mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-24 12:42:38 +00:00
Oliver Kieselbach
19e796820e
In the normal IME deployment model the agent installs only after MDM enrollment, so TPM attestation and ZTD errors from earlier (retried) attempts sat invisible in the event log. The tracker now replays Autopilot-channel Level 1-2 records from the last 4h at startup through the regular emission pipeline. Spam containment (answering "spam or backfilled event?" — individual events, but marked and bounded): - errors only (Warning-level 100 heartbeat excluded by XPath) - harmless-ID downgrade + burst rollup still applies to backfilled records - cap of 25 records per scan, newest first (tail logged, not emitted) - RecordId watermark persisted to autopilot-error-backfill.json, advanced by both backfill and live watcher -> restarts never re-emit - events carry backfilled=true + original timeCreated; the event's own timestamp is emission time, so backend StartedAt alignment is not dragged backwards by pre-enrollment records Docs: Observability matrix updated (TPM row now visible-via-backfill) + new "Startup error backfill" section. Tests: 5 new (XPath, watermark roundtrip/monotonicity, backfilled/live markers, rollup-on-backfill); full V2 suite 1804 green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>