amadan

carlos / platform Public

hostclaim: Plan 11, region HA integration (inert behind CARLOS_HOST_CLAIM)

Relocation entry in ClaimOwnerDispatch (R1), StopWriters (R2), root
re-observation with FD holders (R3), the session-zero no-process witness
(R4), evidence_refs (R5), typed registration with an append-only
PolicyRefusal (R8), the reservation-bearing isolated root launch (R10,
isolated-unit-v2), enrolled_at, the relocation-release obligation, and
the 9-CG fix: root derives the cgroup containment parent itself.
Record-write census: three sites reviewed and re-digested.
Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
codex pushed by claude bd0cc9914168ffdc1b29c20a5987eb6ecd493159 parent 2d3ff96
133 files changed, +13526 −212
  • internal/activator/claim_shape.go +105 −0
  • internal/activator/claim_shape_rev2_shape_test.go +49 −0
  • internal/activator/claim_shape_rev4_sidecar_error_test.go +104 −0
  • internal/activator/claim_snapshot.go +11 −0
  • internal/activator/claimprocess_root.go +56 −0
  • internal/activator/claimprocess_root_linux.go +91 −0
  • internal/activator/claimprocess_root_other.go +8 −0
  • internal/activator/claimwake.go +10 −3
  • internal/activator/plan11_pidfd_linux_test.go +90 −0
  • internal/activator/rolelaunch.go +28 −10
  • internal/activator/rolelaunch_linux.go +14 −6
  • internal/activator/rolelaunch_other.go +6 −0
  • internal/activator/rolelaunch_root_linux.go +231 −0
  • internal/activator/rolelaunch_root_linux_test.go +417 −0
  • internal/console/hostreports_test.go +10 −1
  • internal/host/claim_mask_filesystem_linux_test.go +58 −0
  • internal/host/claimconstruction.go +62 −9
  • internal/host/claimjournal_containment.go +200 −0
  • internal/host/claimjournal_containment_linux.go +37 −0
  • internal/host/claimjournal_containment_other.go +11 −0
  • internal/host/claimjournal_migration_linux.go +230 −32
  • internal/host/claimjournal_transport.go +13 −2
  • internal/host/claimlaunch_authority.go +190 −0
  • internal/host/claimlaunch_execpermit.go +41 −0
  • internal/host/claimlaunch_kernel_linux.go +251 −0
  • internal/host/claimlaunch_kernel_linux_test.go +147 −0
  • internal/host/claimlaunch_kernel_other.go +25 −0
  • internal/host/claimlaunch_observations.go +31 −0
  • internal/host/claimlaunch_production.go +86 −0
  • internal/host/claimlaunch_rev2_linux_test.go +288 −0
  • internal/host/claimlaunch_rev2_other_test.go +7 −0
  • internal/host/claimlaunch_rev2_test.go +84 −0
  • internal/host/claimlaunch_rev3_boundary_test.go +52 −0
  • internal/host/claimlaunch_rev3_child_linux_test.go +190 −0
  • internal/host/claimlaunch_root.go +480 −0
  • internal/host/claimlaunch_root_test.go +507 −0
  • internal/host/claimlaunch_transport.go +126 −0
  • internal/host/claimlaunch_transport_test.go +284 −0
  • internal/host/claimoperations.go +110 −1
  • internal/host/claimowners.go +68 −5
  • internal/host/claimproduction.go +9 −1
  • internal/host/claimrelocation.go +63 −0
  • internal/host/claimrelocationrelease.go +100 −0
  • internal/host/claimroleassembly.go +92 −0
  • internal/host/claimroleassembly_linux.go +21 −7
  • internal/host/claimroleassembly_other.go +0 −4
  • internal/host/claimshape_rev2_shape_test.go +207 −0
  • internal/host/claimstop.go +111 −3
  • internal/host/claimstop_kernel_linux.go +61 −7
  • internal/host/claimstop_kernel_linux_test.go +7 −3
  • internal/host/claimstop_noprocess_rev3_linux_test.go +129 −0
  • internal/host/claimstop_noprocess_test.go +207 −0
  • internal/host/claimstop_producers.go +90 −4
  • internal/host/claimstop_run.go +4 −0
  • internal/host/claimstop_serving_test.go +3 −2
  • internal/host/claimstop_transport.go +4 −0
  • internal/host/claimstop_writers.go +253 −0
  • internal/host/claimstop_writers_linux.go +343 −0
  • internal/host/claimstop_writers_linux_test.go +229 −0
  • internal/host/claimstop_writers_rev4_linux_test.go +158 −0
  • internal/host/claimstop_writers_test.go +179 −0
  • internal/host/claimwakeassembly.go +105 −21
  • internal/host/claimwakestop.go +21 −9
  • internal/host/claimwakewriters.go +255 −0
  • internal/host/claimwakewriters_test.go +441 −0
  • internal/host/plan11_close_writers_transport_test.go +53 −0
  • internal/host/plan11_dispatch_test.go +318 −0
  • internal/host/plan11_launch_admission_test.go +25 −0
  • internal/host/plan11_launch_retry_linux_test.go +187 −0
  • internal/host/plan11_no_process_isolated_linux_test.go +32 −0
  • internal/host/plan11_release_test.go +128 −0
  • internal/host/plan11_rev4_containment_linux_test.go +306 −0
  • internal/host/plan11_stop_launch_test.go +73 −0
  • internal/host/plan11_wake_shared_test.go +79 −0
  • internal/host/plan11rev4_claimjournal_migration_linux_test.go +162 −0
  • internal/host/plan9fix2_claimjournal_migration_linux_test.go +56 −10
  • internal/host/plan9fix4_claimjournal_migration_linux_test.go +11 −6
  • internal/hostactors/plan11_console_reenroll_test.go +34 −0
  • internal/hostactors/plan11_enrolled_test.go +113 −0
  • internal/hostactors/roster.go +28 −0
  • internal/hostbox/journalservice.go +7 −1
  • internal/hostbox/launchjournal.go +2 −1
  • internal/hostbox/launchspec.go +25 −0
  • internal/hostbox/plan11_policy_snapshot_test.go +54 −0
  • internal/hostbox/plan11_recovery_unit_test.go +13 −0
  • internal/hostbox/plan11_relocation_policy_test.go +202 −0
  • internal/hostbox/plan11_writer_closure_api_test.go +38 −0
  • internal/hostbox/plan11_writer_closure_test.go +16 −0
  • internal/hostbox/rolelaunch.go +356 −0
  • internal/hostbox/rolelaunch_test.go +210 −0
  • internal/hostbox/stopjournal_reader.go +1 −1
  • internal/hostbox/wakepolicy.go +102 −3
  • internal/hostbox/work.go +1 −1
  • internal/hostbox/work_test.go +21 −0
  • internal/hostclaim/automaticloss.go +85 −0
  • internal/hostclaim/claim.go +8 −0
  • internal/hostclaim/delete.go +3 −0
  • internal/hostclaim/generation.go +29 −0
  • internal/hostclaim/plan11_evidence_test.go +122 −0
  • internal/hostclaim/plan11_relocation_session_test.go +153 −0
  • internal/hostclaim/plan9_d1_test.go +2 −1
  • internal/hostclaim/relocationrelease.go +24 −0
  • internal/hostclaim/sessionstep.go +14 −1
  • internal/hostguard/fence.go +11 −0
  • internal/instancectl/claim_filesystem_linux_test.go +146 −0
  • internal/instancectl/claim_writers_route_test.go +19 −0
  • internal/instancectl/claimexec.go +129 −0
  • internal/instancectl/claimexec_linux.go +16 −0
  • internal/instancectl/claimexec_other.go +7 −0
  • internal/instancectl/claimexec_rev3_linux_test.go +102 −0
  • internal/instancectl/claimexec_socket_linux.go +50 −0
  • internal/instancectl/claimexec_socket_other.go +7 −0
  • internal/instancectl/claimlaunch_rev2_test.go +92 −0
  • internal/instancectl/claimlaunch_snapshot.go +93 −0
  • internal/instancectl/claimlaunch_snapshot_linux.go +35 −0
  • internal/instancectl/claimlaunch_snapshot_other.go +5 −0
  • internal/instancectl/claimunit.go +306 −0
  • internal/instancectl/claimunit_test.go +253 −0
  • internal/instancectl/legacy_claim_cleanup.go +72 −0
  • internal/instancectl/legacy_claim_cleanup_rev3_test.go +270 −0
  • internal/instancectl/server.go +20 −1
  • internal/instanceexec/claimexec_linux.go +104 −0
  • internal/instanceexec/claimexec_other.go +7 −0
  • internal/instanceexec/claimexec_rev3_linux_test.go +137 −0
  • internal/instanceexec/claimlaunch_rev3_init_test.go +17 −0
  • internal/instanceexec/exec.go +9 −1
  • internal/instanceexec/init_linux.go +9 −0
  • internal/provision/plan9_b8_census_test.go +3 −2
  • internal/stopevidence/fds_linux.go +133 −53
  • internal/stopevidence/holders.go +45 −0
  • internal/stopevidence/holders_linux.go +183 −0
  • internal/stopevidence/holders_linux_test.go +234 −0
  • internal/stopevidence/holders_other.go +19 −0

CI passed — run details

internal/activator/claim_shape.go

Loading diff…

internal/activator/claim_shape_rev2_shape_test.go

Loading diff…

internal/activator/claim_shape_rev4_sidecar_error_test.go

Loading diff…

internal/activator/claim_snapshot.go

Loading diff…

internal/activator/claimprocess_root.go

Loading diff…

internal/activator/claimprocess_root_linux.go

Loading diff…

internal/activator/claimprocess_root_other.go

Loading diff…

internal/activator/claimwake.go

Loading diff…

internal/activator/plan11_pidfd_linux_test.go

Loading diff…

internal/activator/rolelaunch.go

Loading diff…

internal/activator/rolelaunch_linux.go

Loading diff…

internal/activator/rolelaunch_other.go

Loading diff…

internal/activator/rolelaunch_root_linux.go

Loading diff…

internal/activator/rolelaunch_root_linux_test.go

Loading diff…

internal/console/hostreports_test.go

Loading diff…

internal/host/claim_mask_filesystem_linux_test.go

Loading diff…

internal/host/claimconstruction.go

Loading diff…

internal/host/claimjournal_containment.go

Loading diff…

internal/host/claimjournal_containment_linux.go

Loading diff…

internal/host/claimjournal_containment_other.go

Loading diff…

internal/host/claimjournal_migration_linux.go

Loading diff…

internal/host/claimjournal_transport.go

Loading diff…

internal/host/claimlaunch_authority.go

Loading diff…

internal/host/claimlaunch_execpermit.go

Loading diff…

internal/host/claimlaunch_kernel_linux.go

Loading diff…

internal/host/claimlaunch_kernel_linux_test.go

Loading diff…

internal/host/claimlaunch_kernel_other.go

Loading diff…

internal/host/claimlaunch_observations.go

Loading diff…

internal/host/claimlaunch_production.go

Loading diff…

internal/host/claimlaunch_rev2_linux_test.go

Loading diff…

internal/host/claimlaunch_rev2_other_test.go

Loading diff…

internal/host/claimlaunch_rev2_test.go

Loading diff…

internal/host/claimlaunch_rev3_boundary_test.go

Loading diff…

internal/host/claimlaunch_rev3_child_linux_test.go

Loading diff…

internal/host/claimlaunch_root.go

Loading diff…

internal/host/claimlaunch_root_test.go

Loading diff…

internal/host/claimlaunch_transport.go

Loading diff…

internal/host/claimlaunch_transport_test.go

Loading diff…

internal/host/claimoperations.go

Loading diff…

internal/host/claimowners.go

Loading diff…

internal/host/claimproduction.go

Loading diff…

internal/host/claimrelocation.go

Loading diff…

internal/host/claimrelocationrelease.go

Loading diff…

internal/host/claimroleassembly.go

Loading diff…

internal/host/claimroleassembly_linux.go

Loading diff…

internal/host/claimroleassembly_other.go

Loading diff…

internal/host/claimshape_rev2_shape_test.go

Loading diff…

internal/host/claimstop.go

Loading diff…

internal/host/claimstop_kernel_linux.go

Loading diff…

internal/host/claimstop_kernel_linux_test.go

Loading diff…

internal/host/claimstop_noprocess_rev3_linux_test.go

Loading diff…

internal/host/claimstop_noprocess_test.go

Loading diff…

internal/host/claimstop_producers.go

Loading diff…

internal/host/claimstop_run.go

Loading diff…

internal/host/claimstop_serving_test.go

Loading diff…

internal/host/claimstop_transport.go

Loading diff…

internal/host/claimstop_writers.go

Loading diff…

internal/host/claimstop_writers_linux.go

Loading diff…

internal/host/claimstop_writers_linux_test.go

Loading diff…

internal/host/claimstop_writers_rev4_linux_test.go

Loading diff…

internal/host/claimstop_writers_test.go

Loading diff…

internal/host/claimwakeassembly.go

Loading diff…

internal/host/claimwakestop.go

Loading diff…

internal/host/claimwakewriters.go

Loading diff…

internal/host/claimwakewriters_test.go

Loading diff…

internal/host/plan11_close_writers_transport_test.go

Loading diff…

internal/host/plan11_dispatch_test.go

Loading diff…

internal/host/plan11_launch_admission_test.go

Loading diff…

internal/host/plan11_launch_retry_linux_test.go

Loading diff…

internal/host/plan11_no_process_isolated_linux_test.go

Loading diff…

internal/host/plan11_release_test.go

Loading diff…

internal/host/plan11_rev4_containment_linux_test.go

Loading diff…

internal/host/plan11_stop_launch_test.go

Loading diff…

internal/host/plan11_wake_shared_test.go

Loading diff…

internal/host/plan11rev4_claimjournal_migration_linux_test.go

Loading diff…

internal/host/plan9fix2_claimjournal_migration_linux_test.go

Loading diff…

internal/host/plan9fix4_claimjournal_migration_linux_test.go

Loading diff…

internal/hostactors/plan11_console_reenroll_test.go

Loading diff…

internal/hostactors/plan11_enrolled_test.go

Loading diff…

internal/hostactors/roster.go

Loading diff…

internal/hostbox/journalservice.go

Loading diff…

internal/hostbox/launchjournal.go

Loading diff…

internal/hostbox/launchspec.go

Loading diff…

internal/hostbox/plan11_policy_snapshot_test.go

Loading diff…

internal/hostbox/plan11_recovery_unit_test.go

Loading diff…

internal/hostbox/plan11_relocation_policy_test.go

Loading diff…

internal/hostbox/plan11_writer_closure_api_test.go

Loading diff…

internal/hostbox/plan11_writer_closure_test.go

Loading diff…

internal/hostbox/rolelaunch.go

Loading diff…

internal/hostbox/rolelaunch_test.go

Loading diff…

internal/hostbox/stopjournal_reader.go

Loading diff…

internal/hostbox/wakepolicy.go

Loading diff…

internal/hostbox/work.go

Loading diff…

internal/hostbox/work_test.go

Loading diff…

internal/hostclaim/automaticloss.go

Loading diff…

internal/hostclaim/claim.go

Loading diff…

internal/hostclaim/delete.go

Loading diff…

internal/hostclaim/generation.go

Loading diff…

internal/hostclaim/plan11_evidence_test.go

Loading diff…

internal/hostclaim/plan11_relocation_session_test.go

Loading diff…

internal/hostclaim/plan9_d1_test.go

Loading diff…

internal/hostclaim/relocationrelease.go

Loading diff…

internal/hostclaim/sessionstep.go

Loading diff…

internal/hostguard/fence.go

Loading diff…

internal/instancectl/claim_filesystem_linux_test.go

Loading diff…

internal/instancectl/claim_writers_route_test.go

Loading diff…

internal/instancectl/claimexec.go

Loading diff…

internal/instancectl/claimexec_linux.go

Loading diff…

internal/instancectl/claimexec_other.go

Loading diff…

internal/instancectl/claimexec_rev3_linux_test.go

Loading diff…

internal/instancectl/claimexec_socket_linux.go

Loading diff…

internal/instancectl/claimexec_socket_other.go

Loading diff…

internal/instancectl/claimlaunch_rev2_test.go

Loading diff…

internal/instancectl/claimlaunch_snapshot.go

Loading diff…

internal/instancectl/claimlaunch_snapshot_linux.go

Loading diff…

internal/instancectl/claimlaunch_snapshot_other.go

Loading diff…

internal/instancectl/claimunit.go

Loading diff…

internal/instancectl/claimunit_test.go

Loading diff…

internal/instancectl/legacy_claim_cleanup.go

Loading diff…

internal/instancectl/legacy_claim_cleanup_rev3_test.go

Loading diff…

internal/instancectl/server.go

Loading diff…

internal/instanceexec/claimexec_linux.go

Loading diff…

internal/instanceexec/claimexec_other.go

Loading diff…

internal/instanceexec/claimexec_rev3_linux_test.go

Loading diff…

internal/instanceexec/claimlaunch_rev3_init_test.go

Loading diff…

internal/instanceexec/exec.go

Loading diff…

internal/instanceexec/init_linux.go

Loading diff…

internal/provision/plan9_b8_census_test.go

Loading diff…

internal/stopevidence/fds_linux.go

Loading diff…

internal/stopevidence/holders.go

Loading diff…

internal/stopevidence/holders_linux.go

Loading diff…

internal/stopevidence/holders_linux_test.go

Loading diff…

internal/stopevidence/holders_other.go

Loading diff…