Repository navigation

Release 0.3.0: VM isolation and typed host authority - #7

Open

AlanD20 wants to merge 1457 commits into

mainfrom

0.3.0-release

Open

Release 0.3.0: VM isolation and typed host authority#7
AlanD20 wants to merge 1457 commits into
mainfrom
0.3.0-release

This pull request is big! We're only showing the most recent 250 commits

Commits on Oct 9, 2026
Commits on Oct 10, 2026
- docs: record completed cache CI and named-runner installation
  AlanD20
  committed
  9322680
- docs: qualify standalone SIGINT export recovery
  AlanD20
  committed
  f5134df
- test(kernel): initialize receipt-bound retained cache before inventory
  AlanD20
  committed
  7fa57a7
- docs: record retained kernel initialization correction
  AlanD20
  committed
  f3ccc67
- test(kernel): own official producer acquisition sequence
  AlanD20
  committed
  5f42000
- fix: retain protected branch authority outside cache retirement
  AlanD20
  committed
  b254f01
- fix(kernel): return committed default pull result
  AlanD20
  committed
  4bc51ee
- docs: record branch authority and kernel result integration
  AlanD20
  committed
  e334ccf
- test(kernel): admit closed normal cache initialization outputs
  AlanD20
  committed
  ed16366
- docs: record coherent branch-layout release gates
  AlanD20
  committed
  d7c7721
- docs: record original kernel acquisition cleanup qualification
  AlanD20
  committed
  f661fba
- test: bind host reboot receipt to observed finite controls
  AlanD20
  committed
  72b0be4
- docs: remove mandatory QA memory envelope instructions
  AlanD20
  committed
  5051e57
- docs: record installed shared-filesystem cache retirement evidence
  AlanD20
  committed
  af21587
- test: initialize official kernel QA with trusted default pair
  AlanD20
  committed
  a604771
- docs: record trusted official kernel fixture checks
  AlanD20
  committed
  74d7f7c
- test(cache): qualify protected snapshot and volume retirement
  AlanD20
  committed
  d245d6a
- docs: record distinct-filesystem retirement qualification
  AlanD20
  committed
  5267b3b
- docs: include required domain in host reboot commands
  AlanD20
  committed
  03d2dd6
- test: bound official kernel pulls in owned private process groups
  AlanD20
  committed
  86f3273
- docs: record scoped official kernel timeout correction
  AlanD20
  committed
  1be44df
- test: allow host reboot cold guest agent connection
  AlanD20
  committed
  3fd60b6
- test: use SSH for named host reboot orchestration
  AlanD20
  committed
  2a00f3e
- docs: record scoped named runner SSH reboot correction
  AlanD20
  committed
  ffd1fa0
- docs: record actual reboot staging and exec readiness failures
  AlanD20
  committed
  269e074
- test: persist host reboot phase inputs before force reboot
  AlanD20
  committed
  a90fcfb
- docs: record reboot input durability correction and focused checks
  AlanD20
  committed
  190dfff
- test: retain last directional exec readiness failure
  AlanD20
  committed
  6af6c51
- docs: record narrowed guest agent readiness failures
  AlanD20
  committed
  fba1ec9
- test(host): assert boot-derived network absence before repair
  AlanD20
  committed
  74a916d
- docs: record completed installed host reboot journey
  AlanD20
  committed
  211dbde
- docs: record early OpenRC agent startup decision
  AlanD20
  committed
  a6a1946
- fix(loopmount): start OpenRC guest agent in boot runlevel
  AlanD20
  committed
  329c874
- docs: describe implemented early OpenRC agent provisioning
  AlanD20
  committed
  c54bfe8
- test(vm): assert cold networkless agent readiness within five seconds
  AlanD20
  committed
  676b3fc
- docs: align system run guide with completed host reboot proof
  AlanD20
  committed
  704545d
- test(vm): select preseeded Alpine for cold networkless lifecycle
  AlanD20
  committed
  ea88db4
- docs: record passing installed early-agent regression cases
  AlanD20
  committed
  dcc3e10
- test(vm): select preseeded Alpine for pressure fixture
  AlanD20
  committed
  5c7c87f
- docs: clarify operator storage and runtime contracts
  AlanD20
  committed
  3f511a0
- docs: condense 0.3.0 changelog for release readers
  AlanD20
  committed
  bc37d17
- docs: record bounded official-kernel and pressure qualification
  AlanD20
  committed
  b773883
- test: budget kernel domain for bounded official builds
  AlanD20
  committed
  8411192
- docs: record coherent Go CI and root qualification
  AlanD20
  committed
  408faf6
- qa: retain named runner evidence and finalize release proofs
  AlanD20
  committed
  24ff649
- fix(image): use case-sensitive Ubuntu Minimal checksum URL
  AlanD20
  committed
  e467a17
- qa: account exact collected nodes and verified release carry
  AlanD20
  committed
  2631ac4
- docs: document exact-node release evidence workflow
  AlanD20
  committed
  f76ff49
- fix: admit matching Firecracker and Jailer 1.17.0 pair
  AlanD20
  committed
  7365d39
- test: qualify runner fixtures with Firecracker 1.17.0
  AlanD20
  committed
  423c176
- docs: align operator guidance with approved Firecracker 1.17.0 pair
  AlanD20
  committed
  a615cd3
- docs: record reviewed Firecracker 1.17.0 launch policy
  AlanD20
  committed
  86c4ef5
- docs: bound Firecracker ELF audit claim to observed headers
  AlanD20
  committed
  88529ff
- test: complete Firecracker 1.17 release fixture migration
  AlanD20
  committed
  0e64739
- image: diagnose staging population copy failures
  AlanD20
  committed
  198ed00
- qa: install pytest timeout through apt in runner base
  AlanD20
  committed
  4865cae
- docs: describe apt-managed runner timeout plugin
  AlanD20
  committed
  9b6b19b
Commits on Oct 11, 2026
- qa: allow protected reusable-base import to finish
  AlanD20
  committed
  9eb2200
- docs: keep system-test run guide operational
  AlanD20
  committed
  a0e1d89
- fix(vm): release leases after unrecorded root removal
  AlanD20
  committed
  8b9063a
- fix(qa): gracefully bound mvm command timeout cleanup
  AlanD20
  committed
  8ba5f99
- fix(qa): require exact runner base image identity
  AlanD20
  committed
  d688eb6
- docs: clarify clean installation and QA tooling fixes
  AlanD20
  committed
  b3f8e37
- fix(qa): allow bounded nested prepare creation time
  AlanD20
  committed
  fbb4dd9
- fix(qa): verify mirror reads beyond nested image cache
  AlanD20
  committed
  4f1552f
- fix(qa): make staged evidence helpers readable by runner
  AlanD20
  committed
  0713cd9
- docs: record verified release runner preparation
  AlanD20
  committed
  ad17860
- fix(qa): establish Alpine default before T2 tests
  AlanD20
  committed
  e93ab6f
- fix(qa): align Jailer fixtures with isolation contracts
  AlanD20
  committed
  baeb492
- fix(qa): accept exact observed unlimited reboot controls
  AlanD20
  committed
  6bd4aa0
- docs(qa): document truthful reboot control receipts
  AlanD20
  committed
  7f5c0cd
- fix(qa): align domain runner creation deadlines
  AlanD20
  committed
  1cf2dff
- fix(jailer): refresh exited processes before namespace cleanup
  AlanD20
  committed
  c9f83f3
- docs(qa): record coherent cleanup candidate gates
  AlanD20
  committed
  cc32d71
- docs(qa): clarify deferred aarch64 qualification
  AlanD20
  committed
  c869257
- fix(qa): bind jailer fixtures to explicit cached images
  AlanD20
  committed
  467f729
- fix(qa): extend base dependency installation deadline
  AlanD20
  committed
  083aa25
- fix(qa): preserve both networks across host reboot
  AlanD20
  committed
  b01a3fc
- test(env): match typed specs and structured CLI results
  AlanD20
  committed
  da8e6a6
- docs(qa): record environment contract verification
  AlanD20
  committed
  5561778
- docs(snapshot): describe protected capture and restore authority
  AlanD20
  committed
  cbbb5dc
- test(kernel): isolate default mutations from shared assets
  AlanD20
  committed
  7b64da9
Commits on Oct 12, 2026
- fix(snapshot): retry restore backing contention atomically
  AlanD20
  committed
  762e57d
- style(snapshot): enforce CI line-length formatting
  AlanD20
  committed
  905c2cd
- fix(snapshot): wait for restore metadata preflight contention
  AlanD20
  committed
  4d002a3
- fix(qa): align snapshot rootfs cases with endpoint contracts
  AlanD20
  committed
  8f1cf54
- fix(qa): align isolated VM fixtures and per-operator mirror access
  AlanD20
  committed
  7e2b6fb
- fix(qa): admit exact cached imported runner bases
  AlanD20
  committed
  8c96402
- docs(qa): clarify cached imported runner base admission
  AlanD20
  committed
  d1327a1
- fix(system-tests): qualify cache cleanup on fresh identities
  AlanD20
  committed
  2fa1295
- fix(host): observe managed sudoers policy through root authority
  AlanD20
  committed
  a5cfcb9
- docs: clarify host policy observation and cache fixture scope
  AlanD20
  committed
  00fca04
- test: inspect protected sudoers through authenticated stat
  AlanD20
  committed
  c7a9fd3
- fix(loopmount): preserve whole-image copy failures
  AlanD20
  committed
  c5edc8b
- test(images): reclaim scratch only after complete passing teardown
  AlanD20
  committed
  24f443a
- docs(testing): document image scratch outcome lifecycle
  AlanD20
  committed
  9803867
- fix(agent): preserve completed unused source-session commands
  AlanD20
  committed
  de46e04
- test(qa): register exact imported runner kernel for source-session guests
  AlanD20
  committed
  842666b
- docs(exec): clarify source completion and kernel capability
  AlanD20
  committed
  84afd9e
Commits on Oct 13, 2026
Commits on Oct 14, 2026
- docs: accept immutable kernel successor lineage design
  AlanD20
  committed
  9f6d4e3
- test: preserve kernel cleanup ownership and primary failures
  AlanD20
  committed
  719961c
- docs: record complete historical kernel qualification checkpoint
  AlanD20
  committed
  f479b38
- test: verify pinned candidate507 source carry with original provenance
  AlanD20
  committed
  4891487
- docs: distinguish carry tooling checks from actual release joining
  AlanD20
  committed
  d17bea8
- feat: preserve immutable kernel lineage across retired caches
  AlanD20
  committed
  0a8ff31
- docs: record implemented kernel lineage and root verification limits
  AlanD20
  committed
  1119bad
- test: cover identical kernel succession after cache retirement
  AlanD20
  committed
  8403e02
- style: wrap kernel lineage code to project line limits
  AlanD20
  committed
  4af8db3
- test: route kernel succession through a fresh tier2 runner
  AlanD20
  committed
  04df460
- docs: record coherent lineage build and QA installation
  AlanD20
  committed
  7a8317c
- fix(image): preserve sparse VM rootfs exports
  AlanD20
  committed
  cf714d4
- docs: describe sparse VM image export behavior
  AlanD20
  committed
  7c16690
- fix(qa): generate hostname-safe runner names
  AlanD20
  committed
  e215e26
- fix(kernel): preserve typed import conflict details
  AlanD20
  committed
  ce5b091
- docs: record kernel import error preservation
  AlanD20
  committed
  e7d2f63
- fix(qa): use private temporary roots for ordinary runner tests
  AlanD20
  committed
  a26a0bc
- fix(qa): observe committed kernel lineage during cache retirement
  AlanD20
  committed
  7f49cd0
- fix(qa): bind reboot phases to an explicit operator namespace
  AlanD20
  committed
  092cd5c
- docs(qa): document explicit host reboot namespace binding
  AlanD20
  committed
  738d866
- docs: record current release qualification checkpoint
  AlanD20
  committed
  10de0df
Commits on Oct 15, 2026
- fix(qa): allow guest boot before policy agent probes
  AlanD20
  committed
  e372c5b
- test(qa): retain boot logs on agent readiness failure
  AlanD20
  committed
  beb873c
- fix(qa): await guest startup at Jailer lifecycle boundaries
  AlanD20
  committed
  0574702
- fix(qa): await agent readiness across VM lifecycle transitions
  AlanD20
  committed
  471a285
- fix(qa): await agent startup in SSH and storage journeys
  AlanD20
  committed
  4764bb0
- docs: record 363 accepted qualification cases
  AlanD20
  committed
  f0bba2f
- docs: record 492 accepted qualification cases
  AlanD20
  committed
  1805750
- fix(qa): retain bounded local pytest timeout diagnostics
  AlanD20
  committed
  d51e3ee
- fix(qa): contain local pytest timeouts and retain qualification host
  AlanD20
  committed
  cd569db
- test(qa): isolate timeout gate fixtures
  AlanD20
  committed
  494373e
- docs(qa): explain local pytest timeout reconciliation
  AlanD20
  committed
  b56fa77
- fix(qa): budget nested isolated aggregate fixture cycles
  AlanD20
  committed
  c4acd1c
- docs(qa): explain measured nested domain deadline
  AlanD20
  committed
  cc04f03
- docs(qa): record 504 accepted qualification cases
  AlanD20
  committed
  d5e694e
- docs: correct operator storage and privileged operation guidance
  AlanD20
  committed
  f1d2403
- docs: correct current operator reference contracts
  AlanD20
  committed
  3da9a44
- docs: restore the actual writeback default
  AlanD20
  committed
  df00fc5
Commits on Oct 16, 2026
- qa: bind candidate565 final evidence to reviewed source milestones
  AlanD20
  committed
  64685a5
- qa: distinguish verifier and release checkpoint provenance
  AlanD20
  committed
  1122be6
- docs(qa): describe closed candidate565 evidence join
  AlanD20
  committed
  049233e
- fix(qa): isolate the exact trusted release receipt command
  AlanD20
  committed
  3ffb56b
- docs(qa): record complete ordinary kernel526 checkpoint
  AlanD20
  committed
  57742e1
- docs(qa): record verified 528-node candidate565 evidence join
  AlanD20
  committed
  8690e91
- docs: condense release plan and checklist to current gates
  AlanD20
  committed
  03b8463
- docs(qa): replace execution diaries with current evidence summary
  AlanD20
  committed
  7935abe
- docs(adr): reconcile completed cache and kernel qualification
  AlanD20
  committed
  4034eef
- docs: align guides and architecture records with 0.3.0
  AlanD20
  committed
  e0be4e8
Commits on Oct 19, 2026
- fix(image): report persisted acquisition ownership
  AlanD20
  committed
  485817b
- feat(env): add owned volumes policies and guest readiness
  AlanD20
  committed
  230d59a
- docs(env): document resources policies readiness and cleanup
  AlanD20
  committed
  eb894de
- refactor(db): initialize 0.3.0 from one atomic baseline
  AlanD20
  committed
  71e2713
- fix(network): accept default routes sharing one NAT uplink
  AlanD20
  committed
  75a95fa
- docs: record v0.3 clean-install baseline and uplink admission
  AlanD20
  committed
  5cbc37c
- test(kernel): expect atomic baseline initialization outputs
  AlanD20
  committed
  01c48be
- fix(network): observe owner-unset foreign TUN devices
  AlanD20
  committed
  c3ce033
Commits on Oct 20, 2026
- fix(loopmount): use supported Btrfs no-replay mount option
  AlanD20
  committed
  8237d7c
Commits on Oct 27, 2026
Commits on Oct 30, 2026
- fix(qa): check nftables readiness through the host info contract
  AlanD20
  committed
  8c1a6a6
- fix(vm): report rootfs provisioning separately from cloud-init
  AlanD20
  committed
  8f4a938
- fix(jailer): admit fixed local cloud-init seeds for networkless VMs
  AlanD20
  committed
  f24b109
- test(vm): check hardware NIC absence for local-seed guests
  AlanD20
  committed
  6e75b48
- fix(image): expose exact retained local import resume
  AlanD20
  committed
  3d1a852
- fix(image): reject retained resume after backend changes
  AlanD20
  committed
  437f855
- fix(image): resume the recorded managed extracted filesystem
  AlanD20
  committed
  1d7e2cd
- test(image): isolate retained source path confinement
  AlanD20
  committed
  beae5c5
- style(image): format resume validation errors
  AlanD20
  committed
  42a254e
- fix(image): retain original failure in import error details
  AlanD20
  committed
  1f00723
Commits on Nov 12, 2026
Commits on Nov 13, 2026
- chore(release): prepare 0.3.0 version metadata
  AlanD20
  committed
  0776b34
- docs(release): reconcile memory policy and final checklist
  AlanD20
  committed
  2eb0cb4
- docs(release): record local gates and final approval boundary
  AlanD20
  committed
  f28e9a2
Commits on Nov 14, 2026
- fix(host): admit terminal cleanup history during reset
  AlanD20
  committed
  6f016f7
- feat(admin): add ownership-checked full uninstall
  AlanD20
  committed
  8c8c7a8
- docs: explain full uninstall and clean reinstall
  AlanD20
  committed
  fd22dc1
- fix(packaging): drop obsolete firewall CLI dependencies
  AlanD20
  committed
  49282ff
- chore(release): keep generated coverage out of build provenance
  AlanD20
  committed
  4f007f8

Commits

Commits on Oct 9, 2026

Commits on Oct 10, 2026

Commits on Oct 11, 2026

Commits on Oct 12, 2026