docs: record process supervision move

This commit is contained in:
joshsiv-mulga
2026-10-02 15:34:45 +10:00
parent fd6c12f140
commit 14ce3e228f
+1
View File
@@ -235,6 +235,7 @@ while the branch is in flight; they do not describe the umbrella repository's
| `9896834b2` | `spinifex/utils` (`ExtractTags`, `MapToEC2Tags`) | `spinifex/foundation/aws/tags` | Generic EC2 tag-specification extraction and API-model projection join the AWS tag foundation; KV tag mirroring remains separate state-layer work. Focused tag tests and direct caller compilations passed; the volume package was compile-checked without execution because its test main opens a sandbox-blocked TCP listener. |
| `d8985c287` | `spinifex/utils` (`AccountKey`) | `spinifex/foundation/state/kvutil` | Account-scoped durable-key construction belongs to the state foundation; its `{accountID}.{resourceID}` layout is unchanged. AWS account policy (`GlobalAccountID`, `IsAccountID`) remains separate legacy utility work. Focused key and tag-mirror tests plus every direct resource-caller compilation passed. |
| `e6794d87d` | `spinifex/utils` (`SudoCommand`, `NeedsPrivilege`, `EndpointSysctlHelper`) | `spinifex/runtime/host/command` | Host-command privilege escalation is node-local runtime machinery and now sits beside bounded command execution. The RG-10 invariant restricting direct sudo construction to this package and `network/host/run.go` moves with it. Focused privilege, preflight, network-host, host-DNS and vpcd tests, every direct caller compilation and tagged integration/E2E compilation passed. |
| `fd6c12f14` | `spinifex/utils` (PID files, runtime directory, socket waits, process signalling and OOM score) | `spinifex/runtime/host/process` | Node-local process supervision shared by the daemon, VM runtime, Viperblockd and every named role is runtime host machinery. The remaining NBD endpoint helpers temporarily import it until they move to compute runtime. The shipped Viperblock unit comment still names `utils.KillProcess`; it is left unchanged so a structural move does not alter a delivered unit. Full preflight (excluding the pre-existing containerd advisory), focused caller suites and tagged integration/E2E compilation passed. |
The EC2 contract row is intentionally different from the directory moves: it creates
a compatibility boundary. `ec2.cmd.*` retains its deployed one-token NATS