusal.go +51 −0
  • internal/console/temprefusal_test.go +343 −0
  • internal/console/tempregion_test.go +68 −0
  • internal/console/tempstore.go +219 −0
  • internal/console/tempstore_test.go +233 −0
  • internal/console/view.go +4 −1
  • internal/edge/analytics.go +9 −1
  • internal/edge/backhaul_e2e_test.go +10 −3
  • internal/edge/edge.go +57 −0
  • internal/edge/geoipheaders.go +59 −0
  • internal/edge/geoipheaders_test.go +427 −0
  • internal/edge/geoipmirror.go +682 −0
  • internal/edge/geoipmirror_test.go +595 −0
  • internal/edge/tunnel_geo_e2e_test.go +172 −0
  • internal/fleetapi/fleetapi.go +5 −0
  • internal/geo/mmdb.go +240 −25
  • internal/geo/mmdb_test.go +155 −0
  • internal/geo/pathological_test.go +97 −0
  • internal/geo/swappable.go +88 −0
  • internal/geo/swappable_test.go +108 −0
  • internal/geo/testdata/README +13 −1
  • internal/geo/testdata/pathological-bigmap.mmdb binary
  • internal/geo/testdata/pathological-dag.mmdb binary
  • internal/geo/testdata/pathological-empty-dag.mmdb binary
  • internal/geo/testdata/pathological-metadata.mmdb binary
  • internal/geoip/answer.go +190 −0
  • internal/geoip/answer_test.go +116 −0
  • internal/geoip/archive.go +71 −0
  • internal/geoip/archive_test.go +130 −0
  • internal/geoip/feed.go +83 −0
  • internal/geoip/pointer.go +140 −0
  • internal/geoip/pointer_test.go +71 −0
  • internal/host/agent.go +297 −22
  • internal/host/agent_geoip_test.go +21 −0
  • internal/host/agent_test.go +23 −18
  • internal/host/alertsink.go +111 −0
  • internal/host/alertsink_geoip_test.go +26 −0
  • internal/host/converge_adopted_test.go +5 −5
  • internal/host/fileowner_other.go +4 −0
  • internal/host/fileowner_unix.go +10 −0
  • internal/host/metrics_loop.go +8 −0
  • internal/host/proofask.go +187 −0
  • internal/host/proofask_test.go +378 −0
  • internal/host/proofobserve.go +140 −0
  • internal/host/proofobserve_test.go +239 −0
  • internal/host/proofroot.go +294 −0
  • internal/host/proofroot_test.go +440 −0
  • internal/host/proofstatus.go +15 −0
  • internal/host/refusalwatch.go +59 −0
  • internal/host/refusalwatch_test.go +161 −0
  • internal/host/units/carlos-instance-seed@.service +3 −0
  • internal/host/units/carlos-instance-sidecar@.service +6 −0
  • internal/host/units/carlos-instance@.service +6 −0
  • internal/host/units_isolation_test.go +9 −2
  • internal/host/unitsettle.go +314 −0
  • internal/host/unitsettle_test.go +539 −0
  • internal/instancectl/hardening.go +52 −17
  • internal/instancectl/hardening_test.go +163 −6
  • internal/instancectl/localaddrs.go +127 −0
  • internal/instancectl/server.go +16 −1
  • internal/instanceexec/exec.go +5 −4
  • internal/instanceexec/families_test.go +107 −0
  • internal/instanceexec/init_linux.go +131 −0
  • internal/instanceexec/init_test.go +475 −0
  • internal/instanceexec/probe.go +0 −20
  • internal/instanceexec/probe_hardening.go +6 −12
  • internal/instanceexec/probe_hardening_test.go +2 −8
  • internal/instanceexec/probe_test.go +0 −4
  • internal/instanceexec/scope_linux.go +2 −12
  • internal/instanceexec/scope_other.go +1 −1
  • internal/metrics/alert.go +23 −0
  • internal/metrics/alert_test.go +48 −0
  • internal/release/adopt.go +246 −5
  • internal/release/adopt_test.go +136 −0
  • internal/release/healthy.go +118 −0
  • internal/release/healthy_test.go +62 −0
  • internal/release/program.go +178 −0
  • internal/release/program_test.go +344 −0
  • internal/release/programhistory.go +60 −0
  • internal/release/programhistory_test.go +440 −0
  • internal/release/proof.go +255 −0
  • internal/release/proof_test.go +203 −0
  • internal/release/proofgate.go +356 −0
  • internal/release/proofgate_test.go +627 −0
  • internal/release/proofpolicy.go +165 −0
  • internal/release/proofpolicy_test.go +104 −0
  • internal/release/putfrom_test.go +117 −0
  • internal/release/refusal.go +172 −0
  • internal/release/refusal_test.go +86 −0
  • internal/release/release.go +84 −5
  • internal/release/release_test.go +145 −0
  • internal/release/rollback.go +138 −0
  • internal/release/rollback_test.go +486 −0
  • internal/release/store.go +158 −5
  • internal/release/temporary.go +51 −0
  • internal/release/temporary_test.go +86 −0
  • internal/release/trash.go +21 −2
  • internal/status/contract_test.go +31 −13
  • internal/status/dryrun.go +58 −0
  • internal/status/snapshot.go +64 −3
  • internal/status/snapshot_test.go +17 −0
  • internal/status/status_test.go +95 −0
  • internal/tunnelclient/mark_test.go +20 −0
  • internal/tunnelclient/tunnelclient.go +27 −1
  • main.go +6 −0
  • mutation_message_test.go +2 −2
  • proof_cli.go +182 −0
  • proof_cli_test.go +149 −0
  • statuslive_test.go +131 −0
  • system.go +12 −1
  • system_geoip.go +293 −0
  • system_geoip_test.go +145 −0
  • temporary.go +306 −0
  • temporary_test.go +350 −0

CI passed — run details

README.md

Loading diff…

analytics_cmd.go

Loading diff…

apimode.go

Loading diff…

apimode_test.go

Loading diff…

apps.go

Loading diff…

apps_test.go

Loading diff…

auth_e2e_test.go

Loading diff…

canary.go

Loading diff…

cli.go

Loading diff…

cli_test.go

Loading diff…

cmd/console/main.go

Loading diff…

cmd/console/main_test.go

Loading diff…

cmd/console/region_test.go

Loading diff…

deploy.go

Loading diff…

docs/site/cli.md

Loading diff…

docs/superpowers/plans/2026-09-26-temporary-static-sites-copy.md

Loading diff…

docs/superpowers/plans/2026-09-26-temporary-static-sites.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-1-d1.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-2-d2.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-3-d3.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-4-d4.md

Loading diff…

docs/superpowers/plans/2026-10-06-platform-geoip-FACTS.md

Loading diff…

docs/superpowers/plans/2026-10-06-platform-geoip-plan1.md

Loading diff…

docs/superpowers/plans/2026-10-07-platform-geoip-plan2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R10.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R11.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R12.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R13.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R14.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R3.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R4.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R5.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R6.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R7.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R8.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R9.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-PLAN1-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R3.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R4.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R5.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R6.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R7.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-CODE1.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-PLAN1.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-TEMPORARY-SITES-PLAN.md

Loading diff…

docs/superpowers/specs/2026-09-11-isolated-exec-design.md

Loading diff…

docs/superpowers/specs/2026-09-25-temporary-static-sites-design.md

Loading diff…

docs/superpowers/specs/2026-10-06-console-release-defences-design.md

Loading diff…

docs/superpowers/specs/2026-10-06-platform-geoip-design.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R10.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R11.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R12.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R6.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R7.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R8.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R9.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R6.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R7.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R8.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R9.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-GEOIP.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-TEMPORARY-SITES.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-console-release-defences.md

Loading diff…

geo_cmd.go

Loading diff…

geo_cmd_test.go

Loading diff…

infra/modules/deployment-buckets/main.tf

Loading diff…

internal/activator/backend_exec.go

Loading diff…

internal/analytics/countries_test.go

Loading diff…

internal/analytics/day.go

Loading diff…

internal/analytics/meter.go

Loading diff…

internal/analytics/read.go

Loading diff…

internal/console/alertwatch.go

Loading diff…

internal/console/alertwatch_test.go

Loading diff…

internal/console/analyticsview.go

Loading diff…

internal/console/apianalytics.go

Loading diff…

internal/console/apianalytics_geo_test.go

Loading diff…

internal/console/apianalytics_test.go

Loading diff…

internal/console/apicli.go

Loading diff…

internal/console/apicli_test.go

Loading diff…

internal/console/apidomains.go

Loading diff…

internal/console/apigeo.go

Loading diff…

internal/console/apigeo_test.go

Loading diff…

internal/console/apiinstances.go

Loading diff…

internal/console/apimail.go

Loading diff…

internal/console/apipipeline.go

Loading diff…

internal/console/apirelay.go

Loading diff…

internal/console/apisidecars.go

Loading diff…

internal/console/apistore.go

Loading diff…

internal/console/apistore_provision.go

Loading diff…

internal/console/apisystemgeoip.go

Loading diff…

internal/console/apisystemgeoip_test.go

Loading diff…

internal/console/apisystemupdate.go

Loading diff…

internal/console/apitemporary.go

Loading diff…

internal/console/apitemporary_test.go

Loading diff…

internal/console/applocks.go

Loading diff…

internal/console/appsettings.go

Loading diff…

internal/console/authcli.go

Loading diff…

internal/console/controlplane.go

Loading diff…

internal/console/deletion_test.go

Loading diff…

internal/console/domainattach.go

Loading diff…

internal/console/domaincatchall.go

Loading diff…

internal/console/expirypass.go

Loading diff…

internal/console/expirypass_test.go

Loading diff…

internal/console/fleets.go

Loading diff…

internal/console/geoipfeed.go

Loading diff…

internal/console/geoipfeed_test.go

Loading diff…

internal/console/geoipfollower.go

Loading diff…

internal/console/geoipfollower_test.go

Loading diff…

internal/console/geoippublish.go

Loading diff…

internal/console/geoippublish_test.go

Loading diff…

internal/console/geoipverify.go

Loading diff…

internal/console/geoipverify_linux.go

Loading diff…

internal/console/geoipverify_main_test.go

Loading diff…

internal/console/geoipverify_other.go

Loading diff…

internal/console/instanceprivatestore.go

Loading diff…

internal/console/materialize.go

Loading diff…

internal/console/ownership.go

Loading diff…

internal/console/pendingflow_test.go

Loading diff…

internal/console/pendinghandlers.go

Loading diff…

internal/console/regionpicker.go

Loading diff…

internal/console/restore.go

Loading diff…

internal/console/restore_test.go

Loading diff…

internal/console/server.go

Loading diff…

internal/console/settle.go

Loading diff…

internal/console/settle_test.go

Loading diff…

internal/console/store.go

Loading diff…

internal/console/svcprincipal.go

Loading diff…

internal/console/svcroutes_test.go

Loading diff…

internal/console/temphook_test.go

Loading diff…

internal/console/templates/app_analytics.html

Loading diff…

internal/console/templates/app_new.html

Loading diff…

internal/console/templates/app_settings.html

Loading diff…

internal/console/templates/appnav.html

Loading diff…

internal/console/templates/apps.html

Loading diff…

internal/console/templates/trash.html

Loading diff…

internal/console/tempnames_test.go

Loading diff…

internal/console/temprefusal.go

Loading diff…

internal/console/temprefusal_test.go

Loading diff…

internal/console/tempregion_test.go

Loading diff…

internal/console/tempstore.go

Loading diff…

internal/console/tempstore_test.go

Loading diff…

internal/console/view.go

Loading diff…

internal/edge/analytics.go

Loading diff…

internal/edge/backhaul_e2e_test.go

Loading diff…

internal/edge/edge.go

Loading diff…

internal/edge/geoipheaders.go

Loading diff…

internal/edge/geoipheaders_test.go

Loading diff…

internal/edge/geoipmirror.go

Loading diff…

internal/edge/geoipmirror_test.go

Loading diff…

internal/edge/tunnel_geo_e2e_test.go

Loading diff…

internal/fleetapi/fleetapi.go

Loading diff…

internal/geo/mmdb.go

Loading diff…

internal/geo/mmdb_test.go

Loading diff…

internal/geo/pathological_test.go

Loading diff…

internal/geo/swappable.go

Loading diff…

internal/geo/swappable_test.go

Loading diff…

internal/geo/testdata/README

Loading diff…

internal/geo/testdata/pathological-bigmap.mmdb

Loading diff…

internal/geo/testdata/pathological-dag.mmdb

Loading diff…

internal/geo/testdata/pathological-empty-dag.mmdb

Loading diff…

internal/geo/testdata/pathological-metadata.mmdb

Loading diff…

internal/geoip/answer.go

Loading diff…

internal/geoip/answer_test.go

Loading diff…

internal/geoip/archive.go

Loading diff…

internal/geoip/archive_test.go

Loading diff…

internal/geoip/feed.go

Loading diff…

internal/geoip/pointer.go

Loading diff…

internal/geoip/pointer_test.go

Loading diff…

internal/host/agent.go

Loading diff…

internal/host/agent_geoip_test.go

Loading diff…

internal/host/agent_test.go

Loading diff…

internal/host/alertsink.go

Loading diff…

internal/host/alertsink_geoip_test.go

Loading diff…

internal/host/converge_adopted_test.go

Loading diff…

internal/host/fileowner_other.go

Loading diff…

internal/host/fileowner_unix.go

Loading diff…

internal/host/metrics_loop.go

Loading diff…

internal/host/proofask.go

Loading diff…

internal/host/proofask_test.go

Loading diff…

internal/host/proofobserve.go

Loading diff…

internal/host/proofobserve_test.go

Loading diff…

internal/host/proofroot.go

Loading diff…

internal/host/proofroot_test.go

Loading diff…

internal/host/proofstatus.go

Loading diff…

internal/host/refusalwatch.go

Loading diff…

internal/host/refusalwatch_test.go

Loading diff…

internal/host/units/carlos-instance-seed@.service

Loading diff…

internal/host/units/carlos-instance-sidecar@.service

Loading diff…

internal/host/units/carlos-instance@.service

Loading diff…

internal/host/units_isolation_test.go

Loading diff…

internal/host/unitsettle.go

Loading diff…

internal/host/unitsettle_test.go

Loading diff…

internal/instancectl/hardening.go

Loading diff…

internal/instancectl/hardening_test.go

Loading diff…

internal/instancectl/localaddrs.go

Loading diff…

internal/instancectl/server.go

Loading diff…

internal/instanceexec/exec.go

Loading diff…

internal/instanceexec/families_test.go

Loading diff…

internal/instanceexec/init_linux.go

Loading diff…

internal/instanceexec/init_test.go

Loading diff…

internal/instanceexec/probe.go

Loading diff…

internal/instanceexec/probe_hardening.go

Loading diff…

internal/instanceexec/probe_hardening_test.go

Loading diff…

internal/instanceexec/probe_test.go

Loading diff…

internal/instanceexec/scope_linux.go

Loading diff…

internal/instanceexec/scope_other.go

Loading diff…

internal/metrics/alert.go

Loading diff…

internal/metrics/alert_test.go

Loading diff…

internal/release/adopt.go

Loading diff…

internal/release/adopt_test.go

Loading diff…

internal/release/healthy.go

Loading diff…

internal/release/healthy_test.go

Loading diff…

internal/release/program.go

Loading diff…

internal/release/program_test.go

Loading diff…

internal/release/programhistory.go

Loading diff…

internal/release/programhistory_test.go

Loading diff…

internal/release/proof.go

Loading diff…

internal/release/proof_test.go

Loading diff…

internal/release/proofgate.go

Loading diff…

internal/release/proofgate_test.go

Loading diff…

internal/release/proofpolicy.go

Loading diff…

internal/release/proofpolicy_test.go

Loading diff…

internal/release/putfrom_test.go

Loading diff…

internal/release/refusal.go

Loading diff…

internal/release/refusal_test.go

Loading diff…

internal/release/release.go

Loading diff…

internal/release/release_test.go

Loading diff…

internal/release/rollback.go

Loading diff…

internal/release/rollback_test.go

Loading diff…

internal/release/store.go

Loading diff…

internal/release/temporary.go

Loading diff…

internal/release/temporary_test.go

Loading diff…

internal/release/trash.go

Loading diff…

internal/status/contract_test.go

Loading diff…

internal/status/dryrun.go

Loading diff…

internal/status/snapshot.go

Loading diff…

internal/status/snapshot_test.go

Loading diff…

internal/status/status_test.go

Loading diff…

internal/tunnelclient/mark_test.go

Loading diff…

internal/tunnelclient/tunnelclient.go

Loading diff…

main.go

Loading diff…

mutation_message_test.go

Loading diff…

proof_cli.go

Loading diff…

proof_cli_test.go

Loading diff…

statuslive_test.go

Loading diff…

system.go

Loading diff…

system_geoip.go

Loading diff…

system_geoip_test.go

Loading diff…

temporary.go

Loading diff…

temporary_test.go

Loading diff…