amadan

carlos / platform Public

Merge origin/main (cbc0922e, claim Plans 8/8b) into moves-phase1

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
claude e801e313868f98826db3548f1ac44aa7a67269ab parent f7a2453parent cbc0922
408 files changed, +64441 −1004
  • README.md +24 −0
  • analytics_cmd.go +3 −0
  • apimode.go +178 −10
  • apimode_test.go +67 −22
  • approved_moves_copy_test.go +8 −4
  • apps.go +83 −28
  • apps_test.go +74 −19
  • auth_e2e_test.go +1 −1
  • canary.go +2 −2
  • cli.go +133 −7
  • cli_test.go +204 −0
  • cmd/console/hostclaim_test.go +2 −2
  • cmd/console/main.go +132 −3
  • cmd/console/main_test.go +6 −0
  • cmd/console/region_test.go +51 −0
  • deploy.go +34 −4
  • docs/site/cli.md +217 −9
  • docs/superpowers/notes/2026-10-07-region-ha-contracts.md +184 −0
  • docs/superpowers/plans/2026-09-26-temporary-static-sites-copy.md +113 −0
  • docs/superpowers/plans/2026-09-26-temporary-static-sites.md +6342 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-1-d1.md +1957 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-2-d2.md +721 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-3-d3.md +3599 −0
  • docs/superpowers/plans/2026-10-06-console-release-defences-plan-4-d4.md +437 −0
  • docs/superpowers/plans/2026-10-06-platform-geoip-FACTS.md +60 −0
  • docs/superpowers/plans/2026-10-06-platform-geoip-plan1.md +4210 −0
  • docs/superpowers/plans/2026-10-07-platform-geoip-plan2.md +242 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R1.md +13 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R10.md +47 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R11.md +44 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R12.md +43 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R13.md +35 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R14.md +37 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R2.md +29 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R3.md +25 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R4.md +33 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R5.md +28 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R6.md +29 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R7.md +33 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R8.md +34 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R9.md +39 −0
  • docs/superpowers/plans/CODEX-FINDINGS-GEOIP-PLAN1-R1.md +45 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R1.md +23 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R2.md +23 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R3.md +42 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R4.md +41 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R5.md +42 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R6.md +43 −0
  • docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R7.md +39 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-CODE1.md +47 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-PLAN1.md +39 −0
  • docs/superpowers/plans/CODEX-REVIEW-BRIEF-TEMPORARY-SITES-PLAN.md +45 −0
  • docs/superpowers/specs/2026-09-11-isolated-exec-design.md +63 −8
  • docs/superpowers/specs/2026-09-25-temporary-static-sites-design.md +619 −0
  • docs/superpowers/specs/2026-10-06-console-release-defences-design.md +653 −0
  • docs/superpowers/specs/2026-10-06-platform-geoip-design.md +1482 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R1.md +45 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R10.md +30 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R11.md +31 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R12.md +28 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R2.md +46 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R3.md +43 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R4.md +24 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R5.md +20 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R6.md +27 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R7.md +41 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R8.md +37 −0
  • docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R9.md +34 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R1.md +21 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R2.md +38 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R3.md +40 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R4.md +42 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R5.md +48 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R6.md +24 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R7.md +40 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R8.md +30 −0
  • docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R9.md +18 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r2.md +21 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r3.md +14 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r4.md +13 −0
  • docs/superpowers/specs/CODEX-FINDINGS-console-release-defences.md +19 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-GEOIP.md +75 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-TEMPORARY-SITES.md +60 −0
  • docs/superpowers/specs/CODEX-REVIEW-BRIEF-console-release-defences.md +58 −0
  • geo_cmd.go +100 −0
  • geo_cmd_test.go +35 −0
  • hostclaim_cli.go +173 −0
  • hostclaim_cli_test.go +32 −0
  • infra/modules/deployment-buckets/main.tf +24 −0
  • internal/activator/backend_exec.go +2 −2
  • internal/analytics/countries_test.go +99 −0
  • internal/analytics/day.go +63 −4
  • internal/analytics/meter.go +9 −1
  • internal/analytics/read.go +6 −0
  • internal/awsinv/exact_instance.go +96 −0
  • internal/awsinv/exact_instance_test.go +103 −0
  • internal/boxchoice/boxchoice.go +186 −0
  • internal/boxchoice/boxchoice_test.go +261 −0
  • internal/console/alertwatch.go +55 −4
  • internal/console/alertwatch_test.go +33 −0
  • internal/console/analyticsview.go +44 −0
  • internal/console/apianalytics.go +43 −1
  • internal/console/apianalytics_geo_test.go +26 −0
  • internal/console/apianalytics_test.go +43 −0
  • internal/console/apicli.go +166 −54
  • internal/console/apicli_test.go +165 −0
  • internal/console/apidomains.go +3 −0
  • internal/console/apigeo.go +62 −0
  • internal/console/apigeo_test.go +58 −0
  • internal/console/apihostclaim.go +107 −0
  • internal/console/apihostclaim_test.go +86 −0
  • internal/console/apiinstances.go +12 −0
  • internal/console/apimail.go +12 −0
  • internal/console/apipipeline.go +8 −0
  • internal/console/apirelay.go +3 −0
  • internal/console/apisidecars.go +6 −0
  • internal/console/apistatuslayout.go +24 −13
  • internal/console/apistatuslayout_test.go +26 −4
  • internal/console/apistore.go +6 −0
  • internal/console/apistore_provision.go +3 −0
  • internal/console/apisystemgeoip.go +389 −0
  • internal/console/apisystemgeoip_test.go +384 −0
  • internal/console/apisystemlayout.go +117 −0
  • internal/console/apisystemlayout_test.go +160 −0
  • internal/console/apisystemupdate.go +67 −4
  • internal/console/apisystemupdate_test.go +9 −5
  • internal/console/apitemporary.go +431 −0
  • internal/console/apitemporary_test.go +462 −0
  • internal/console/applocks.go +59 −0
  • internal/console/appsettings.go +48 −3
  • internal/console/authcli.go +42 −0
  • internal/console/boxchoice.go +30 −106
  • internal/console/boxchoice_test.go +26 −130
  • internal/console/controlplane.go +14 −0
  • internal/console/deletion_test.go +53 −0
  • internal/console/domainattach.go +3 −0
  • internal/console/domaincatchall.go +12 −0
  • internal/console/expirypass.go +253 −0
  • internal/console/expirypass_test.go +339 −0
  • internal/console/fleets.go +8 −0
  • internal/console/geoipfeed.go +399 −0
  • internal/console/geoipfeed_test.go +407 −0
  • internal/console/geoipfollower.go +108 −0
  • internal/console/geoipfollower_test.go +147 −0
  • internal/console/geoippublish.go +421 −0
  • internal/console/geoippublish_test.go +597 −0
  • internal/console/geoipverify.go +148 −0
  • internal/console/geoipverify_linux.go +14 −0
  • internal/console/geoipverify_main_test.go +28 −0
  • internal/console/geoipverify_other.go +6 −0
  • internal/console/hostactivation.go +227 −0
  • internal/console/hostactivation_test.go +207 −0
  • internal/console/hostreports.go +98 −0
  • internal/console/hostreports_put_test.go +35 −0
  • internal/console/hostreports_test.go +145 −0
  • internal/console/instanceprivatestore.go +3 −0
  • internal/console/layoutguard.go +154 −0
  • internal/console/layoutguard_test.go +236 −0
  • internal/console/materialize.go +22 −6
  • internal/console/ownership.go +44 −5
  • internal/console/pendingflow_test.go +89 −0
  • internal/console/pendinghandlers.go +18 −3
  • internal/console/regionpicker.go +40 −4
  • internal/console/restore.go +192 −0
  • internal/console/restore_test.go +445 −0
  • internal/console/server.go +155 −13
  • internal/console/settle.go +127 −0
  • internal/console/settle_test.go +245 −0
  • internal/console/store.go +151 −39
  • internal/console/svcprincipal.go +7 −0
  • internal/console/svcroutes_test.go +100 −34
  • internal/console/temphook_test.go +66 −0
  • internal/console/templates/app_analytics.html +3 −0
  • internal/console/templates/app_new.html +1 −1
  • internal/console/templates/app_settings.html +3 −2
  • internal/console/templates/appnav.html +7 −0
  • internal/console/templates/apps.html +2 −2
  • internal/console/templates/trash.html +11 −8
  • internal/console/tempnames_test.go +95 −0
  • internal/console/temprefusal.go +51 −0
  • internal/console/temprefusal_test.go +343 −0
  • internal/console/tempregion_test.go +68 −0
  • internal/console/tempstore.go +219 −0
  • internal/console/tempstore_test.go +233 −0
  • internal/console/view.go +4 −1
  • internal/edge/analytics.go +9 −1
  • internal/edge/backhaul_e2e_test.go +10 −3
  • internal/edge/cookiescope.go +232 −0
  • internal/edge/cookiescope_test.go +249 −0
  • internal/edge/edge.go +87 −6
  • internal/edge/geoipheaders.go +59 −0
  • internal/edge/geoipheaders_test.go +427 −0
  • internal/edge/geoipmirror.go +682 −0
  • internal/edge/geoipmirror_test.go +595 −0
  • internal/edge/tunnel_geo_e2e_test.go +172 −0
  • internal/fleetapi/fleetapi.go +5 −0
  • internal/geo/mmdb.go +240 −25
  • internal/geo/mmdb_test.go +155 −0
  • internal/geo/pathological_test.go +97 −0
  • internal/geo/swappable.go +88 −0
  • internal/geo/swappable_test.go +108 −0
  • internal/geo/testdata/README +13 −1
  • internal/geo/testdata/pathological-bigmap.mmdb binary
  • internal/geo/testdata/pathological-dag.mmdb binary
  • internal/geo/testdata/pathological-empty-dag.mmdb binary
  • internal/geo/testdata/pathological-metadata.mmdb binary
  • internal/geoip/answer.go +190 −0
  • internal/geoip/answer_test.go +116 −0
  • internal/geoip/archive.go +71 −0
  • internal/geoip/archive_test.go +130 −0
  • internal/geoip/feed.go +83 −0
  • internal/geoip/pointer.go +140 −0
  • internal/geoip/pointer_test.go +71 −0
  • internal/host/activationguard_test.go +11 −8
  • internal/host/agent.go +319 −32
  • internal/host/agent_geoip_test.go +21 −0
  • internal/host/agent_layout_test.go +343 −3
  • internal/host/agent_test.go +23 −18
  • internal/host/alertsink.go +111 −0
  • internal/host/alertsink_geoip_test.go +26 −0
  • internal/host/claimreport.go +39 −0
  • internal/host/converge_adopted_test.go +5 −5
  • internal/host/fileowner_other.go +4 −0
  • internal/host/fileowner_unix.go +10 −0
  • internal/host/guardarm.go +181 −0
  • internal/host/guardexec.go +80 −0
  • internal/host/guardparticipation_test.go +250 −0
  • internal/host/guardroster.go +13 −0
  • internal/host/guardtransaction.go +362 −0
  • internal/host/guardtransaction_test.go +366 −0
  • internal/host/hostfencepass.go +75 −0
  • internal/host/layoutleg.go +286 −11
  • internal/host/metrics_loop.go +8 −0
  • internal/host/movesfloor.go +12 −3
  • internal/host/movesfloor_linux_test.go +43 −0
  • internal/host/proofask.go +187 −0
  • internal/host/proofask_test.go +378 −0
  • internal/host/proofobserve.go +140 −0
  • internal/host/proofobserve_test.go +239 −0
  • internal/host/proofroot.go +294 −0
  • internal/host/proofroot_test.go +440 −0
  • internal/host/proofstatus.go +15 −0
  • internal/host/refusalwatch.go +59 −0
  • internal/host/refusalwatch_test.go +161 −0
  • internal/host/systemapply.go +104 −19
  • internal/host/systemapply_test.go +57 −3
  • internal/host/systemparticipation.go +33 −29
  • internal/host/units/carlos-instance-control.service +10 −0
  • internal/host/units/carlos-instance-seed@.service +3 −0
  • internal/host/units/carlos-instance-sidecar@.service +6 −0
  • internal/host/units/carlos-instance@.service +6 −0
  • internal/host/units_isolation_test.go +9 −2
  • internal/host/unitsettle.go +314 −0
  • internal/host/unitsettle_test.go +539 −0
  • internal/hostactors/activation_complete.go +50 −0
  • internal/hostactors/activation_publication.go +51 −0
  • internal/hostactors/attempt_regression_test.go +103 −0
  • internal/hostactors/authority_regression_test.go +285 −0
  • internal/hostactors/census.go +442 −0
  • internal/hostactors/census_test.go +103 −0
  • internal/hostactors/console_invitation.go +58 −0
  • internal/hostactors/console_invitation_test.go +39 −0
  • internal/hostactors/enroll.go +89 −0
  • internal/hostactors/enroll_test.go +140 −0
  • internal/hostactors/enrollment_confirmation.go +157 −0
  • internal/hostactors/fence_authority.go +57 −0
  • internal/hostactors/invitation.go +94 −0
  • internal/hostactors/lifecycle.go +56 −0
  • internal/hostactors/membership.go +64 −0
  • internal/hostactors/private.go +29 −0
  • internal/hostactors/publication.go +79 −0
  • internal/hostactors/references.go +68 −0
  • internal/hostactors/reservations.go +124 −0
  • internal/hostactors/roster.go +287 −0
  • internal/hostactors/roster_test.go +78 −0
  • internal/hostclaim/claim.go +27 −4
  • internal/hostclaim/create.go +3 −0
  • internal/hostclaim/delete.go +3 −0
  • internal/hostclaim/execution_ack.go +56 −0
  • internal/hostclaim/execution_ack_test.go +43 −0
  • internal/hostclaim/generation.go +23 −2
  • internal/hostclaim/generation_test.go +2 −3
  • internal/hostclaim/lossidentity_test.go +125 −0
  • internal/hostclaim/lossrecord.go +375 −0
  • internal/hostclaim/lossrecord_test.go +625 −0
  • internal/hostclaim/lost.go +509 −0
  • internal/hostclaim/lost_test.go +441 −0
  • internal/hostclaim/rev713_test.go +2 −1
  • internal/hostexec/clock_linux.go +32 −0
  • internal/hostexec/clock_other.go +11 −0
  • internal/hostexec/clock_other_test.go +17 −0
  • internal/hostexec/controller.go +701 −0
  • internal/hostexec/controller_test.go +441 −0
  • internal/hostexec/local_other.go +17 −0
  • internal/hostexec/local_unix.go +197 −0
  • internal/hostexec/record.go +94 −0
  • internal/hostexec/review_test.go +460 −0
  • internal/hostexec/updateidentity_test.go +174 −0
  • internal/hostfence/challenge.go +237 −0
  • internal/hostfence/challenge_test.go +263 −0
  • internal/hostfence/termination.go +134 −0
  • internal/hostfence/termination_test.go +197 −0
  • internal/hostfiles/contract.go +142 −0
  • internal/hostfiles/hostfiles_test.go +43 −43
  • internal/hostfiles/manifest.go +55 −3
  • internal/hostfiles/origins_test.go +353 −0
  • internal/hostfiles/publisher.go +7 −6
  • internal/hostfiles/restore.go +69 −25
  • internal/hostfiles/sync.go +11 −0
  • internal/hostfiles/sync_test.go +2 −2
  • internal/hostfiles/sync_unix_test.go +102 −0
  • internal/hostfiles/wake.go +3 −3
  • internal/hostfiles/wake_test.go +4 −4
  • internal/hostfloor/disk.go +186 −0
  • internal/hostfloor/floor.go +142 −0
  • internal/hostfloor/floor_test.go +89 −0
  • internal/hostfloor/image_linux.go +88 −0
  • internal/hostfloor/image_other.go +13 −0
  • internal/hostfloor/participation.go +42 −0
  • internal/hostfloor/participation_test.go +25 −0
  • internal/hostfloor/remote.go +41 −0
  • internal/hostfloor/report.go +103 −0
  • internal/hostfloor/report_test.go +21 −0
  • internal/hostguard/local.go +13 −0
  • internal/hostguard/local_test.go +45 −0
  • internal/hostquarantine/quarantine.go +116 −0
  • internal/hostquarantine/quarantine_test.go +77 −0
  • internal/hostresolve/readmit.go +147 −0
  • internal/hostresolve/readmit_test.go +150 −0
  • internal/hostresolve/review3_test.go +243 −0
  • internal/hostresolve/service.go +318 −0
  • internal/hostresolve/service_test.go +252 −0
  • internal/instancectl/hardening.go +52 −17
  • internal/instancectl/hardening_test.go +163 −6
  • internal/instancectl/localaddrs.go +127 −0
  • internal/instancectl/server.go +113 −2
  • internal/instancectl/server_test.go +101 −0
  • internal/instanceexec/exec.go +5 −4
  • internal/instanceexec/families_test.go +107 −0
  • internal/instanceexec/init_linux.go +131 −0
  • internal/instanceexec/init_test.go +475 −0
  • internal/instanceexec/probe.go +0 −20
  • internal/instanceexec/probe_hardening.go +6 −12
  • internal/instanceexec/probe_hardening_test.go +2 −8
  • internal/instanceexec/probe_test.go +0 −4
  • internal/instanceexec/scope_linux.go +2 −12
  • internal/instanceexec/scope_other.go +1 −1
  • internal/layout/pass.go +9 −0
  • internal/lease/execution_store.go +20 −0
  • internal/lease/execution_store_test.go +33 −0
  • internal/metrics/alert.go +23 −0
  • internal/metrics/alert_test.go +48 −0
  • internal/provision/reconcile.go +65 −4
  • internal/provision/reconcile_test.go +107 −7
  • internal/release/adopt.go +246 −5
  • internal/release/adopt_test.go +136 −0
  • internal/release/healthy.go +118 −0
  • internal/release/healthy_test.go +62 −0
  • internal/release/layoutintent.go +74 −0
  • internal/release/layoutintent_test.go +53 −0
  • internal/release/program.go +178 −0
  • internal/release/program_test.go +344 −0
  • internal/release/programhistory.go +60 −0
  • internal/release/programhistory_test.go +440 −0
  • internal/release/proof.go +255 −0
  • internal/release/proof_test.go +203 −0
  • internal/release/proofgate.go +356 −0
  • internal/release/proofgate_test.go +627 −0
  • internal/release/proofpolicy.go +165 −0
  • internal/release/proofpolicy_test.go +104 −0
  • internal/release/putfrom_test.go +117 −0
  • internal/release/refusal.go +172 −0
  • internal/release/refusal_test.go +86 −0
  • internal/release/release.go +84 −5
  • internal/release/release_test.go +145 −0
  • internal/release/rollback.go +138 −0
  • internal/release/rollback_test.go +486 −0
  • internal/release/rootenvelope.go +91 −0
  • internal/release/rootenvelope_test.go +44 −0
  • internal/release/store.go +158 −5
  • internal/release/systemidentity.go +111 −0
  • internal/release/systempointer.go +62 −30
  • internal/release/systempublication.go +93 −0
  • internal/release/systempublication_test.go +98 −0
  • internal/release/temporary.go +51 −0
  • internal/release/temporary_test.go +86 −0
  • internal/release/trash.go +21 −2
  • internal/status/console_process.go +12 −0
  • internal/status/contract_test.go +32 −14
  • internal/status/dryrun.go +58 −0
  • internal/status/snapshot.go +108 −3
  • internal/status/snapshot_test.go +17 −0
  • internal/status/status_test.go +95 −0
  • internal/tunnelclient/mark_test.go +20 −0
  • internal/tunnelclient/tunnelclient.go +27 −1
  • main.go +7 −2
  • mutation_message_test.go +2 −2
  • proof_cli.go +182 −0
  • proof_cli_test.go +149 −0
  • status_instances.go +58 −4
  • status_instances_test.go +48 −0
  • statuslive_test.go +131 −0
  • system.go +173 −1
  • system_geoip.go +293 −0
  • system_geoip_test.go +145 −0
  • system_test.go +26 −0
  • temporary.go +306 −0
  • temporary_test.go +350 −0
README.md

Loading diff…

analytics_cmd.go

Loading diff…

apimode.go

Loading diff…

apimode_test.go

Loading diff…

approved_moves_copy_test.go

Loading diff…

apps.go

Loading diff…

apps_test.go

Loading diff…

auth_e2e_test.go

Loading diff…

canary.go

Loading diff…

cli.go

Loading diff…

cli_test.go

Loading diff…

cmd/console/hostclaim_test.go

Loading diff…

cmd/console/main.go

Loading diff…

cmd/console/main_test.go

Loading diff…

cmd/console/region_test.go

Loading diff…

deploy.go

Loading diff…

docs/site/cli.md

Loading diff…

docs/superpowers/notes/2026-10-07-region-ha-contracts.md

Loading diff…

docs/superpowers/plans/2026-09-26-temporary-static-sites-copy.md

Loading diff…

docs/superpowers/plans/2026-09-26-temporary-static-sites.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-1-d1.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-2-d2.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-3-d3.md

Loading diff…

docs/superpowers/plans/2026-10-06-console-release-defences-plan-4-d4.md

Loading diff…

docs/superpowers/plans/2026-10-06-platform-geoip-FACTS.md

Loading diff…

docs/superpowers/plans/2026-10-06-platform-geoip-plan1.md

Loading diff…

docs/superpowers/plans/2026-10-07-platform-geoip-plan2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R10.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R11.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R12.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R13.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R14.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R3.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R4.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R5.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R6.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R7.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R8.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-CODE1-R9.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-GEOIP-PLAN1-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R1.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R2.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R3.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R4.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R5.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R6.md

Loading diff…

docs/superpowers/plans/CODEX-FINDINGS-TEMPORARY-SITES-PLAN-R7.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-CODE1.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-GEOIP-PLAN1.md

Loading diff…

docs/superpowers/plans/CODEX-REVIEW-BRIEF-TEMPORARY-SITES-PLAN.md

Loading diff…

docs/superpowers/specs/2026-09-11-isolated-exec-design.md

Loading diff…

docs/superpowers/specs/2026-09-25-temporary-static-sites-design.md

Loading diff…

docs/superpowers/specs/2026-10-06-console-release-defences-design.md

Loading diff…

docs/superpowers/specs/2026-10-06-platform-geoip-design.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R10.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R11.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R12.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R6.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R7.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R8.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-GEOIP-R9.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R1.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R5.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R6.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R7.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R8.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-TEMPORARY-SITES-R9.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r2.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r3.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences-r4.md

Loading diff…

docs/superpowers/specs/CODEX-FINDINGS-console-release-defences.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-GEOIP.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-TEMPORARY-SITES.md

Loading diff…

docs/superpowers/specs/CODEX-REVIEW-BRIEF-console-release-defences.md

Loading diff…

geo_cmd.go

Loading diff…

geo_cmd_test.go

Loading diff…

hostclaim_cli.go

Loading diff…

hostclaim_cli_test.go

Loading diff…

infra/modules/deployment-buckets/main.tf

Loading diff…

internal/activator/backend_exec.go

Loading diff…

internal/analytics/countries_test.go

Loading diff…

internal/analytics/day.go

Loading diff…

internal/analytics/meter.go

Loading diff…

internal/analytics/read.go

Loading diff…

internal/awsinv/exact_instance.go

Loading diff…

internal/awsinv/exact_instance_test.go

Loading diff…

internal/boxchoice/boxchoice.go

Loading diff…

internal/boxchoice/boxchoice_test.go

Loading diff…

internal/console/alertwatch.go

Loading diff…

internal/console/alertwatch_test.go

Loading diff…

internal/console/analyticsview.go

Loading diff…

internal/console/apianalytics.go

Loading diff…

internal/console/apianalytics_geo_test.go

Loading diff…

internal/console/apianalytics_test.go

Loading diff…

internal/console/apicli.go

Loading diff…

internal/console/apicli_test.go

Loading diff…

internal/console/apidomains.go

Loading diff…

internal/console/apigeo.go

Loading diff…

internal/console/apigeo_test.go

Loading diff…

internal/console/apihostclaim.go

Loading diff…

internal/console/apihostclaim_test.go

Loading diff…

internal/console/apiinstances.go

Loading diff…

internal/console/apimail.go

Loading diff…

internal/console/apipipeline.go

Loading diff…

internal/console/apirelay.go

Loading diff…

internal/console/apisidecars.go

Loading diff…

internal/console/apistatuslayout.go

Loading diff…

internal/console/apistatuslayout_test.go

Loading diff…

internal/console/apistore.go

Loading diff…

internal/console/apistore_provision.go

Loading diff…

internal/console/apisystemgeoip.go

Loading diff…

internal/console/apisystemgeoip_test.go

Loading diff…

internal/console/apisystemlayout.go

Loading diff…

internal/console/apisystemlayout_test.go

Loading diff…

internal/console/apisystemupdate.go

Loading diff…

internal/console/apisystemupdate_test.go

Loading diff…

internal/console/apitemporary.go

Loading diff…

internal/console/apitemporary_test.go

Loading diff…

internal/console/applocks.go

Loading diff…

internal/console/appsettings.go

Loading diff…

internal/console/authcli.go

Loading diff…

internal/console/boxchoice.go

Loading diff…

internal/console/boxchoice_test.go

Loading diff…

internal/console/controlplane.go

Loading diff…

internal/console/deletion_test.go

Loading diff…

internal/console/domainattach.go

Loading diff…

internal/console/domaincatchall.go

Loading diff…

internal/console/expirypass.go

Loading diff…

internal/console/expirypass_test.go

Loading diff…

internal/console/fleets.go

Loading diff…

internal/console/geoipfeed.go

Loading diff…

internal/console/geoipfeed_test.go

Loading diff…

internal/console/geoipfollower.go

Loading diff…

internal/console/geoipfollower_test.go

Loading diff…

internal/console/geoippublish.go

Loading diff…

internal/console/geoippublish_test.go

Loading diff…

internal/console/geoipverify.go

Loading diff…

internal/console/geoipverify_linux.go

Loading diff…

internal/console/geoipverify_main_test.go

Loading diff…

internal/console/geoipverify_other.go

Loading diff…

internal/console/hostactivation.go

Loading diff…

internal/console/hostactivation_test.go

Loading diff…

internal/console/hostreports.go

Loading diff…

internal/console/hostreports_put_test.go

Loading diff…

internal/console/hostreports_test.go

Loading diff…

internal/console/instanceprivatestore.go

Loading diff…

internal/console/layoutguard.go

Loading diff…

internal/console/layoutguard_test.go

Loading diff…

internal/console/materialize.go

Loading diff…

internal/console/ownership.go

Loading diff…

internal/console/pendingflow_test.go

Loading diff…

internal/console/pendinghandlers.go

Loading diff…

internal/console/regionpicker.go

Loading diff…

internal/console/restore.go

Loading diff…

internal/console/restore_test.go

Loading diff…

internal/console/server.go

Loading diff…

internal/console/settle.go

Loading diff…

internal/console/settle_test.go

Loading diff…

internal/console/store.go

Loading diff…

internal/console/svcprincipal.go

Loading diff…

internal/console/svcroutes_test.go

Loading diff…

internal/console/temphook_test.go

Loading diff…

internal/console/templates/app_analytics.html

Loading diff…

internal/console/templates/app_new.html

Loading diff…

internal/console/templates/app_settings.html

Loading diff…

internal/console/templates/appnav.html

Loading diff…

internal/console/templates/apps.html

Loading diff…

internal/console/templates/trash.html

Loading diff…

internal/console/tempnames_test.go

Loading diff…

internal/console/temprefusal.go

Loading diff…

internal/console/temprefusal_test.go

Loading diff…

internal/console/tempregion_test.go

Loading diff…

internal/console/tempstore.go

Loading diff…

internal/console/tempstore_test.go

Loading diff…

internal/console/view.go

Loading diff…

internal/edge/analytics.go

Loading diff…

internal/edge/backhaul_e2e_test.go

Loading diff…

internal/edge/cookiescope.go

Loading diff…

internal/edge/cookiescope_test.go

Loading diff…

internal/edge/edge.go

Loading diff…

internal/edge/geoipheaders.go

Loading diff…

internal/edge/geoipheaders_test.go

Loading diff…

internal/edge/geoipmirror.go

Loading diff…

internal/edge/geoipmirror_test.go

Loading diff…

internal/edge/tunnel_geo_e2e_test.go

Loading diff…

internal/fleetapi/fleetapi.go

Loading diff…

internal/geo/mmdb.go

Loading diff…

internal/geo/mmdb_test.go

Loading diff…

internal/geo/pathological_test.go

Loading diff…

internal/geo/swappable.go

Loading diff…

internal/geo/swappable_test.go

Loading diff…

internal/geo/testdata/README

Loading diff…

internal/geo/testdata/pathological-bigmap.mmdb

Loading diff…

internal/geo/testdata/pathological-dag.mmdb

Loading diff…

internal/geo/testdata/pathological-empty-dag.mmdb

Loading diff…

internal/geo/testdata/pathological-metadata.mmdb

Loading diff…

internal/geoip/answer.go

Loading diff…

internal/geoip/answer_test.go

Loading diff…

internal/geoip/archive.go

Loading diff…

internal/geoip/archive_test.go

Loading diff…

internal/geoip/feed.go

Loading diff…

internal/geoip/pointer.go

Loading diff…

internal/geoip/pointer_test.go

Loading diff…

internal/host/activationguard_test.go

Loading diff…

internal/host/agent.go

Loading diff…

internal/host/agent_geoip_test.go

Loading diff…

internal/host/agent_layout_test.go

Loading diff…

internal/host/agent_test.go

Loading diff…

internal/host/alertsink.go

Loading diff…

internal/host/alertsink_geoip_test.go

Loading diff…

internal/host/claimreport.go

Loading diff…

internal/host/converge_adopted_test.go

Loading diff…

internal/host/fileowner_other.go

Loading diff…

internal/host/fileowner_unix.go

Loading diff…

internal/host/guardarm.go

Loading diff…

internal/host/guardexec.go

Loading diff…

internal/host/guardparticipation_test.go

Loading diff…

internal/host/guardroster.go

Loading diff…

internal/host/guardtransaction.go

Loading diff…

internal/host/guardtransaction_test.go

Loading diff…

internal/host/hostfencepass.go

Loading diff…

internal/host/layoutleg.go

Loading diff…

internal/host/metrics_loop.go

Loading diff…

internal/host/movesfloor.go

Loading diff…

internal/host/movesfloor_linux_test.go

Loading diff…

internal/host/proofask.go

Loading diff…

internal/host/proofask_test.go

Loading diff…

internal/host/proofobserve.go

Loading diff…

internal/host/proofobserve_test.go

Loading diff…

internal/host/proofroot.go

Loading diff…

internal/host/proofroot_test.go

Loading diff…

internal/host/proofstatus.go

Loading diff…

internal/host/refusalwatch.go

Loading diff…

internal/host/refusalwatch_test.go

Loading diff…

internal/host/systemapply.go

Loading diff…

internal/host/systemapply_test.go

Loading diff…

internal/host/systemparticipation.go

Loading diff…

internal/host/units/carlos-instance-control.service

Loading diff…

internal/host/units/carlos-instance-seed@.service

Loading diff…

internal/host/units/carlos-instance-sidecar@.service

Loading diff…

internal/host/units/carlos-instance@.service

Loading diff…

internal/host/units_isolation_test.go

Loading diff…

internal/host/unitsettle.go

Loading diff…

internal/host/unitsettle_test.go

Loading diff…

internal/hostactors/activation_complete.go

Loading diff…

internal/hostactors/activation_publication.go

Loading diff…

internal/hostactors/attempt_regression_test.go

Loading diff…

internal/hostactors/authority_regression_test.go

Loading diff…

internal/hostactors/census.go

Loading diff…

internal/hostactors/census_test.go

Loading diff…

internal/hostactors/console_invitation.go

Loading diff…

internal/hostactors/console_invitation_test.go

Loading diff…

internal/hostactors/enroll.go

Loading diff…

internal/hostactors/enroll_test.go

Loading diff…

internal/hostactors/enrollment_confirmation.go

Loading diff…

internal/hostactors/fence_authority.go

Loading diff…

internal/hostactors/invitation.go

Loading diff…

internal/hostactors/lifecycle.go

Loading diff…

internal/hostactors/membership.go

Loading diff…

internal/hostactors/private.go

Loading diff…

internal/hostactors/publication.go

Loading diff…

internal/hostactors/references.go

Loading diff…

internal/hostactors/reservations.go

Loading diff…

internal/hostactors/roster.go

Loading diff…

internal/hostactors/roster_test.go

Loading diff…

internal/hostclaim/claim.go

Loading diff…

internal/hostclaim/create.go

Loading diff…

internal/hostclaim/delete.go

Loading diff…

internal/hostclaim/execution_ack.go

Loading diff…

internal/hostclaim/execution_ack_test.go

Loading diff…

internal/hostclaim/generation.go

Loading diff…

internal/hostclaim/generation_test.go

Loading diff…

internal/hostclaim/lossidentity_test.go

Loading diff…

internal/hostclaim/lossrecord.go

Loading diff…

internal/hostclaim/lossrecord_test.go

Loading diff…

internal/hostclaim/lost.go

Loading diff…

internal/hostclaim/lost_test.go

Loading diff…

internal/hostclaim/rev713_test.go

Loading diff…

internal/hostexec/clock_linux.go

Loading diff…

internal/hostexec/clock_other.go

Loading diff…

internal/hostexec/clock_other_test.go

Loading diff…

internal/hostexec/controller.go

Loading diff…

internal/hostexec/controller_test.go

Loading diff…

internal/hostexec/local_other.go

Loading diff…

internal/hostexec/local_unix.go

Loading diff…

internal/hostexec/record.go

Loading diff…

internal/hostexec/review_test.go

Loading diff…

internal/hostexec/updateidentity_test.go

Loading diff…

internal/hostfence/challenge.go

Loading diff…

internal/hostfence/challenge_test.go

Loading diff…

internal/hostfence/termination.go

Loading diff…

internal/hostfence/termination_test.go

Loading diff…

internal/hostfiles/contract.go

Loading diff…

internal/hostfiles/hostfiles_test.go

Loading diff…

internal/hostfiles/manifest.go

Loading diff…

internal/hostfiles/origins_test.go

Loading diff…

internal/hostfiles/publisher.go

Loading diff…

internal/hostfiles/restore.go

Loading diff…

internal/hostfiles/sync.go

Loading diff…

internal/hostfiles/sync_test.go

Loading diff…

internal/hostfiles/sync_unix_test.go

Loading diff…

internal/hostfiles/wake.go

Loading diff…

internal/hostfiles/wake_test.go

Loading diff…

internal/hostfloor/disk.go

Loading diff…

internal/hostfloor/floor.go

Loading diff…

internal/hostfloor/floor_test.go

Loading diff…

internal/hostfloor/image_linux.go

Loading diff…

internal/hostfloor/image_other.go

Loading diff…

internal/hostfloor/participation.go

Loading diff…

internal/hostfloor/participation_test.go

Loading diff…

internal/hostfloor/remote.go

Loading diff…

internal/hostfloor/report.go

Loading diff…

internal/hostfloor/report_test.go

Loading diff…

internal/hostguard/local.go

Loading diff…

internal/hostguard/local_test.go

Loading diff…

internal/hostquarantine/quarantine.go

Loading diff…

internal/hostquarantine/quarantine_test.go

Loading diff…

internal/hostresolve/readmit.go

Loading diff…

internal/hostresolve/readmit_test.go

Loading diff…

internal/hostresolve/review3_test.go

Loading diff…

internal/hostresolve/service.go

Loading diff…

internal/hostresolve/service_test.go

Loading diff…

internal/instancectl/hardening.go

Loading diff…

internal/instancectl/hardening_test.go

Loading diff…

internal/instancectl/localaddrs.go

Loading diff…

internal/instancectl/server.go

Loading diff…

internal/instancectl/server_test.go

Loading diff…

internal/instanceexec/exec.go

Loading diff…

internal/instanceexec/families_test.go

Loading diff…

internal/instanceexec/init_linux.go

Loading diff…

internal/instanceexec/init_test.go

Loading diff…

internal/instanceexec/probe.go

Loading diff…

internal/instanceexec/probe_hardening.go

Loading diff…

internal/instanceexec/probe_hardening_test.go

Loading diff…

internal/instanceexec/probe_test.go

Loading diff…

internal/instanceexec/scope_linux.go

Loading diff…

internal/instanceexec/scope_other.go

Loading diff…

internal/layout/pass.go

Loading diff…

internal/lease/execution_store.go

Loading diff…

internal/lease/execution_store_test.go

Loading diff…

internal/metrics/alert.go

Loading diff…

internal/metrics/alert_test.go

Loading diff…

internal/provision/reconcile.go

Loading diff…

internal/provision/reconcile_test.go

Loading diff…

internal/release/adopt.go

Loading diff…

internal/release/adopt_test.go

Loading diff…

internal/release/healthy.go

Loading diff…

internal/release/healthy_test.go

Loading diff…

internal/release/layoutintent.go

Loading diff…

internal/release/layoutintent_test.go

Loading diff…

internal/release/program.go

Loading diff…

internal/release/program_test.go

Loading diff…

internal/release/programhistory.go

Loading diff…

internal/release/programhistory_test.go

Loading diff…

internal/release/proof.go

Loading diff…

internal/release/proof_test.go

Loading diff…

internal/release/proofgate.go

Loading diff…

internal/release/proofgate_test.go

Loading diff…

internal/release/proofpolicy.go

Loading diff…

internal/release/proofpolicy_test.go

Loading diff…

internal/release/putfrom_test.go

Loading diff…

internal/release/refusal.go

Loading diff…

internal/release/refusal_test.go

Loading diff…

internal/release/release.go

Loading diff…

internal/release/release_test.go

Loading diff…

internal/release/rollback.go

Loading diff…

internal/release/rollback_test.go

Loading diff…

internal/release/rootenvelope.go

Loading diff…

internal/release/rootenvelope_test.go

Loading diff…

internal/release/store.go

Loading diff…

internal/release/systemidentity.go

Loading diff…

internal/release/systempointer.go

Loading diff…

internal/release/systempublication.go

Loading diff…

internal/release/systempublication_test.go

Loading diff…

internal/release/temporary.go

Loading diff…

internal/release/temporary_test.go

Loading diff…

internal/release/trash.go

Loading diff…

internal/status/console_process.go

Loading diff…

internal/status/contract_test.go

Loading diff…

internal/status/dryrun.go

Loading diff…

internal/status/snapshot.go

Loading diff…

internal/status/snapshot_test.go

Loading diff…

internal/status/status_test.go

Loading diff…

internal/tunnelclient/mark_test.go

Loading diff…

internal/tunnelclient/tunnelclient.go

Loading diff…

main.go

Loading diff…

mutation_message_test.go

Loading diff…

proof_cli.go

Loading diff…

proof_cli_test.go

Loading diff…

status_instances.go

Loading diff…

status_instances_test.go

Loading diff…

statuslive_test.go

Loading diff…

system.go

Loading diff…

system_geoip.go

Loading diff…

system_geoip_test.go

Loading diff…

system_test.go

Loading diff…

temporary.go

Loading diff…

temporary_test.go

Loading diff…