Oliver Kieselbach
1a1573ec45
Closes the pre-existing TODO Codex flagged in EnrollmentOrchestrator.cs
(doc line 39 + init line 354) and removes the recovery-time duplicate-
trace-ordinal hazard it would have left in place.
Before: the provider was constructed with no seed, so on agent restart
its counter began at -1 and the first post-recovery signal landed with
SessionTraceOrdinal=0 — guaranteeing a collision with whatever trace
ordinal the previous session had already persisted. The collision
surfaces at the Inspector (cross-type correlation fields) and in any
downstream replay that joins on SessionTraceOrdinal.
Interface additions (ISignalLogWriter + IJournalWriter):
- long LastTraceOrdinal { get; }
max SessionTraceOrdinal observed across persisted entries; -1 on an
empty log. Distinct from LastOrdinal / LastStepIndex which track the
kind-specific monotone counters; SessionTraceOrdinal is the
session-wide correlation counter shared across Event + Signal +
Transition (DecisionSignal §2.2).
Implementations (SignalLogWriter + JournalWriter):
- Renamed ScanHighestOrdinal / ScanHighestStepIndex into a shared
ScanRecoveryState() that populates both fields in a single JSONL pass
on construction. Same stop-at-corrupt-tail semantic as before
(recovery §2.7). The Append path also tracks the max inline so
subsequent queries after a writer is in use stay O(1).
EnrollmentOrchestrator.Start (step 9):
var traceSeed = Math.Max(
Math.Max(_signalLog.LastTraceOrdinal, _journal.LastTraceOrdinal),
_spool.LastAssignedItemId);
_traceCounter = new SessionTraceOrdinalProvider(seedLastAssigned: traceSeed);
All three sources are consulted because each can hold a trace ordinal
the other two missed:
- SignalLog may contain signals whose spool-enqueue later failed (the
emit path swallows transport exceptions per SignalIngress §2.7c).
- Journal likewise for transitions with failed spool-enqueue.
- Spool.LastAssignedItemId is the single-source-of-truth for everything
that reached the transport — including Events that bypass the provider
entirely but still share the TraceOrdinal space.
Test harness:
- FakeJournalWriter gains a LastTraceOrdinal property (computes max
from its captured Appended list) so processor-level tests keep
compiling.
Tests (+6 in V2.Core.Tests):
- SignalLogWriter: empty → -1; max across out-of-order trace ordinals
(not just the last appended); restart rescans on-disk file to
recover max.
- JournalWriter: same three cases.
Both empty-log tests exist so the orchestrator seed falls through
cleanly on first-ever startup (seedLastAssigned=-1 → Next()=0 matches
the fresh-session invariant).
Suites: V2.Core 422 green (prev 416 + 6 new). Full solution build green.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Autopilot Monitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments. Gain full visibility into every enrollment session with a detailed event timeline, fleet health dashboards, and session reporting. Define custom analysis rules to automatically detect issues and gather rules to collect targeted evidence. Retrieve diagnostics packages on demand, configure agent settings like auto-reboot behavior and automatic timezone adjustment — all managed centrally from the web dashboard.
Private Preview
Autopilot Monitor is currently running as a Private Preview. Visit autopilotmonitor.com to request access and learn more.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full documentation is available at autopilotmonitor.com/docs
License
This project uses a split licensing model:
- MIT License — Agent (
src/Agent/) and Shared library (src/Shared/) — unrestricted use on end-user devices - AGPL-3.0 — Backend (
src/Backend/), Web Dashboard (src/Web/), and MCP Server (src/McpServer/) — server-side components remain open source
See LICENSE for full details.