docs/jail-mesh-recovery #241

Merged
clawdie merged 4 commits from docs/jail-mesh-recovery into main 2026-10-31 20:56:23 +01:00
Owner
No description provided.
Sam & Codex: separate tenant/Lisica identity projections from Tarsnap-backed secret recovery into Agent Vault. Keep per-jail mesh identity versus host-mediated access open pending FreeBSD validation, and specify non-circular bootstrap custody and fail-closed admission.

Start independently from main a659d10; record the pending ISO/Colibri/agent-skills pins and the stale ISO candidate reference. Add English, Slovenian, and Croatian pages and navigation. Local ci-checks, wiki lint, metadata, dates, and formatting passed; no runtime changes or native integration claims.
Reconcile the jail mesh and secret recovery contract (EN/SL/HR) with what
has actually merged:

- status: proposed -> accepted, with an explicit partially-implemented split;
  merged jail groundwork is named, mesh/recovery/quarantine stay design work
- replace the false isolation sentence: the mesh control plane grants reach,
  not authority; tag:operator permits port 22 to every node
  (network-architecture.md:182, policy.hujson.example:26)
- rewrite the dependency section to merged SHAs: clawdie-iso 653da7f,
  colibri 22ecf28, agent-skills 5b4f273; drop d6060b8/98822c6/bf63563/44e2555
- record the merged guarantees: create-only provisioning, fail-closed destroy,
  per-target observation trust

No runtime, key, archive, or policy change. Design-only: per-jail mesh identity
versus host-mediated access, Tarsnap read-key restore into Agent Vault,
quarantine admission, tenant-scoped recovery.

Verified: rebased onto 22ecf28; ./scripts/ci-checks.sh PASS; no stale pins;
EN/SL/HR key facts in parity.
Acceptance is an operator decision; the page records partial implementation without claiming acceptance. Revert the frontmatter and the three locale status lines.
docs(mesh): normalize Sova (Oxigraph) naming and 7ff9aeb main base (Sam & Antigravity)
Some checks failed
CI / packaging (pull_request) Has been cancelled
CI / python-tests (pull_request) Has been cancelled
CI / mcp-cross-language (pull_request) Has been cancelled
CI / go (pull_request) Has been cancelled
CI / markdown (pull_request) Has been cancelled
leak-guard / guard (pull_request) Successful in 2s
ee3f29e6d0
clawdie deleted branch docs/jail-mesh-recovery 2026-10-31 20:56:23 +01:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawdie/colibri!241
No description provided.