| 1 | # Fix1 requirement 7: individually reviewed merge sites and fix1 authority changes; earlier freezes remain intact. |
| 2 | @legacy 6a8e6cb5a3039d651b40bca44c609522ac0641a0de4ffddb43f26aee8d2fc68c internal/activator/activator.go Service.WakeWorker legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Shares the pending wake completion; agent scheduling remains legacy. registry:Host@1163,registry:Host@1573,registry:Host@755,registry:Host@785,whole:Route@1146 f2b4264c60829851de2e5b59dbc7da790f59d256ae50b1f465a92f344e9381d0 |
| 3 | internal/activator/activator.go Service.WakeWorker legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Shares the pending wake completion; agent scheduling remains legacy. registry:Host@1163,registry:Host@1573,registry:Host@755,registry:Host@785,whole:Route@1146 f2b4264c60829851de2e5b59dbc7da790f59d256ae50b1f465a92f344e9381d0 |
| 4 | @legacy 8248741ccabdeb67ee2591d233b6f45a49ace3d1d4ccd692f0271e894d3c51c3 internal/activator/activator.go Service.begin legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Waits for the pending wake instead of issuing another; agent scheduling remains legacy. registry:Host@1119,registry:Host@1198,registry:Host@248,registry:Host@327,whole:Route@1128,whole:Route@1135 3955a32110d69d8672b70a762651bf476da0305f4ef6b916def05966b162d259 |
| 5 | internal/activator/activator.go Service.begin legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Waits for the pending wake instead of issuing another; agent scheduling remains legacy. registry:Host@1119,registry:Host@1198,registry:Host@248,registry:Host@327,whole:Route@1128,whole:Route@1135 3955a32110d69d8672b70a762651bf476da0305f4ef6b916def05966b162d259 |
| 6 | @legacy 486058b7281feceaec4a34c293d20b0107050f5d8fd674de3ca9869349c7b48d internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Discharges seed cleanup before restore and retains the lease when emptiness is unproven; agent lifecycle remains legacy. registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20068,registry:Host@1014,registry:Host@1166,registry:Host@1277,registry:Host@174,registry:Host@2137,registry:Host@3858,registry:Host@861,registry:Host@936,registry:Replication@20103,registry:Seed@11134,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10036,whole:Route@11235,whole:Route@11306,whole:Route@1231,whole:Route@1237,whole:Route@1303,whole:Route@1311,whole:Route@13696,whole:Route@15557,whole:Route@159,whole:Route@16203,whole:Route@17510,whole:Route@17664,whole:Route@18020,whole:Route@18114,whole:Route@18514,whole:Route@19516,whole:Route@19664,whole:Route@20177,whole:Route@2027,whole:Route@21075,whole:Route@21170,whole:Route@3481,whole:Route@3740,whole:Route@3810,whole:Route@3816,whole:Route@3885,whole:Route@3893,whole:Route@4681,whole:Route@5680,whole:Route@6719,whole:Route@7600,whole:Route@9188,whole:Route@9383,whole:Route@959 fc7cd77fe8cbb3fe0473ee42156b87c614005dab4726f9aa924a7f4335589721 |
| 7 | internal/activator/activator.go Service.doWake legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Discharges seed cleanup before restore and retains the lease when emptiness is unproven; agent lifecycle remains legacy. registry:DBPath@1032,registry:DBPath@1048,registry:DBPath@1175,registry:DBPath@1186,registry:DBPath@20068,registry:Host@1014,registry:Host@1166,registry:Host@1277,registry:Host@174,registry:Host@2137,registry:Host@3858,registry:Host@861,registry:Host@936,registry:Replication@20103,registry:Seed@11134,registry:Socket@1061,registry:Socket@1077,registry:Socket@1200,registry:Socket@1211,whole:Route@10036,whole:Route@11235,whole:Route@11306,whole:Route@1231,whole:Route@1237,whole:Route@1303,whole:Route@1311,whole:Route@13696,whole:Route@15557,whole:Route@159,whole:Route@16203,whole:Route@17510,whole:Route@17664,whole:Route@18020,whole:Route@18114,whole:Route@18514,whole:Route@19516,whole:Route@19664,whole:Route@20177,whole:Route@2027,whole:Route@21075,whole:Route@21170,whole:Route@3481,whole:Route@3740,whole:Route@3810,whole:Route@3816,whole:Route@3885,whole:Route@3893,whole:Route@4681,whole:Route@5680,whole:Route@6719,whole:Route@7600,whole:Route@9188,whole:Route@9383,whole:Route@959 fc7cd77fe8cbb3fe0473ee42156b87c614005dab4726f9aa924a7f4335589721 |
| 8 | @legacy a6ad686aaf076f8f9be82c046c65727d6f07e8e066c1fae7d015586d85d82523 internal/activator/activator.go Service.sidecarOwnBuild legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Selects the sidecar's own admitted fallback build; agent selection is not root executable authority. registry:Host@1056,registry:Host@496,registry:Host@842,whole:Route@307,whole:Route@665 b69af7fc58c5f30691ecfbfea7e89c21f9a35525e9b421f2cc36fa4edbb19ec7 |
| 9 | internal/activator/activator.go Service.sidecarOwnBuild legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Selects the sidecar's own admitted fallback build; agent selection is not root executable authority. registry:Host@1056,registry:Host@496,registry:Host@842,whole:Route@307,whole:Route@665 b69af7fc58c5f30691ecfbfea7e89c21f9a35525e9b421f2cc36fa4edbb19ec7 |
| 10 | @legacy 8f680fc9a9ff509503fba4925db3144ba5345eec443e9cabe93f8e12443ba191 internal/activator/activator.go Service.startSidecar legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses the sidecar's own fallback after a flag decline; agent lifecycle remains legacy. registry:Host@1802,registry:Host@254,whole:Route@1287,whole:Route@1350,whole:Route@1749,whole:Route@1940,whole:Route@459,whole:Route@522,whole:Route@581,whole:Route@623,whole:Route@753 3ed350b4eac78f53d3eca39fe6418c72a3a9f7d6a29c7d932c9b420c30c8941a |
| 11 | internal/activator/activator.go Service.startSidecar legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses the sidecar's own fallback after a flag decline; agent lifecycle remains legacy. registry:Host@1802,registry:Host@254,whole:Route@1287,whole:Route@1350,whole:Route@1749,whole:Route@1940,whole:Route@459,whole:Route@522,whole:Route@581,whole:Route@623,whole:Route@753 3ed350b4eac78f53d3eca39fe6418c72a3a9f7d6a29c7d932c9b420c30c8941a |
| 12 | @legacy 9b330f2a0928ed2b16404c336bce1e372dfc67a4edfea74f2ae1bacd2ef168fb internal/activator/activator.go Service.stop legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Joins sidecar cleanup and proves host empty before releasing its lease; agent lifecycle remains legacy. whole:Route@491,whole:Route@6016,whole:Route@6066,whole:Route@6129 41b7ff098271a8c1b0ee6f82520d7db895b79cd0d4af86bc71479df70a722025 |
| 13 | internal/activator/activator.go Service.stop legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Joins sidecar cleanup and proves host empty before releasing its lease; agent lifecycle remains legacy. whole:Route@491,whole:Route@6016,whole:Route@6066,whole:Route@6129 41b7ff098271a8c1b0ee6f82520d7db895b79cd0d4af86bc71479df70a722025 |
| 14 | @legacy 6f4c4f1714c84b4bdeeba3709c89576cb8b0aa3ded6ac038d80fbbeb97a4bcef internal/activator/activator.go Service.sweepOnce legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Checks completed parking and retains failed sidecar cleanup; agent lifecycle remains legacy. registry:Hibernate@11832,registry:Hibernate@20990,registry:Hibernate@4795,registry:Hibernate@6453,registry:Hibernate@8833,registry:Host@21059,registry:Host@21117,registry:Host@21510,registry:Host@22241,registry:Host@22323,registry:Host@23388,registry:Host@23567,registry:Host@23616,registry:NextDue@22196,registry:Status@21006,whole:Route@11834,whole:Route@13754,whole:Route@15464,whole:Route@15654,whole:Route@15947,whole:Route@16119,whole:Route@16266,whole:Route@20477,whole:Route@21910,whole:Route@22250,whole:Route@22257,whole:Route@23203,whole:Route@23600,whole:Route@4797,whole:Route@6455,whole:Route@8835 4d422b923c537680a1780c9cc6b6b3eba7de1b620519ce9f5d4fc60b84e0b623 |
| 15 | internal/activator/activator.go Service.sweepOnce legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Checks completed parking and retains failed sidecar cleanup; agent lifecycle remains legacy. registry:Hibernate@11832,registry:Hibernate@20990,registry:Hibernate@4795,registry:Hibernate@6453,registry:Hibernate@8833,registry:Host@21059,registry:Host@21117,registry:Host@21510,registry:Host@22241,registry:Host@22323,registry:Host@23388,registry:Host@23567,registry:Host@23616,registry:NextDue@22196,registry:Status@21006,whole:Route@11834,whole:Route@13754,whole:Route@15464,whole:Route@15654,whole:Route@15947,whole:Route@16119,whole:Route@16266,whole:Route@20477,whole:Route@21910,whole:Route@22250,whole:Route@22257,whole:Route@23203,whole:Route@23600,whole:Route@4797,whole:Route@6455,whole:Route@8835 4d422b923c537680a1780c9cc6b6b3eba7de1b620519ce9f5d4fc60b84e0b623 |
| 16 | @legacy 4f8aa2ba5e351ff671d63428fc74f433b1b91158b83963b191185e64b18ab2ff internal/activator/activator.go Service.wake legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Adds completion synchronization and launch-layout handling; agent wake path remains legacy. registry:Socket@6616,registry:Socket@6777,whole:Route@1900,whole:Route@1957,whole:Route@5153,whole:Route@6569,whole:Route@6618,whole:Route@6779,whole:Route@8030,whole:Route@8051 4ef50e888909a34a30326256565121acda6e7d21cf9504ca32fe9678a0db2047 |
| 17 | internal/activator/activator.go Service.wake legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Adds completion synchronization and launch-layout handling; agent wake path remains legacy. registry:Socket@6616,registry:Socket@6777,whole:Route@1900,whole:Route@1957,whole:Route@5153,whole:Route@6569,whole:Route@6618,whole:Route@6779,whole:Route@8030,whole:Route@8051 4ef50e888909a34a30326256565121acda6e7d21cf9504ca32fe9678a0db2047 |
| 18 | @legacy 0494b6c31d5547e5312e60dac28bac95df9a81352a32dd82b26d1fa93dedce37 internal/activator/backend_exec.go ExecBackend.BuildIdentity legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reports the selected app build to agent coordination; root independently resolves and checks launch authority. file:Lstat@518,registry:App@240,registry:App@256,registry:App@273,registry:App@305,registry:App@316,registry:App@415,registry:App@498,registry:Host@217,registry:Host@406,registry:Host@616,registry:Host@757,registry:Host@903,whole:Route@486 5d41fca919ab378e2d3bad1611cab5f5f476aa1471b3a0868c05f22801a1c07f |
| 19 | internal/activator/backend_exec.go ExecBackend.BuildIdentity legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reports the selected app build to agent coordination; root independently resolves and checks launch authority. file:Lstat@518,registry:App@240,registry:App@256,registry:App@273,registry:App@305,registry:App@316,registry:App@415,registry:App@498,registry:Host@217,registry:Host@406,registry:Host@616,registry:Host@757,registry:Host@903,whole:Route@486 5d41fca919ab378e2d3bad1611cab5f5f476aa1471b3a0868c05f22801a1c07f |
| 20 | @legacy 055e1b0c5586fafbb8650adc9f63f034c915c36e9148b47aa30ddb35712170e5 internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads a seed-cleanup obligation before restoring warm state; agent recovery remains legacy. file:Stat@407,registry:Host@103,whole:Route@123,whole:Route@344 03a8882816e6ac1948828ea9d250e02d912e3192b6b254710609fd3f9344b12e |
| 21 | internal/activator/backend_exec.go ExecBackend.Restore legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads a seed-cleanup obligation before restoring warm state; agent recovery remains legacy. file:Stat@407,registry:Host@103,whole:Route@123,whole:Route@344 03a8882816e6ac1948828ea9d250e02d912e3192b6b254710609fd3f9344b12e |
| 22 | @legacy 513970dbc7d14a217e28a674ab11d804be295b3e94da91eba7ccfd9ff8a1ba8f internal/activator/backend_exec.go ExecBackend.declinedLivePin legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Selects an admitted fallback link after a flag decline; root independently validates executable authority. registry:Host@430,registry:Host@555,whole:Route@144,whole:Route@617 7b16d1916266f99b0e1c5c4d2c51f3f9d0c513eabea1c876d683f7a808621dd3 |
| 23 | internal/activator/backend_exec.go ExecBackend.declinedLivePin legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Selects an admitted fallback link after a flag decline; root independently validates executable authority. registry:Host@430,registry:Host@555,whole:Route@144,whole:Route@617 7b16d1916266f99b0e1c5c4d2c51f3f9d0c513eabea1c876d683f7a808621dd3 |
| 24 | @legacy cb620f2facb84219f9d46a1061f438f092c5d23295643726bddfa6842501247d internal/activator/backend_exec.go ExecBackend.nestedSeedGone legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requests nested cleanup through the root control door; root independently authorizes that request. registry:Host@175,registry:Host@313,registry:Host@408,whole:Route@570 c19514333877df0682e8408ca2c188adc9184b307478f2b660d0c06a4006fd4d |
| 25 | internal/activator/backend_exec.go ExecBackend.nestedSeedGone legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requests nested cleanup through the root control door; root independently authorizes that request. registry:Host@175,registry:Host@313,registry:Host@408,whole:Route@570 c19514333877df0682e8408ca2c188adc9184b307478f2b660d0c06a4006fd4d |
| 26 | @legacy 780744da79acb29e585ad8be907ce3f40626c09e5e1cf4fa4ee32e553bce3f54 internal/activator/backend_exec.go ExecBackend.seedChild legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists cleanup obligation before seeding and proves descendants gone before deletion; agent recovery remains legacy. file:CommandContext@3135,file:Stat@2036,registry:App@4384,registry:Host@120,whole:Route@1409,whole:Route@149,whole:Route@1541,whole:Route@1745,whole:Route@176,whole:Route@3083,whole:Route@4379,whole:Route@672,whole:Route@7076,whole:Route@755,whole:Route@9882 69a22aee730d36401dce43a33bfdbb0c24dba544bdff30b6674f962819dd551d |
| 27 | internal/activator/backend_exec.go ExecBackend.seedChild legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists cleanup obligation before seeding and proves descendants gone before deletion; agent recovery remains legacy. file:CommandContext@3135,file:Stat@2036,registry:App@4384,registry:Host@120,whole:Route@1409,whole:Route@149,whole:Route@1541,whole:Route@1745,whole:Route@176,whole:Route@3083,whole:Route@4379,whole:Route@672,whole:Route@7076,whole:Route@755,whole:Route@9882 69a22aee730d36401dce43a33bfdbb0c24dba544bdff30b6674f962819dd551d |
| 28 | @legacy 2f0bf6be7e746863ece5861b0723ada6b13fdfe4124d1c73649271c1f909076b internal/activator/backend_exec.go ExecBackend.seedDescendantsGone legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses delegated cgroup cleanup, with the existing undelegated/no-kill fallback; agent cleanup remains legacy. registry:Host@275,registry:Host@454,registry:Host@828,whole:Route@182,whole:Route@236 856b73ac27f77532281f670d974c1a0e305ab5c55cb5d3f4b52481322a1fc43e |
| 29 | internal/activator/backend_exec.go ExecBackend.seedDescendantsGone legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses delegated cgroup cleanup, with the existing undelegated/no-kill fallback; agent cleanup remains legacy. registry:Host@275,registry:Host@454,registry:Host@828,whole:Route@182,whole:Route@236 856b73ac27f77532281f670d974c1a0e305ab5c55cb5d3f4b52481322a1fc43e |
| 30 | @legacy 2e0b99c44df2f786015dbe0aa47c18e1954e8493b69638afbc00e3c71523e238 internal/activator/backend_exec.go ExecBackend.seedObligationProof legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Chooses delegated or nested cleanup proof for an agent seed obligation; root checks nested requests independently. whole:Route@169,whole:Route@243,whole:Route@360 df28dc62181712c840a161ebe2294d46b5788e05ac322d1cdc30c91c07efd0d1 |
| 31 | internal/activator/backend_exec.go ExecBackend.seedObligationProof legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Chooses delegated or nested cleanup proof for an agent seed obligation; root checks nested requests independently. whole:Route@169,whole:Route@243,whole:Route@360 df28dc62181712c840a161ebe2294d46b5788e05ac322d1cdc30c91c07efd0d1 |
| 32 | @legacy 5c517883b60693399116850b047d162d1e72cc8605558ab146ce41bd55635020 internal/activator/backend_exec.go ExecBackend.seedUnit legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists nested seed cleanup and uses declined-build pinning; agent lifecycle remains legacy. file:Stat@1644,registry:Host@135,whole:Route@1123,whole:Route@167,whole:Route@3202,whole:Route@3332,whole:Route@3867,whole:Route@532,whole:Route@613,whole:Route@679,whole:Route@997 7081e0360208c3e5d114b40ffd71a42380663d22589006411ea386132fae0e4b |
| 33 | internal/activator/backend_exec.go ExecBackend.seedUnit legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists nested seed cleanup and uses declined-build pinning; agent lifecycle remains legacy. file:Stat@1644,registry:Host@135,whole:Route@1123,whole:Route@167,whole:Route@3202,whole:Route@3332,whole:Route@3867,whole:Route@532,whole:Route@613,whole:Route@679,whole:Route@997 7081e0360208c3e5d114b40ffd71a42380663d22589006411ea386132fae0e4b |
| 34 | @legacy fbfcc24ac0c2460215c22c7e24d44ba5ca0b02c6257ca27633281b2890c5f318 internal/activator/backend_exec.go ExecBackend.seedUnitFailed legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requires nested seed cleanup proof before discharging the obligation; agent lifecycle remains legacy. whole:Route@168 1fc6aea611d503eeb3eff318b435125df30ebe4a2c3c35e9e41554e4c5b1b98d |
| 35 | internal/activator/backend_exec.go ExecBackend.seedUnitFailed legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requires nested seed cleanup proof before discharging the obligation; agent lifecycle remains legacy. whole:Route@168 1fc6aea611d503eeb3eff318b435125df30ebe4a2c3c35e9e41554e4c5b1b98d |
| 36 | @legacy 0d076aa11d49c9e186f3de18ca19920d705dcd4a0be0eb8702fe319bc67cc816 internal/activator/backend_exec.go ExecBackend.settleSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads and discharges an agent-owned cleanup obligation only after cleanup proof; no new root authority. registry:Host@115,whole:Route@635 9c40f2c8ecc306c3e8b1d1aee19bcbe033a8f4fb90ef1df75c9fa9ee60896f29 |
| 37 | internal/activator/backend_exec.go ExecBackend.settleSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads and discharges an agent-owned cleanup obligation only after cleanup proof; no new root authority. registry:Host@115,whole:Route@635 9c40f2c8ecc306c3e8b1d1aee19bcbe033a8f4fb90ef1df75c9fa9ee60896f29 |
| 38 | @legacy 5fea2dfe648453dc92c35012c4e533d3797535f5966a5cb75fafe3a224b8d263 internal/activator/backend_exec.go ExecBackend.spawnUnitFrom legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Pins the admitted fallback and staged launch input; root independently resolves and verifies launch authority. registry:Host@1071,registry:Host@1473,registry:Host@1576,registry:Host@1994,registry:Host@2474,registry:Host@3400,registry:Host@3986,registry:Host@4256,registry:Host@4476,registry:Host@4661,registry:Host@4763,registry:Host@5043,registry:Host@5105,registry:Host@5258,registry:Host@5297,registry:Host@5576,registry:Host@5670,whole:Route@1167,whole:Route@1402,whole:Route@194,whole:Route@2678,whole:Route@4309,whole:Route@5196,whole:Route@5355,whole:Route@758,whole:Route@856 d7586a67e4d59b1ae0536d038dc5572923402100f0ca2b2cd8a426f944272a3b |
| 39 | internal/activator/backend_exec.go ExecBackend.spawnUnitFrom legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Pins the admitted fallback and staged launch input; root independently resolves and verifies launch authority. registry:Host@1071,registry:Host@1473,registry:Host@1576,registry:Host@1994,registry:Host@2474,registry:Host@3400,registry:Host@3986,registry:Host@4256,registry:Host@4476,registry:Host@4661,registry:Host@4763,registry:Host@5043,registry:Host@5105,registry:Host@5258,registry:Host@5297,registry:Host@5576,registry:Host@5670,whole:Route@1167,whole:Route@1402,whole:Route@194,whole:Route@2678,whole:Route@4309,whole:Route@5196,whole:Route@5355,whole:Route@758,whole:Route@856 d7586a67e4d59b1ae0536d038dc5572923402100f0ca2b2cd8a426f944272a3b |
| 40 | @legacy 09a20c120876db8e298bd5c21471dba4660df662bbfd77401de047b4d70166fb internal/activator/backend_exec.go ExecBackend.startSidecarUnitFrom legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Pins the sidecar fallback before staged launch; root independently verifies launch authority. registry:Host@1463,registry:Host@1538,registry:Host@1684,registry:Host@1797,registry:Host@1852,registry:Host@915,registry:Host@996,whole:Route@1418,whole:Route@1579,whole:Route@170,whole:Route@1887,whole:Route@675,whole:Route@761,whole:Route@819 35ab2d27fe6d6f2c3be68ec9c2396a9d07978c8655fbb10fda932807cba75a90 |
| 41 | internal/activator/backend_exec.go ExecBackend.startSidecarUnitFrom legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Pins the sidecar fallback before staged launch; root independently verifies launch authority. registry:Host@1463,registry:Host@1538,registry:Host@1684,registry:Host@1797,registry:Host@1852,registry:Host@915,registry:Host@996,whole:Route@1418,whole:Route@1579,whole:Route@170,whole:Route@1887,whole:Route@675,whole:Route@761,whole:Route@819 35ab2d27fe6d6f2c3be68ec9c2396a9d07978c8655fbb10fda932807cba75a90 |
| 42 | @legacy f5e1a652817f600938ef6845134b5b542d2696e26ffdd051dd49f79f73a8a082 internal/activator/backend_exec.go readSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Bounded read of the agent's seed cleanup marker; not root evidence. file:ReadAll@424 9d1a0e132e14c553281086bf3c21791d9d4f7ef0c683e61c70d5c773c859acd0 |
| 43 | internal/activator/backend_exec.go readSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Bounded read of the agent's seed cleanup marker; not root evidence. file:ReadAll@424 9d1a0e132e14c553281086bf3c21791d9d4f7ef0c683e61c70d5c773c859acd0 |
| 44 | @legacy ab9a728b11d549f477176ac093d8556a0de7aba807efad4912e6411a1e01b990 internal/activator/backend_exec.go recordSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists the agent's seed cleanup obligation before seeding; not root evidence. file:Lstat@122 10cf0c461af08ee7ec163c3c17c93b23a7dd62478c24fe9b37558ee19cdd005e |
| 45 | internal/activator/backend_exec.go recordSeedObligation legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Persists the agent's seed cleanup obligation before seeding; not root evidence. file:Lstat@122 10cf0c461af08ee7ec163c3c17c93b23a7dd62478c24fe9b37558ee19cdd005e |
| 46 | @legacy 975bf21e487221983321987550b787ec36acc1ae883e0e4bf74164fad03cba15 internal/activator/containment.go ExecBackend.KillGen legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses shared child-kill cleanup before removing the generation cgroup; agent containment remains legacy. registry:Host@303,registry:Host@419,registry:Host@559,registry:Host@628,whole:Route@178 119bf1ed10769b40540f80c5be716c96475852f1de10f384da1d9e0c5fd49009 |
| 47 | internal/activator/containment.go ExecBackend.KillGen legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Uses shared child-kill cleanup before removing the generation cgroup; agent containment remains legacy. registry:Host@303,registry:Host@419,registry:Host@559,registry:Host@628,whole:Route@178 119bf1ed10769b40540f80c5be716c96475852f1de10f384da1d9e0c5fd49009 |
| 48 | @legacy 268ccc6b54fa9db483022812cdbed4c54bdb4f10f013833f93c11503dc83a05a internal/activator/genbackend.go ExecBackend.EmptyHost legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Checks agent-owned host cleanup before lease release; no root authority is derived from it. registry:Host@236,registry:Host@486 d3d403e96871c006b7d217d0be4bc4a704721df8e4039f61957acadd6a7f1047 |
| 49 | internal/activator/genbackend.go ExecBackend.EmptyHost legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Checks agent-owned host cleanup before lease release; no root authority is derived from it. registry:Host@236,registry:Host@486 d3d403e96871c006b7d217d0be4bc4a704721df8e4039f61957acadd6a7f1047 |
| 50 | @legacy 67971329de3b82ad3c1def15f18d653095391a60f0ee3d56c53ba0a3a55433d7 internal/activator/genbackend.go SplitBackend.EmptyHost legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches to the agent backend's emptiness check; no root authority is derived from it. file:Exec@190,file:Exec@263,registry:Backing@85,whole:Route@243,whole:Route@314 cc740daf5bee33235f539b49f4f572b068d71928a43a07bc5242fe64c771621a |
| 51 | internal/activator/genbackend.go SplitBackend.EmptyHost legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches to the agent backend's emptiness check; no root authority is derived from it. file:Exec@190,file:Exec@263,registry:Backing@85,whole:Route@243,whole:Route@314 cc740daf5bee33235f539b49f4f572b068d71928a43a07bc5242fe64c771621a |
| 52 | @legacy 04fa48efa31b90b7d4d27164bb8e16d9ad1269b3624cb923231390779032dd40 internal/activator/identity.go SplitBackend.BuildIdentity legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches the agent's selected build identity; root launch authority remains independently checked. file:Exec@217,registry:Backing@108,registry:Host@349,whole:Route@386 51e0ad8ea2844f763465f7189c985b712fe01f130437c6f40887661adf6050f2 |
| 53 | internal/activator/identity.go SplitBackend.BuildIdentity legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches the agent's selected build identity; root launch authority remains independently checked. file:Exec@217,registry:Backing@108,registry:Host@349,whole:Route@386 51e0ad8ea2844f763465f7189c985b712fe01f130437c6f40887661adf6050f2 |
| 54 | @legacy 016469544dcf04def4ee5935a6b37c855f170f7285d2e7d91171a8b77f639e83 internal/activator/opset.go Service.stopHostProven legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Keeps host lease ownership until agent stop and emptiness checks complete; agent lifecycle remains legacy. registry:Host@816,registry:Host@917,whole:Route@225,whole:Route@449,whole:Route@528,whole:Route@91 5888fdcdc672593dfabbf3089bda8c62b261199e5e3a2b511560a836d4cdcf9f |
| 55 | internal/activator/opset.go Service.stopHostProven legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Keeps host lease ownership until agent stop and emptiness checks complete; agent lifecycle remains legacy. registry:Host@816,registry:Host@917,whole:Route@225,whole:Route@449,whole:Route@528,whole:Route@91 5888fdcdc672593dfabbf3089bda8c62b261199e5e3a2b511560a836d4cdcf9f |
| 56 | @legacy c6237e9c3a8017c0a4f79b4fdff6e55d194dda45d8570c62d4a4c9ef9d02893f internal/activator/opset.go Service.wakeHostProven legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches agent wake with completion proof; agent lifecycle remains legacy. registry:Backing@140,whole:Route@275,whole:Route@464 94c38ab286ebb381e1029b9d2d44a8c4a2ec2f0824c84529d6ebd01d09253b06 |
| 57 | internal/activator/opset.go Service.wakeHostProven legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Dispatches agent wake with completion proof; agent lifecycle remains legacy. registry:Backing@140,whole:Route@275,whole:Route@464 94c38ab286ebb381e1029b9d2d44a8c4a2ec2f0824c84529d6ebd01d09253b06 |
| 58 | @legacy 244e151a8b809801795cccd53b7cd2eb024183b7073fafac1464e521d88d433d internal/activator/workerswap.go Service.ReplaceWorker legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Counts only a cleanly parked incarnation as a completed replacement; agent worker lifecycle remains legacy. whole:Route@2082 8dd7319d604d694c46023cc36c70a17d37cd7f3f3666693e06847f8ae0237644 |
| 59 | internal/activator/workerswap.go Service.ReplaceWorker legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Counts only a cleanly parked incarnation as a completed replacement; agent worker lifecycle remains legacy. whole:Route@2082 8dd7319d604d694c46023cc36c70a17d37cd7f3f3666693e06847f8ae0237644 |
| 60 | @legacy 1d56337714538e14fdde6884de2cc182f2b12d773634e69ea8191cea1356d086 internal/cgroup/cgroup.go Manager.startIn legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requires generation limits and clone3 placement before execution; existing agent delegated-cgroup management remains legacy. file:Open@1723 b3ddb60dacb432c8cb5b1d612ee822628466b560d4738f6a059b36ef6e0389af |
| 61 | internal/cgroup/cgroup.go Manager.startIn legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Requires generation limits and clone3 placement before execution; existing agent delegated-cgroup management remains legacy. file:Open@1723 b3ddb60dacb432c8cb5b1d612ee822628466b560d4738f6a059b36ef6e0389af |
| 62 | @legacy 8c967a581429a938dc6d3aae2006bcdf68409bccf09de3a420f5af298e1624a7 internal/cgroup/cgroup_linux.go placementLive legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads cgroup.events and tests opening cgroup.procs to classify placement failure; existing agent cgroup setup remains legacy. file:OpenFile@143,file:ReadFile@53 3eb4bff2349a77a2df31ad6a5697785987713ea57f4e72bcce5572a3c51e6d37 |
| 63 | internal/cgroup/cgroup_linux.go placementLive legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads cgroup.events and tests opening cgroup.procs to classify placement failure; existing agent cgroup setup remains legacy. file:OpenFile@143,file:ReadFile@53 3eb4bff2349a77a2df31ad6a5697785987713ea57f4e72bcce5572a3c51e6d37 |
| 64 | @legacy ddc5364c30bfcb1280118e518e6010c598bd243e4c26e2c2eb48cc27ee9d7546 internal/cgroup/cleanup_linux.go Manager.openCleanupAt legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Distinguishes missing cgroup.kill on an existing cgroup from a vanished cgroup; delegated cleanup remains legacy. file:OpenFile@302 744592df568dcb31b49c7fbb98fae467a1f6d1a723866b6c6b045ecdfe4608f8 |
| 65 | internal/cgroup/cleanup_linux.go Manager.openCleanupAt legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Distinguishes missing cgroup.kill on an existing cgroup from a vanished cgroup; delegated cleanup remains legacy. file:OpenFile@302 744592df568dcb31b49c7fbb98fae467a1f6d1a723866b6c6b045ecdfe4608f8 |
| 66 | @legacy 4d68da0c917f446c9e3edb9dd61c4b858b611abfea0e60f1788c9797dcae5074 internal/cgroup/gen.go delegatesMemory legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads subtree_control to refuse a generation without delegated memory; existing agent resource management remains legacy. file:ReadFile@52 eedc3240831c2404279b7cc54647a247347f532abd7c05c43f87cbaa69186aac |
| 67 | internal/cgroup/gen.go delegatesMemory legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Reads subtree_control to refuse a generation without delegated memory; existing agent resource management remains legacy. file:ReadFile@52 eedc3240831c2404279b7cc54647a247347f532abd7c05c43f87cbaa69186aac |
| 68 | @legacy 026e41f74cfa976ec08cb7721ec41419e6cc131d321a817e254158a6683c23e7 internal/cgroup/gen.go enableChildren legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Routes the controller write through a kernel-error test seam; controller discovery and delegated setup remain legacy. file:ReadFile@54 4e47034591ca3e1c158f92d9b738c62ba9a18abe82ae5f4782c59c38ac4c93b3 |
| 69 | internal/cgroup/gen.go enableChildren legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Routes the controller write through a kernel-error test seam; controller discovery and delegated setup remain legacy. file:ReadFile@54 4e47034591ca3e1c158f92d9b738c62ba9a18abe82ae5f4782c59c38ac4c93b3 |
| 70 | @legacy 8f4e9341a61f2510e54b8d2d41215e2b6294729cc8b9f74942336b7239d9c8e0 internal/console/templates/app_instance.html external legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Displays Retry only when the reported protocol, book and saved epoch permit it; browser display remains legacy. file:external@0 670d3e28e0a72eebcadf131d9e82bc1eabb53dd5193dd5b5cd14d56c14a4084c |
| 71 | internal/console/templates/app_instance.html external legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Displays Retry only when the reported protocol, book and saved epoch permit it; browser display remains legacy. file:external@0 670d3e28e0a72eebcadf131d9e82bc1eabb53dd5193dd5b5cd14d56c14a4084c |
| 72 | internal/host/agent.go fastConvergeLoop authority B3 fix1-merge-review;basis=Comment-only addition naming the host-retry log; existing B3 restart wiring is unchanged. whole:Route@8442,whole:Route@9005 e17fce6d022c48f24176144d213f063ad57fdd3e00a3ea75c96e2d86eaae4ca7 |
| 73 | internal/host/proofbinding.go productionProofBindingSource authority B3,J1 fix1;basis=Binds deployment or root-managed named-unit evidence, trusted unit identity and digest history; registry names are hints only. file:Open@217,file:Read@796 4856068bf684eb808b608760b68e2c3526b9990e7fb0d853c5196232eaf77339 |
| 74 | internal/host/proofbinding.go proofBindingSource.binding authority B3,J1 fix1;basis=Binds deployment or root-managed named-unit evidence, trusted unit identity and digest history; registry names are hints only. file:EvalSymlinks@2524,registry:Unit@3822,registry:Unit@461,registry:Unit@4775,registry:Unit@544,registry:Unit@717,whole:Route@5255,whole:Route@5262 f2563f773a9684e3329752babba671f41a7fcd1c1f81d2ce02b5865aa35dafb4 |
| 75 | internal/host/proofbinding.go proofBindingSource.resolve authority B3,J1 fix1;basis=Binds deployment or root-managed named-unit evidence, trusted unit identity and digest history; registry names are hints only. registry:Host@134,whole:Route@235,whole:Route@248 1463a0ca29f4f52678f90d5b115d0b3cac66ada406487a491faa0185e7e25bdb |
| 76 | internal/host/proofnamed.go proofBindingSource.capturedVersion authority B3,J1 fix1;basis=Authorizes recordless units only from descriptor-checked root configuration, installed console guard evidence, root history or the matching root update capture. 6c8b703edc6a75ab57208afb1368ac3914fb09b7c86a0824f3e868c9a1fdd22b |
| 77 | internal/host/proofnamed.go proofBindingSource.installedConsoleVersion authority B3,J1 fix1;basis=Authorizes recordless units only from descriptor-checked root configuration, installed console guard evidence, root history or the matching root update capture. file:Open@229,file:Read@532 1c9fbf0cbb127c8c7f80e0144627f0cfa0358fd5713d6c92339e84561480adcd |
| 78 | internal/host/proofnamed.go proofBindingSource.record authority B3,J1 fix1;basis=Authorizes recordless units only from descriptor-checked root configuration, installed console guard evidence, root history or the matching root update capture. 2f0e14e715df41e50c7a95714028a57a6a256c4dbd3a4fbeeff32f9e0d263d72 |
| 79 | internal/host/proofnamed.go proofBindingSource.trustedBytes authority B3,J1 fix1;basis=Authorizes recordless units only from descriptor-checked root configuration, installed console guard evidence, root history or the matching root update capture. file:ReadAll@422 e86300d6a9c92fc0b720966b9ca8141678d254b60d95b4802d5a6cb2f07c88cc |
| 80 | internal/host/proofnamed.go proofExecPath authority B3,J1 fix1;basis=Authorizes recordless units only from descriptor-checked root configuration, installed console guard evidence, root history or the matching root update capture. registry:Host@132,whole:Route@134 81d91324ee91fbc6e992e5e91376ccaf53c167972435ac70adf95576067a25ad |
| 81 | internal/host/proofobserve.go proofObserver.observe authority B3,J1,J4 fix1;basis=Observes only the canonically bound unit, executable and readiness, including the installed console guard wrapper. registry:Host@2696,registry:Host@381,registry:Unit@1193,registry:Unit@1979,registry:Unit@2184,registry:Unit@417,registry:Unit@498,registry:Unit@637,registry:Unit@777,registry:Unit@923,whole:Route@1778,whole:Route@206,whole:Route@2245,whole:Route@326,whole:Route@339 b568040bf461e094c77f60f7f6e5d984efabda555cf23234952cd3eaf9c79bdd |
| 82 | internal/host/restart.go restartRequestLeg authority E1,E3,J1,J4 fix1-merge-review;basis=Reads the new host-retry log while preserving root-signed grant verification and ordinary restart gates. whole:Route@1314,whole:Route@1349,whole:Route@2102,whole:Route@2151,whole:Route@2233,whole:Route@2271,whole:Route@236,whole:Route@3065,whole:Route@557,whole:Route@773 ce2e328da82f9d9c621c9793b7d1ff10505e7d3bf9e36853e472726ea528127a |
| 83 | internal/host/restart.go restartSeed authority E1,E3,J1,J4 fix1-merge-review;basis=Baselines both request logs without applying historical ordinary restarts; signed retry grants remain independently verified. whole:Route@1054,whole:Route@1316,whole:Route@312,whole:Route@650,whole:Route@760 c3f191a5194d65bb6ab42bbfd58ac3719718f93a2420c5780541f55f127e8ff1 |
| 84 | internal/host/restartscope.go applyRetries authority E1,E3,J1,J4 fix1-merge-review;basis=Verifies the deployment-root signature and account/app/host/book/epoch before lifting a restriction. whole:Route@121 3536a1ab20907e7373c99d6c9da9c5d78f70188b4bab0622a9cd72c22af592d6 |
| 85 | internal/host/restartscope.go hostRetryPass hint E1,E3,J1,J4 fix1-merge-review;basis=Reads retry candidates from the separate log; applyRetries independently verifies the signed authority. whole:Route@217 9419b9a4d26d5512e831ed0bb244e8cc58d09ccada3ab9d230191828cd377487 |
| 86 | internal/host/restartscope.go restartScopePass authority E1,E3,J1,J4 fix1-merge-review;basis=Hands historical signed retry entries to the common verifier; unknown selectors do not widen scope. whole:Route@180 91938177a921116614c1e5637f99f6c01287969ee7f58afd798334ca553fd3a5 |
| 87 | @legacy db0e425e075cf48b582029e08c8c650c200e21be3c82529c462673576e325089 internal/host/rollout.go armRollout legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Comment-only clarification of failure-book saves; existing agent rollout setup remains legacy. whole:Route@3286,whole:Route@3370 59058382fb04eecac95d59a4f688c95a80dc4bd98134d3de36f19ea27f9a8736 |
| 88 | internal/host/rollout.go armRollout legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Comment-only clarification of failure-book saves; existing agent rollout setup remains legacy. whole:Route@3286,whole:Route@3370 59058382fb04eecac95d59a4f688c95a80dc4bd98134d3de36f19ea27f9a8736 |
| 89 | internal/host/rolloutdeclined.go failureHolds.pass authority E1,E3,J1,J4 fix1-merge-review;basis=Saves the failure book before processing pointer retries; preserves signed retry and restriction checks. whole:Route@401 274f4b11131dd5e016f19368e71f2ec6dc9f23fbd69259dd3f91f3ee71af292f |
| 90 | internal/host/rolloutdeclined.go failureHolds.pointerLoop authority E1,E3,J1,J4 fix1-merge-review;basis=Delegates each iteration to pass; retains ownership of the retry/restriction authority path despite no direct read. 22fbbf84a4491af1a8adb670f2d7f1641c1c89244ad133165ef5d7cbbe3c0ea7 |
| 91 | internal/host/rolloutdeclined.go failureHolds.report authority E1,E3,J1,J4 fix1-merge-review;basis=Reports only durable published restriction epochs and the supported retry protocol; reports do not grant authority. registry:App@495,registry:App@644,registry:GoodVersion@532,registry:Host@445,registry:Host@659,registry:Version@514,whole:Route@181,whole:Route@217,whole:Route@287 a6a8d03c0ef34ffda34f1426806c08006a89e15a903fd6a28940ff5752b49d96 |
| 92 | internal/host/rolloutdeclined.go failureHolds.retryHost authority E1,E3,J1,J4 fix1-merge-review;basis=Refuses retry while a failure-book save is owed; verifies the signed current book/epoch grant before clearing. registry:App@466,whole:Route@307,whole:Route@343,whole:Route@413 f913d81234c99a80f94e9d1e540df1583d04fbc587e102c1c9e19396414d9484 |
| 93 | internal/host/rootrestart.go checkedUnitRestart authority B3,J1 fix1;basis=Creates the public shared parent before private state; captures a trusted app-tree target digest and restarts only the root-bound unit. file:EvalSymlinks@1023,registry:Account@1369,registry:App@1401,registry:Host@1070,registry:Host@1891,registry:Host@2427,registry:Host@510,registry:Unit@2309,registry:Unit@711,whole:Route@1377,whole:Route@1409,whole:Route@2317,whole:Route@638,whole:Route@719 c9a5ae78bbfed1462e9738e49d1c735c3cd23529c0abcca8859abf7a5364c364 |
| 94 | internal/host/rootrestart.go productionRootRestartChecks authority B3,J1 fix1;basis=Creates the public shared parent before private state; captures a trusted app-tree target digest and restarts only the root-bound unit. file:Open@675,whole:Route@1309,whole:Route@1576,whole:Route@508 43cc67a67c32ae1a750d1526a197c7a474ce43f388c3f9debc42cbb33f854b9e |
| 95 | internal/host/rootrestart.go restartBoundUnit authority B3,J1 fix1;basis=Creates the public shared parent before private state; captures a trusted app-tree target digest and restarts only the root-bound unit. file:EvalSymlinks@629,registry:Account@2111,registry:Account@3258,registry:App@2147,registry:App@3298,registry:Host@1542,registry:Host@2013,registry:Host@2412,registry:Host@3029,registry:Host@676,registry:Unit@1097,registry:Unit@1165,registry:Unit@1815,registry:Unit@2715,registry:Unit@3592,registry:Unit@393,whole:Route@198,whole:Route@2117,whole:Route@2153,whole:Route@316,whole:Route@3266,whole:Route@3306,whole:Route@3516 d50c3fdc308809dec717ba73a0dbdd97ea83614a4b4dfc27fc953328396faf47 |
| 96 | internal/host/rootrollback.go captureRollback authority B3,J1 fix1;basis=Binds capability and journal to the captured target digest; deduplicated history may retain an earlier version of identical bytes. file:Read@768,registry:Host@405,registry:Host@887,whole:Route@407,whole:Route@889 0da68ee5b66166e366dcb9206a17424cee62ebc363e4d731764c16e90bf8b285 |
| 97 | internal/host/rootrollback.go loadRollback authority B3,J1 fix1;basis=Binds capability and journal to the captured target digest; deduplicated history may retain an earlier version of identical bytes. file:Read@451,registry:Host@867,whole:Route@879 d5736d132e25f3b4414d8de28664d25db73bace16d3e258e02cad5643d567175 |
| 98 | internal/host/rootroute.go proofBindingSource.needsRestart authority B3,J1 fix1;basis=Resolves named-unit restart eligibility through authoritative records or root-owned named-unit evidence. registry:Host@137,registry:Host@265,registry:Unit@598,whole:Route@527,whole:Route@538 67f476ee23206f1e2d013cad2745069a9a9a655589201d23efcb89c7bad9fd94 |
| 99 | internal/hostexec/rootbroker.go RootBroker.Execute authority D fix1;basis=Bounds replay to the latest acquisition and preceding settlement, rotates renewal tokens, and holds broker-only OFD liveness. file:Read@3256,file:Read@4777 d0da02cf78fbcc06f48faaa4a55c378c9000a7137acace9bae2e884a895c957e |
| 100 | internal/hostexec/rootbroker.go RootBroker.acquire authority D fix1;basis=Bounds replay to the latest acquisition and preceding settlement, rotates renewal tokens, and holds broker-only OFD liveness. file:Read@808 2fdbeb00cd5e68d0a93c56229a90c1e334bffc9273c466c8cca83f2de4b2691e |
| 101 | internal/hostexec/rootbroker.go RootBroker.settle authority D fix1;basis=Bounds replay to the latest acquisition and preceding settlement, rotates renewal tokens, and holds broker-only OFD liveness. 0a7b8821bc09b63353b9f8c90bfefbc289e9aa4ddd61c427bd31e87c9e1f4bb3 |
| 102 | internal/hostexec/rootbroker.go RootBroker.write authority D fix1;basis=Bounds replay to the latest acquisition and preceding settlement, rotates renewal tokens, and holds broker-only OFD liveness. 86356029e4ab0b3ffc3c83931d096818a7c466bdc86249fd58c829da4d5d5a35 |
| 103 | internal/hostexec/rootread.go ReadRoot authority D fix1;basis=Queries broker OFD lock ownership without acquiring a lock; rechecks unchanged durable evidence and monotonic expiry. file:Read@1828,file:Read@228,file:Read@490 1420a50e539ce3ca5e6007599c38442b3e05f255d78099d7071981fcea606221 |
| 104 | internal/release/healthy_root.go rootHealthyStore authority B,B4 fix1;basis=Normalizes the no-account operator app to the existing ops namespace before opening the root-owned public history. file:Open@206 3d9721283c9253c354da2564b9309d25923432579ef2fe5796fdee1632df1ba7 |
| 105 | internal/rollout/failures.go FailureBook.markLocked authority E1,E3,J1,J4 fix1-merge-review;basis=Advances durable app restriction generations so old grants cannot clear new failures. file:Exec@114,file:Exec@130,file:Exec@142 7a6664f0ad8d23a5e8ede6663c86d3bcc2a7259b1a45de3f0567589d09bc3034 |
| 106 | internal/rollout/failures.go FailureBook.recordLocked authority E1,E3,J1,J4 fix1-merge-review;basis=Marks restriction state dirty and advances its generation before publication. file:Exec@274 7dd1ea8dd234b253cf935c2c6d2f636a60f0cef683abd01897a7a86a7c1fdb2b |
| 107 | internal/rollout/failures.go OpenFailureBook authority E1,E3,J1,J4 fix1-merge-review;basis=Loads schema-three durable generations and refuses unsafe identity recovery on entropy failure. file:ReadFile@136 93be6cb3c1c431adf99d58a7a4a4ea07acca177b890a2087e53b517030880e55 |
| 108 | internal/rollout/failures.go newBookID authority E1,E3,J1,J4 fix1-merge-review;basis=Uses the named entropy source and propagates failure; retains authority classification despite no scanner-recognized direct read. f35a2d3f4b81c176959762f8357f6a5d6f90c3dbcece0c7aa4dbd54f1938e15e |
| 109 | internal/rollout/failures.go var randRead authority E1,E3,J1,J4 fix1-merge-review;basis=Names the cryptographic entropy source for failure-book identity; remains retry replay authority. file:Read@15 3ead349b96ef3777407d22dd8f8f635b7ad59bae36fb9ddd194fc14ae66adbfe |
| 110 | @legacy 8bb9d26c45e4150844c9362354171a94bc8d1049e2f55e3277fa7759d4e1a0dd internal/rollout/manager.go Manager.prune legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Splits failure-book pruning from durable saves; agent rollout bookkeeping remains legacy. whole:Route@74 bb030e5a426ccb2b813d3d33841e15f80054a1ebcf5fbd361b64364940970e38 |
| 111 | internal/rollout/manager.go Manager.prune legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Splits failure-book pruning from durable saves; agent rollout bookkeeping remains legacy. whole:Route@74 bb030e5a426ccb2b813d3d33841e15f80054a1ebcf5fbd361b64364940970e38 |
| 112 | @legacy 72002b1a23066af72757c1230e14977d436c1a316b3584c49df6c70ac1473617 internal/rollout/manager.go Manager.pruneBook legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Extracts existing route-based failure-book pruning; agent rollout bookkeeping remains legacy. registry:App@237,registry:Version@169,registry:Version@245,whole:Route@155,whole:Route@232,whole:Route@69 292b6a19689d846329f67a0d0eb407bbe2492c28c3d448de14d52103aa42e6f7 |
| 113 | internal/rollout/manager.go Manager.pruneBook legacy accepted-legacy accepted-legacy;rev3=fix1-merge-review;basis=Extracts existing route-based failure-book pruning; agent rollout bookkeeping remains legacy. registry:App@237,registry:Version@169,registry:Version@245,whole:Route@155,whole:Route@232,whole:Route@69 292b6a19689d846329f67a0d0eb407bbe2492c28c3d448de14d52103aa42e6f7 |
| 114 | internal/rootstate/file_linux.go CheckPublicConfig authority A,B3 fix1;basis=Checks root:root ownership, exact 0644 mode and single-link regular-file identity on the already opened operator configuration descriptor. file:Fstat@74 508a1efb015e6c9bd8c984db5a88465558311a4994fedf38e5d9f8cb8c45f4e5 |
| 115 | internal/rootstate/file_other.go CheckPublicConfig authority A,B3 fix1;basis=Non-Linux descriptor checks fail closed. 8115cc4a3589c8e5e07af37ed2e99201f9df80fb108710f53c5f9a8d7b11f0c3 |
| 116 | internal/rootstate/live.go HoldLive authority A,D fix1;basis=Requires the store to implement broker-only liveness holding and a non-acquiring query; unsupported stores fail closed. 6cb58bb8004403c504e03c5288fe20ca018ad573cbf17d391842e244f760a2d4 |
| 117 | internal/rootstate/live.go LiveHeld authority A,D fix1;basis=Requires the store to implement broker-only liveness holding and a non-acquiring query; unsupported stores fail closed. 717c3ce4b4b45a57aa0c4e28bdb6510a6ae863d51aaf5297ad66f5ba21a7611d |
| 118 | internal/rootstate/live_linux.go directory.HoldLive authority A,D fix1;basis=Retains a trusted private-file descriptor under an OFD write lock; readers query conflicting OFD ownership without locking. 0c70b0bfc74cd41e8ff0d742c93bdb27db3c754f282f47a4782f8263813e2a9a |
| 119 | internal/rootstate/live_linux.go directory.LiveHeld authority A,D fix1;basis=Retains a trusted private-file descriptor under an OFD write lock; readers query conflicting OFD ownership without locking. 1229e6d0ef1d3c76667737ddca1eaecad755a37f8ff0f844b0cc769030c933bf |
| 120 | internal/rootstate/live_linux.go directory.liveFile authority A,D fix1;basis=Retains a trusted private-file descriptor under an OFD write lock; readers query conflicting OFD ownership without locking. 065efe7fe83f73f5461fc41499be66248a90b6365c346d0d20a572d7272e3386 |
| 121 | internal/rootstate/shared_linux.go EnsurePublicDir authority A,B4 fix1;basis=Creates or descriptor-repairs only a root:root 0700/0755 shared directory, without following symlinks or admitting writable/foreign parents. file:Open@168 33a5051e669e0743cd3cae9a68315eb3d6ad1adfd0ac3b717f797403807c8ee0 |
| 122 | internal/rootstate/shared_linux.go ensurePublicChild authority A,B4 fix1;basis=Creates or descriptor-repairs only a root:root 0700/0755 shared directory, without following symlinks or admitting writable/foreign parents. file:Fstat@537,file:Openat@276 e92a16eb3294b23cd04720a82f9172157f05c0fa8fa871b4f455f12e770897eb |
| 123 | internal/rootstate/state_other.go EnsurePublicDir authority A,B4 fix1;basis=Non-Linux shared-directory setup fails closed. 33eca74a74fb088db1909a89b0d47f70de566f00d1d5c95db8bac18a55cdbbc4 |
| 124 | @coverage internal/activator 80338afa9997834730f7596e37350a6af0b4aa85b60feda7abadb813237efaed |
| 125 | @coverage internal/cgroup f1438a80e5be81520b3fbd49d8bb77db6b98e1ba623baf45465474e2983921f8 |
| 126 | @coverage internal/changelog 4e9364be65443c3b19c52744840272f70e47d55641c81b401c580271e5ac667b |
| 127 | @coverage internal/console e35f96ce63792d535ab9c40ee3be00920610b07a9f5bb0d4f0273fd2e1bb1929 |
| 128 | @coverage internal/console/templates 6dd8d605d86863d93f46b5d49e659662ef10ac48fd3c7a29158b24669c1b5b69 |
| 129 | @coverage internal/host 39019ea0dff7034b97428196d14c5b5df6ee03b5c32eb1b625043bbde02399a6 |
| 130 | @coverage internal/hostexec 01d34e6a19b7890e22e103e5a43d3a4a0c61cdd567df64524ed18c923b657ea6 |
| 131 | @coverage internal/release 18330387f992062509b7c18828ff3c7bad9b9c4f0367fe6283a21368174f5ca0 |
| 132 | @coverage internal/rollout 05c233894de9f510dd105bc27d80c84282f32a72f03254bfb79301613bab755b |
| 133 | @coverage internal/rootstate 6debb09aa131a00e1ad1a9f2b8a8554a6ef8d70afcf047a0499c490152afda7c |
| 134 | @coverage internal/status aa228a402f1e27cd788c86e73d69328b9926990bb754a79aac0563d45159acd3 |
| 135 | |
amadan