Oliver Kieselbach 049b6e5b4a fix(backend): reconcile silent sessions to Succeeded when user provably finished setup (session 294ab5b4) ...

The timeout classifier only read the ESP registry rollup, so a session
where the user reached the desktop and completed Windows Hello — with
only the RealmJoin completion gate still pending when the agent went
silent — was labeled AwaitingUser (and would have graduated to
Incomplete at grace expiry). Desktop arrival + a positive Hello terminal
are the agent's own Classic completion AND-gate; the RJ gate
self-releases after 60 min, so such a session's enrollment succeeded and
only the completion report never left the device.

- EnrollmentTimeoutClassifier: rollup now carries DesktopArrived,
  HelloResolved (hello_provisioning_completed/hello_skipped only) and
  RealmJoinDetected/Resolved (realmjoin_resolved/realmjoin_timeout);
  new rule 4 reconciles desktop+Hello sessions to Succeeded with an
  RJ-aware reason. Explicit failure and agent_emergency_break still win.
- FailureSnapshotBuilder: schema v3 embeds the new evidence
  (helloResolved, realmJoinDetected, realmJoinResolved).
- Web FailureSnapshotBlock: renders Hello completed + RealmJoin rows.
- Design doc: decision table updated; desktop_arrived ALONE stays
  rejected as a completion signal.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 10:26:37 +02:00

..

design

fix(backend): reconcile silent sessions to Succeeded when user provably finished setup (session 294ab5b4)

2026-07-10 10:26:37 +02:00

images

docs(readme): green brand logo in front of the title

2026-07-06 20:27:20 +02:00

architecture.md

docs: trim architecture.md to overview + solution structure

2026-07-06 21:39:29 +02:00

customer-graph-add-on-permissions.md

feat(backend,web): optional Graph add-on permissions for Intune script display names

2026-05-19 01:14:21 +02:00