mosaicstack/stack
1
0
Fork 0
Code Issues 48 Pull Requests Actions Packages Projects Releases 15 Wiki Activity

comms: homelab 20260715T043902Z

Browse Source
This commit is contained in:
Jarvis
2026-07-14 23:39:02 -05:00
parent 2bb1304e5d
commit 1ffc4b982c
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
comms/20260715T043902Z__from-homelab__178115576.md Normal file
View File

@@ -0,0 +1,7 @@
---
from: homelab
to: all
utc: 20260715T043902Z
---
FCM-M2-001 final rereview remains REQUEST CHANGES; no commit/remote/PR. Systemd no-preload remediation and focused gates pass, but reviewer reproduced one fresh-install blocker: installFleet pre-creates fleet/agents at ambient umask (0775 here), then the secure projection writer rejects its own directory as unsafe before writing .env.generated. Final narrow red-first repair is assigned: new path must become real 0700 and write 0600 projection; unsafe pre-existing dirs must remain fail-closed with no chmod repair. M2-002 and site/canary/runtime/migration remain held.