[minor] Add off-host backup and restore proof - #40

Merged

libops-agent merged 67 commits into

mainfrom

priority-review-remediation

Aug 9, 2026

Commits on Aug 8, 2026

[minor] Add off-host backup and restore proof
libops-agent
committed
e3b313a
[patch] Restore required DigitalOcean ISLE smoke
libops-agent
committed
2361abf
[patch] Allow ISLE bootstrap to complete in smoke
joecorall
committed
67bc19a
[patch] Make provisioning readiness observable
joecorall
committed
909d6b4
[patch] Promote first-customer application releases
joecorall
committed
df8868e
[patch] Align config management release fixtures
joecorall
committed
d737965
[patch] Check in config management assertions
joecorall
committed
6137153
[minor] Harden first-customer runtime recovery
joecorall
committed
8591a50
[patch] Satisfy runtime shell lint
joecorall
committed
b2057cf
[patch] Align Vault launcher contract
joecorall
committed
89f395b
[patch] Make Salt rollout prerequisites explicit
joecorall
committed
f0744ef
[patch] Validate checked-in recovery programs
joecorall
committed
fe03f10
[patch] Cover checked-in backup manifest program
joecorall
committed
5e33a74
[patch] Normalize rootfs archive ownership
joecorall
committed
62896ba
[patch] Support COS writable runtime paths
joecorall
committed
38b8862
[patch] Use valid GCP contract name
joecorall
committed
c6984fd
[patch] Normalize trusted bootstrap files
joecorall
committed
b5a9f67
[patch] Apply shared bootstrap hardening to adapters
joecorall
committed
1025545
[patch] Assert root-owned cloud-init overlays
joecorall
committed
f6dc2f4
[patch] Assert root-owned portable overlays
joecorall
committed
15a9275
[patch] Preserve empty managed artifact manifest
joecorall
committed
1712f2c

Commits on Aug 9, 2026

[patch] Restore noninteractive host bootstrap
joecorall
committed
d2e0f62
[patch] Discover secrets in Compose Specification files
joecorall
committed
c83bb6c
[patch] Invoke Compose secret parser from file
joecorall
committed
15c52fd
[minor] Harden first-customer provisioning runtime
libops-agent
committed
8aad96d
[patch] Surface configuration smoke failures
libops-agent
committed
91daa24
[patch] Repair hosted contract expectations
libops-agent
committed
3dee4a6
[patch] Cover both rootfs archive trust paths
libops-agent
committed
5badc2f
[patch] Exercise checked lifecycle executor in CI
libops-agent
committed
f956455
[patch] Use checked lifecycle fixture in CI
libops-agent
committed
7bce652
[patch] Invoke lifecycle fixture with Bash
libops-agent
committed
7adeeaf
[patch] Reuse checked executor fixture in contracts
libops-agent
committed
d094455
[patch] Refresh hosted smoke contracts
libops-agent
committed
166df9b
[patch] Keep template tests offline
libops-agent
committed
df3a69c
[patch] Isolate provider tests from release network
libops-agent
committed
e8bc5cc
[patch] Keep DigitalOcean tests in archive mode
libops-agent
committed
8bdc89a
[patch] Make the GCP archive contract test hermetic
libops-agent
committed
cbf6656
[patch] Correct the rootfs release sidecar contract
libops-agent
committed
01daec8
[patch] Scope the GCP bootstrap order contract
libops-agent
committed
770edcc
[patch] Exercise Linode contracts in archive mode
libops-agent
committed
aea3600
[patch] Refresh rootfs contract fixture
libops-agent
committed
216a15d
[patch] Keep provider contracts in archive mode
libops-agent
committed
d9d6f31
[patch] Override nested provider contract data
libops-agent
committed
54bb577
[patch] Keep Linode provider contracts in archive mode
joecorall
committed
73a12f6
[patch] Promote hardened compose templates
joecorall
committed
2eca1e5
[patch] Align promoted template contracts
joecorall
committed
54cb265
[patch] Align Salt template contract
joecorall
committed
6300d66
[patch] Align Drupal Salt contract
joecorall
committed
9f354dd
[patch] Initialize default component state
joecorall
committed
1803186
[patch] Refresh rootfs contract fixtures
joecorall
committed
3294224
[patch] Fence managed Compose reconciliation
joecorall
committed
274f255
[patch] Repin rootfs contract fixtures
joecorall
committed
41aaa8c
[patch] Make GCP smoke zone selectable
joecorall
committed
ed1e716
[patch] Isolate fresh GCP smoke location
joecorall
committed
fadd0ab
[patch] Run built-in lifecycle on noexec hosts
libops-agent
committed
908b8be
[patch] Repin lifecycle rootfs contract fixtures
libops-agent
committed
1b1872b
[patch] Use executable Compose plugin for diagnostics
libops-agent
committed
2698a12
[patch] Repin diagnostic rootfs contract fixtures
libops-agent
committed
4627b00
[patch] Stage hosted contracts on executable disk
libops-agent
committed
bf363ce
[patch] Avoid noexec lifecycle contract preflight
libops-agent
committed
e627c1c
[patch] Pin final sitectl release catalog
libops-agent
committed
e4e7372
[patch] Align release catalog contract fixtures
libops-agent
committed
94aba41
[patch] Align inherited config catalog assertions
libops-agent
committed
9a3c8f6
[patch] Pin sitectl ownership fix release
libops-agent
committed
52f1e22
[patch] Invoke reviewed runtime programs by path
joecorall
committed
9e296bc
[patch] Follow checked key validation program
joecorall
committed
7357502
[patch] Preserve GCP bootstrap metadata headroom
joecorall
committed
9e4d05c