-
edge.SecureUnixListen sets the process-wide umask to 0177; concurrent goroutines create 0600 directories
Issue
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
A platform alias keeps the flat socket after its instance nests (502)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Census ruling: go-1.26.10 (envelope-only re-pin of '.' for the Go 1.26.10 floor)
Question
go-1.26.10-emudhra
open
claude agent, operated by paul@keymail.dev
4 messages ·
-
Blocked handoff: Carloku billing — verified165472b8 and archived Unit A WIP
handoff/carloku-blocked-20261020
open
paul@keymail.dev
2 messages ·
-
Run a one-off command with one instance's delivered config (carlos exec)
Feature Request
closed
claude agent, operated by paul@keymail.dev
4 messages ·
-
Antivirus approval should enable protection by default, with monitoring-only as an explicit choice
Feature Request
open
paul@keymail.dev
1 message ·
-
The console's evidence chooser fails, rather than skips, a receipt it can't verify (no-process receipts)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Expose pending antivirus requests to deployment operators in the console and CLI
Feature Request
open
paul@keymail.dev
1 message ·
-
Roster binding: an interrupted cold handover across a binding change needs an operator
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Carloku temporary static deployment returns 404 for accessible carlos account
Issue
open
paul@keymail.dev
2 messages ·
-
instances create prints 'unexpected response (status 202)' when a claim-mode console accepts it asynchronously
open
claude agent, operated by paul@keymail.dev
1 message ·
-
claim migration census: no class for pointer-digest ratchets (/data/pointer-digests); blocks populated cohorts
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
harness findings: btrfs FS_IOC_GETFSUUID ENOTTY blocks claim-mode consoles; console restart relies on an unshipped polkit rule
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
guard-armed box: one refused roll holds the channel's activation forever (no completion/cancel/exclusion path)
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
Per-app memory limit: amadan.net's whole process tree is capped at the 512 MB exec cgroup
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Carloku backend integration checkpoint: allowances, consent and metering
feat/carloku-backend-integration-20261003
open
paul@keymail.dev
6 messages ·
-
#267 gap: root honours CARLOS_S3_ENDPOINT from host.env (scrubbed AWS_ENDPOINT_URL_* but not this)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Keep bootstrap/carlos in step with the fleet: system update mirrors releases but new boxes still boot a stale binary
Feature Request
open
claude agent, operated by paul@keymail.dev
3 messages ·
-
Agent's in-process adopt rolls back a console update when it can't restart console.service itself ("Interactive authentication required")
Issue
closed
claude agent, operated by paul@keymail.dev
4 messages ·
-
Host floor guard: fix these before anyone runs guard-arm (Opus review of Plans 8/8b)
feat/hostclaim-floor
open
claude agent, operated by paul@keymail.dev
47 messages ·
-
claims-on box: leftover non-hibernating rows, census-missing root fallback and domain apex rows bypass the claim
open
claude agent, operated by paul@keymail.dev
1 message ·
-
guard-arm's directories inherit the caller's umask: umask 077 broke the guarded console (exit 203)
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
Release v0.27.0: coordination (hold main merges until tagged)
open
claude agent, operated by paul@keymail.dev
25 messages ·
-
Serialize edge route reloads through installation
fix/route-reload-order-20261018
open
paul@keymail.dev
1 message ·
-
census boxes can't update from an untagged system pointer (pointers are tagged only after a floor)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
claims: console-report evidence is overwritten by the agent's next status tick (~5 min)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
carlos agent panics at start without CARLOS_HIBERNATE_BUCKET (nil activator config, agent.go:309)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
No TLS certificate for a host homed only on a box that isn't the certificate issuer, until something sends TLS to the issuer
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Changing a box's CARLOS_POOLS leaves orphan routes that keep serving (and can serve stale data)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Custom-domain certs wait up to an hour after DNS points: order on the event, and say what's happening
open
claude agent, operated by paul@keymail.dev
1 message ·
-
windows go vet fails on test files across many packages (CI doesn't vet cross-OS)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Keep fleet credentials and tenancy consistent during reloads
fix/fleet-runtime-snapshot-20261018
open
paul@keymail.dev
1 message ·
-
Per-instance config from the provisioning credential
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
A conditional paths publish: ETag on the domain, If-Match on PUT …/paths
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Publish the instances and paths HTTP API, with an error code a client can branch on
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
A create-only provisioning role with a quota, for signup apps
Feature Request
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
Console mutation classifier allows deletes under control/boxes/ and control/box-volumes/, which dev's new box-records bucket policy refuses
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
claims: fence-credentials should read from stdin (--source -) before production cohorts
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Host claim Plan 8: three decisions for Paul (floor release, declare-lost attestation, actor roster)
design-replica-ownership
open
claude agent, operated by paul@keymail.dev
77 messages ·
-
Moves revert: a loss- or fence-bound source admission stalls the probed step (fails closed)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
An app token is app-wide, so one instance's code can delete a sibling instance
Issue
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
Provider-neutral box identity, so multi-box regions work without AWS
Feature Request
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Claim generation marker client ignores CARLOS_S3_ENDPOINT, so claim mode on MinIO fails generation publication
Issue
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Create door refuses an instance in the home region when the app's manifest names it (and the sentence has an empty name and an em dash)
open
claude agent, operated by paul@keymail.dev
1 message ·
-
Move an app to another account and keep its old hostname redirecting
Feature Request
open
claude agent, operated by paul@keymail.dev
2 messages ·
-
Add sponsored usage observation API and CLI
feat/carloku-sponsored-observation-20261015
open
paul@keymail.dev
1 message ·
-
Schedule the adoption door (instance-moves §9, G9) after the nested-layout rollout: every controld titogo instance converts to platform-run
Feature Request
open
claude agent, operated by paul@keymail.dev
6 messages ·
-
carlos instances create --from <host>: a new instance seeded from another's replica copy (same app, same account)
Feature Request
open
claude agent, operated by paul@keymail.dev
5 messages ·
-
carlos run: a member runs an app command against one instance, without root on the box
Feature Request
open
claude agent, operated by paul@keymail.dev
5 messages ·
-
carlos run: the cmd role is outside #292's start/stop fence in instance control
carlos-run
open
claude agent, operated by paul@keymail.dev
1 message ·
Older
amadan