feat(fleet): enforce generated environment boundary #772

2026-07-15T08:33:13Z

jason.woltje commented

2026-07-15 08:33:13 +00:00

Summary

Adds deterministic roster-derived .env.generated and constrained .env.local parsing, legacy quarantine, and private projection permissions.
Makes the tmux launch path fail closed on unmanaged or contaminated named-socket servers using install-derived ownership identity validation.
Adds focused generated-boundary, fresh-install, loader-boundary, holder ownership, and shell/systemd regression coverage.

Verification

Package typecheck, lint, and full test suite (765 tests)
Root typecheck, lint, and format check
Systemd and launcher boundary suites

Refs #758

M2-001 exclusions

This card does not add general transaction locking, late-I/O rollback, reconciliation/lifecycle CRUD, migration, remote/connector mutation, site canaries, or deployment.

## Summary - Adds deterministic roster-derived `.env.generated` and constrained `.env.local` parsing, legacy quarantine, and private projection permissions. - Makes the tmux launch path fail closed on unmanaged or contaminated named-socket servers using install-derived ownership identity validation. - Adds focused generated-boundary, fresh-install, loader-boundary, holder ownership, and shell/systemd regression coverage. ## Verification - Package typecheck, lint, and full test suite (765 tests) - Root typecheck, lint, and format check - Systemd and launcher boundary suites Refs #758 ## M2-001 exclusions This card does not add general transaction locking, late-I/O rollback, reconciliation/lifecycle CRUD, migration, remote/connector mutation, site canaries, or deployment.

jason.woltje added 1 commit 2026-07-15 08:33:13 +00:00

feat(fleet): enforce generated environment boundary

ci/woodpecker/pr/ci Pipeline was successful

Details

18b7ab96e7

Co-Authored-By: Claude Opus 4.8 <[email protected]>

jason.woltje commented

2026-07-15 08:37:15 +00:00

VERIFIED APPROVE — reviewer-of-record for FCM-M2-001 PR #772; exact head 18b7ab96e7, tree 794c7c0ae3. Independent committed-head full-delta review and security/authority regressions passed; no blocking findings. Merge remains held until exact-head pipeline 1826 is terminal green and queue guard passes.

VERIFIED APPROVE — reviewer-of-record for FCM-M2-001 PR #772; exact head 18b7ab96e7f15fd51c4d7818b48a075a8ad8632f, tree 794c7c0ae322629c5b199582d9a6737e6e586357. Independent committed-head full-delta review and security/authority regressions passed; no blocking findings. Merge remains held until exact-head pipeline 1826 is terminal green and queue guard passes.

jason.woltje merged commit 191efaefeb into main

2026-07-15 08:40:33 +00:00

jason.woltje referenced this issue from a commit

2026-07-15 08:40:34 +00:00

feat(fleet): enforce generated environment boundary (#772)

Ghost referenced this pull request

2026-08-06 04:13:13 +00:00

fleet: mechanize seat git-identity lifecycle (mint + wire MOSAIC_GIT_IDENTITY + verify write-differential) — bring-up mints tokens but never wires identity #1043

Ghost referenced this pull request

2026-08-06 04:30:12 +00:00

fix(fleet): propagate roster git identity #1073

Sign in to join this conversation.