diff --git a/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.json b/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.json new file mode 100644 index 00000000..3e65a745 --- /dev/null +++ b/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "ct112-pinned-hostkey-active-preflight", + "started_at_utc": "2026-10-08T04:05:58Z", + "finished_at_utc": "2026-10-08T04:05:59Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "0018954fd2bcf2cda08dddb2650c2e261ddf1085da118207c042cae3a5aa7545", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd", + "sanitized_output_sha256": "3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "CT112_PINNED_HOSTKEY_ACTIVE_PREFLIGHT=V1\nMODE=read-only\nNO_PRODUCTION_MUTATION=true\nSSH_TRANSPORT=PINNED_ED25519_OOB\nOOB_CONSOLE_USER_ATTESTATION_RECORDED=true\nPRODUCTION_WRITE_AUTHORIZED=false\nPINNED_ED25519_FINGERPRINT_MATCH=true\nPINNED_ED25519_DOUBLE_SHA256_MATCH=true\nACTIVE_PARSER_OWNER=HANDLER_ACTIVE_MODULE\nACCEPTED_AND_STAGED_HASHES_PINNED=true\nSTAGED_EIGHT_GUEST_POLICY=UNAPPROVED\nTARGET_METADATA_MODE=0400\nTARGET_PARENT_MODE=0700\nACTIVE_ORIGINAL_SHA256=cd2f634414a8e38a3789015aeca5a9b47821f77d7d1fa61dcdbdc866172963be\nPROPOSED_CANDIDATE_SHA256=1db1087702ac916177f091792057bb2d7784181997477d543723d9a22f98d108\nCLUSTER_TASK_QUERY_RC=0\nCLUSTER_TASK_ENTRIES=75\nCLUSTER_RUNNING_TASK_ENTRIES=0\nVM101_STOPPED_PRESERVED=true\nBACKUP_AUDIT_SERVICE_IDLE=true\nPREFLIGHT_COMPLETED=true\nDECISION=PASS_PINNED_HOSTKEY_READONLY_PREFLIGHT_NO_WRITE\nNEXT_GATE=PINNED_ONE_FILE_ATOMIC_CHANGE_WITH_REVALIDATION_AND_ROLLBACK\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nPINNED_PREFLIGHT_PYTHON_RC=0\n" +} diff --git a/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.txt b/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.txt new file mode 100644 index 00000000..14242a22 --- /dev/null +++ b/runtime/history/SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1.txt @@ -0,0 +1,63 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=ct112-pinned-hostkey-active-preflight +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=0018954fd2bcf2cda08dddb2650c2e261ddf1085da118207c042cae3a5aa7545 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd +SANITIZED_OUTPUT_SHA256=3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd +OUTPUT_BEGIN +CT112_PINNED_HOSTKEY_ACTIVE_PREFLIGHT=V1 +MODE=read-only +NO_PRODUCTION_MUTATION=true +SSH_TRANSPORT=PINNED_ED25519_OOB +OOB_CONSOLE_USER_ATTESTATION_RECORDED=true +PRODUCTION_WRITE_AUTHORIZED=false +PINNED_ED25519_FINGERPRINT_MATCH=true +PINNED_ED25519_DOUBLE_SHA256_MATCH=true +ACTIVE_PARSER_OWNER=HANDLER_ACTIVE_MODULE +ACCEPTED_AND_STAGED_HASHES_PINNED=true +STAGED_EIGHT_GUEST_POLICY=UNAPPROVED +TARGET_METADATA_MODE=0400 +TARGET_PARENT_MODE=0700 +ACTIVE_ORIGINAL_SHA256=cd2f634414a8e38a3789015aeca5a9b47821f77d7d1fa61dcdbdc866172963be +PROPOSED_CANDIDATE_SHA256=1db1087702ac916177f091792057bb2d7784181997477d543723d9a22f98d108 +CLUSTER_TASK_QUERY_RC=0 +CLUSTER_TASK_ENTRIES=75 +CLUSTER_RUNNING_TASK_ENTRIES=0 +VM101_STOPPED_PRESERVED=true +BACKUP_AUDIT_SERVICE_IDLE=true +PREFLIGHT_COMPLETED=true +DECISION=PASS_PINNED_HOSTKEY_READONLY_PREFLIGHT_NO_WRITE +NEXT_GATE=PINNED_ONE_FILE_ATOMIC_CHANGE_WITH_REVALIDATION_AND_ROLLBACK +DIAGNOSTIC_COMPLETED=true +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_PRODUCTION_MUTATION +END_MARKER=true +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +PINNED_PREFLIGHT_PYTHON_RC=0 + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index ade8bd9e..3e65a745 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-261008-CT112-CLIENT-RSA-CACHE-CORROBORATE-99853R1", + "command_id": "SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "ct112-client-rsa-cache-corroborate", - "started_at_utc": "2026-10-08T03:55:38Z", - "finished_at_utc": "2026-10-08T03:55:38Z", + "component": "ct112-pinned-hostkey-active-preflight", + "started_at_utc": "2026-10-08T04:05:58Z", + "finished_at_utc": "2026-10-08T04:05:59Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "93d817a4bde8116be3eda68b4bcedca24f4cddf4960c1ce50d8336ae1f792642", + "command_sha256": "0018954fd2bcf2cda08dddb2650c2e261ddf1085da118207c042cae3a5aa7545", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "16b5c604558211812afce10372f4f0dc712b4d5109ee38576b9df15fa8f7b0d2", - "sanitized_output_sha256": "16b5c604558211812afce10372f4f0dc712b4d5109ee38576b9df15fa8f7b0d2", + "raw_evidence_sha256": "3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd", + "sanitized_output_sha256": "3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "CT112_CLIENT_RSA_CACHE_CORROBORATE=V1\nMODE=read-only\nNO_PRODUCTION_OR_BACKUP_OR_NETWORK_CHANGE=true\nPRODUCTION_WRITE_AUTHORIZED=false\nINDEPENDENT_OOB_ATTESTED=false\nSERVER_ED25519_99851_COMMIT_MATCH=true\nPVE_HISTORIC_RSA_PIN_MATCH=true\nWINDOWS_CLIENT_RSA_CACHE_STATUS=ABSENT\nCROSS_DEVICE_HISTORIC_KEY_CORROBORATION=NOT_AVAILABLE\nDECISION=HOLD_CLIENT_RSA_PIN_NOT_AVAILABLE_NO_WRITE\nNEXT_GATE=INDEPENDENT_CONSOLE_ATTESTATION_REQUIRED\nINDEPENDENT_OOB_ATTESTED=false\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-CLIENT-RSA-CACHE-CORROBORATE-99853R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nCLIENT_RSA_CACHE_PYTHON_RC=0\n" + "output": "CT112_PINNED_HOSTKEY_ACTIVE_PREFLIGHT=V1\nMODE=read-only\nNO_PRODUCTION_MUTATION=true\nSSH_TRANSPORT=PINNED_ED25519_OOB\nOOB_CONSOLE_USER_ATTESTATION_RECORDED=true\nPRODUCTION_WRITE_AUTHORIZED=false\nPINNED_ED25519_FINGERPRINT_MATCH=true\nPINNED_ED25519_DOUBLE_SHA256_MATCH=true\nACTIVE_PARSER_OWNER=HANDLER_ACTIVE_MODULE\nACCEPTED_AND_STAGED_HASHES_PINNED=true\nSTAGED_EIGHT_GUEST_POLICY=UNAPPROVED\nTARGET_METADATA_MODE=0400\nTARGET_PARENT_MODE=0700\nACTIVE_ORIGINAL_SHA256=cd2f634414a8e38a3789015aeca5a9b47821f77d7d1fa61dcdbdc866172963be\nPROPOSED_CANDIDATE_SHA256=1db1087702ac916177f091792057bb2d7784181997477d543723d9a22f98d108\nCLUSTER_TASK_QUERY_RC=0\nCLUSTER_TASK_ENTRIES=75\nCLUSTER_RUNNING_TASK_ENTRIES=0\nVM101_STOPPED_PRESERVED=true\nBACKUP_AUDIT_SERVICE_IDLE=true\nPREFLIGHT_COMPLETED=true\nDECISION=PASS_PINNED_HOSTKEY_READONLY_PREFLIGHT_NO_WRITE\nNEXT_GATE=PINNED_ONE_FILE_ATOMIC_CHANGE_WITH_REVALIDATION_AND_ROLLBACK\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nPINNED_PREFLIGHT_PYTHON_RC=0\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 578ec108..14242a22 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-261008-CT112-CLIENT-RSA-CACHE-CORROBORATE-99853R1 +COMMAND_ID=SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=ct112-client-rsa-cache-corroborate +COMPONENT=ct112-pinned-hostkey-active-preflight REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=93d817a4bde8116be3eda68b4bcedca24f4cddf4960c1ce50d8336ae1f792642 +COMMAND_SHA256=0018954fd2bcf2cda08dddb2650c2e261ddf1085da118207c042cae3a5aa7545 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,29 +24,40 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=16b5c604558211812afce10372f4f0dc712b4d5109ee38576b9df15fa8f7b0d2 -SANITIZED_OUTPUT_SHA256=16b5c604558211812afce10372f4f0dc712b4d5109ee38576b9df15fa8f7b0d2 +RAW_EVIDENCE_SHA256=3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd +SANITIZED_OUTPUT_SHA256=3ab12bd7ed981b8a0a1e1a2091f8d18e3f182192f929cb353f7197d20cc2e0bd OUTPUT_BEGIN -CT112_CLIENT_RSA_CACHE_CORROBORATE=V1 +CT112_PINNED_HOSTKEY_ACTIVE_PREFLIGHT=V1 MODE=read-only -NO_PRODUCTION_OR_BACKUP_OR_NETWORK_CHANGE=true +NO_PRODUCTION_MUTATION=true +SSH_TRANSPORT=PINNED_ED25519_OOB +OOB_CONSOLE_USER_ATTESTATION_RECORDED=true PRODUCTION_WRITE_AUTHORIZED=false -INDEPENDENT_OOB_ATTESTED=false -SERVER_ED25519_99851_COMMIT_MATCH=true -PVE_HISTORIC_RSA_PIN_MATCH=true -WINDOWS_CLIENT_RSA_CACHE_STATUS=ABSENT -CROSS_DEVICE_HISTORIC_KEY_CORROBORATION=NOT_AVAILABLE -DECISION=HOLD_CLIENT_RSA_PIN_NOT_AVAILABLE_NO_WRITE -NEXT_GATE=INDEPENDENT_CONSOLE_ATTESTATION_REQUIRED -INDEPENDENT_OOB_ATTESTED=false +PINNED_ED25519_FINGERPRINT_MATCH=true +PINNED_ED25519_DOUBLE_SHA256_MATCH=true +ACTIVE_PARSER_OWNER=HANDLER_ACTIVE_MODULE +ACCEPTED_AND_STAGED_HASHES_PINNED=true +STAGED_EIGHT_GUEST_POLICY=UNAPPROVED +TARGET_METADATA_MODE=0400 +TARGET_PARENT_MODE=0700 +ACTIVE_ORIGINAL_SHA256=cd2f634414a8e38a3789015aeca5a9b47821f77d7d1fa61dcdbdc866172963be +PROPOSED_CANDIDATE_SHA256=1db1087702ac916177f091792057bb2d7784181997477d543723d9a22f98d108 +CLUSTER_TASK_QUERY_RC=0 +CLUSTER_TASK_ENTRIES=75 +CLUSTER_RUNNING_TASK_ENTRIES=0 +VM101_STOPPED_PRESERVED=true +BACKUP_AUDIT_SERVICE_IDLE=true +PREFLIGHT_COMPLETED=true +DECISION=PASS_PINNED_HOSTKEY_READONLY_PREFLIGHT_NO_WRITE +NEXT_GATE=PINNED_ONE_FILE_ATOMIC_CHANGE_WITH_REVALIDATION_AND_ROLLBACK DIAGNOSTIC_COMPLETED=true CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null MUTATION_OUTCOME=NO_PRODUCTION_MUTATION END_MARKER=true -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-CLIENT-RSA-CACHE-CORROBORATE-99853R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -CLIENT_RSA_CACHE_PYTHON_RC=0 +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-PINNED-HOSTKEY-ACTIVE-PREFLIGHT-99854R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +PINNED_PREFLIGHT_PYTHON_RC=0 OUTPUT_END CHAT_OUTPUT_END