1a3e5ec27d
Fix tenant monitor broadcast nil hub panic
2026-05-05 16:25:00 +01:00
96c2e160c9
Fix RC4 release validation blockers
2026-05-05 15:59:23 +01:00
f149c5d643
Prepare v6.0.0-rc.4 release packet
2026-05-05 15:32:32 +01:00
cd2abe879e
Fix mock mode legacy sidecar drift
2026-05-05 15:12:31 +01:00
d7225a45a0
Fix Proxmox guest memory fallbacks
...
Also fixes Ceph pool threshold resource identity.
Refs #1341
2026-05-05 14:59:29 +01:00
35b2deebfb
Harden Proxmox guest snapshot polling
...
Refs #1437
2026-05-05 14:51:28 +01:00
ce7b459aa7
Harden runtime Proxmox token ACLs
2026-05-05 14:42:05 +01:00
30180727ad
Harden Proxmox setup token ACLs
2026-05-05 14:19:50 +01:00
c61ea4947a
Make Proxmox onboarding API-first
2026-05-05 13:25:17 +01:00
cf103ca9fe
Harden root agent service defaults
2026-05-05 13:03:13 +01:00
81b31e4d3b
Remove monitored-system volume caps
...
Retire runtime/API/UI monitored-system volume enforcement now that infrastructure monitoring is no longer capped.
Keep only legacy metadata scrubbing and purchase-start compatibility for old max_monitored_systems references.
Rename the remaining preview surface to monitored-system impact and make previews explanatory rather than save-blocking.
Update subsystem contracts and RA7 evidence for the caps-retired invariant.
2026-05-05 12:59:59 +01:00
aa5472553f
Fix Workloads empty state source detection
...
Refs #1456
2026-05-05 09:42:31 +01:00
632f0af7f3
Keep uncapped continuity from writing raw caps
2026-05-05 09:33:44 +01:00
641660dced
Fix mdadm RAID fallback discovery
...
Refs #1455
2026-05-05 09:29:34 +01:00
fed3b776e0
Fail closed on ambiguous email principal resolution
2026-05-05 09:26:10 +01:00
d91c2afedb
Fail closed dry-run action execution
2026-05-05 09:22:04 +01:00
53a928ee2d
Prevent contact-email principal takeover
2026-05-05 09:19:29 +01:00
fe30ecc81e
Fix TrueNAS CORE agent supervisor restart
...
Refs #1457
2026-05-05 09:13:03 +01:00
235e7343b2
Align AI action audits with execution lifecycle
2026-05-04 23:35:39 +01:00
82a2494ffa
Add action execution safety contract
2026-05-04 23:19:58 +01:00
ea0b20cd19
Use strict org principals for runtime access
2026-05-04 23:16:15 +01:00
002d68cef7
Require stored principal for checkout magic links
2026-05-04 23:06:47 +01:00
2040285085
Add action decision API
2026-05-04 22:56:55 +01:00
adaad70077
Canonicalize legacy hosted signup principals
2026-05-04 22:52:00 +01:00
7af1276c3b
Fail closed on blank magic-link principals
2026-05-04 22:43:35 +01:00
2fa271bbe9
Fix storage primary issue impact handling
...
Refs #423
2026-05-04 18:42:09 +01:00
0bfed25e45
docs: clarify agent privilege guidance
...
Refs #1453
2026-05-04 18:04:04 +01:00
9cddb49dd5
Fail closed on hosted handoff identity
2026-05-04 09:47:54 +01:00
1a9fa936ee
Fix release key helper module path
2026-05-04 09:44:41 +01:00
fdb9ad17f6
Use stable hosted signup owner ids
2026-05-04 09:33:19 +01:00
9291ee2999
Persist action plans in audit trail
2026-05-04 09:30:57 +01:00
77ecba07b7
Fail closed on hosted owner email fallback
2026-05-04 09:20:52 +01:00
e3c1dad256
Hide public demo admin reads
2026-05-04 09:14:09 +01:00
c436e1a2a2
Add CLI fleet connection reads
2026-05-04 08:40:34 +01:00
3953554ae1
Bind owner identity across token minting
2026-05-04 00:50:14 +01:00
c874da9ab8
Reserve API token owner metadata
2026-05-04 00:30:09 +01:00
863f214c10
Add CLI action audit reads
2026-05-04 00:18:19 +01:00
2c96242487
Use stable SSO principals
...
Derive OIDC and SAML browser-session principals from provider-scoped subjects instead of mutable username or email claims.
Preserve compatibility by migrating legacy username/email RBAC assignments to the stable SSO principal when no authoritative group mapping is present, and pin the invariant in API/security contracts.
2026-05-04 00:16:31 +01:00
f0bf88a89d
Add CLI action capability discovery
2026-05-04 00:10:15 +01:00
5fbe723ad9
Add CLI action planning adapter
2026-05-04 00:05:21 +01:00
7829c3e6ed
Pin hosted identity invariants
...
Resolve hosted magic-link verification through current organization membership so sessions bind to the stored stable user principal instead of token email.
Add the v6 identity invariant contract and static guards covering hosted handoff, checkout, provisioning, and magic-link boundaries.
2026-05-03 23:58:08 +01:00
b11f57ed62
Add API-first action planning endpoint
2026-05-03 23:51:54 +01:00
3e497ecb70
Harden hosted tenant identity keys
...
Use stable control-plane user IDs as hosted tenant organization principals while preserving email as contact metadata and legacy fallback. Cloud handoff sessions now bind to the signed subject instead of email, seeded tenant orgs store owner/member email separately from durable user IDs, and the subsystem contracts pin that boundary.
2026-05-03 23:28:26 +01:00
d994a7a60d
Resolve agent-ready operations target scope
2026-05-03 23:27:49 +01:00
4f75542e50
Record agent-ready operations proof gap
2026-05-03 23:23:10 +01:00
db97478566
Reduce metrics rollup write amplification
...
Refs #1124
2026-05-03 21:43:20 +01:00
f1744d36d0
Refresh RC3 packet for metrics proof fix
2026-05-03 16:38:00 +01:00
f69e68d4a4
Refresh RC3 packet for stable installer fix
2026-05-03 16:18:56 +01:00
c27814d190
Fix stable installer prerelease selection
...
Refs #1435
2026-05-03 15:20:18 +01:00
6459515c78
Refresh RC3 packet for SSO candidate commits
2026-05-03 15:09:42 +01:00
rcourtman