mosaicstack/stack
21
0
Fork 1
Code Issues 336 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity

fix(fleet): enforce exact comms authority #787

Merged
jason.woltje merged 2 commits from fix/766-exact-fleet-comms into main 2026-07-16 00:32:24 +00:00
Conversation 0 Commits 2 Files Changed 22
+3534 -859
jason.woltje commented 2026-07-15 21:34:38 +00:00
Owner
Copy Link
Copy Source

Summary

  • make canonical fleet identity, persona, and tool policy roster-authoritative
  • harden installed Fleet Comms context reads against symlink and ancestor substitution
  • align connector schema and runtime validation, with four-runtime regression coverage

Immutable candidate

  • head: 0dc47cac92c93a3ffd39ba9dd6685ac4165f6361
  • tree: 538de6ccce1f8c44ba288a7493286e63a3413e75
  • reviewed source base: 499090508ef1d768660e4d54e7934cbcf13cb1cd

The candidate was intentionally not rebased after main advanced. Fresh reviewer-of-record approval and terminal CI must bind to the exact committed head and actual PR diff against current main.

Evidence

  • focused four-runtime regression: 39/39
  • focused matrix: 345/345
  • Mosaic package: 910/910
  • installer/schema/shell/transport checks: pass
  • repository typecheck: 42/42
  • repository lint: 23/23
  • repository tests: 42/42
  • repository build: 23/23
  • format and git diff --check: pass

Closes #766

Fixes #766

## Summary - make canonical fleet identity, persona, and tool policy roster-authoritative - harden installed Fleet Comms context reads against symlink and ancestor substitution - align connector schema and runtime validation, with four-runtime regression coverage ## Immutable candidate - head: `0dc47cac92c93a3ffd39ba9dd6685ac4165f6361` - tree: `538de6ccce1f8c44ba288a7493286e63a3413e75` - reviewed source base: `499090508ef1d768660e4d54e7934cbcf13cb1cd` The candidate was intentionally not rebased after `main` advanced. Fresh reviewer-of-record approval and terminal CI must bind to the exact committed head and actual PR diff against current `main`. ## Evidence - focused four-runtime regression: 39/39 - focused matrix: 345/345 - Mosaic package: 910/910 - installer/schema/shell/transport checks: pass - repository typecheck: 42/42 - repository lint: 23/23 - repository tests: 42/42 - repository build: 23/23 - format and `git diff --check`: pass Closes #766 Fixes #766
jason.woltje added 1 commit 2026-07-15 21:34:39 +00:00
fix(fleet): enforce exact comms authority
ci/woodpecker/pr/ci Pipeline was successful
Details
0dc47cac92 
Co-Authored-By: Claude Opus 4.8 <[email protected]>
jason.woltje added 1 commit 2026-07-16 00:09:25 +00:00
fix(fleet): bind secure reads to descriptors
ci/woodpecker/pr/ci Pipeline was successful
Details
dd7f8a77a0 
Co-Authored-By: Claude Opus 4.8 <[email protected]>
jason.woltje merged commit adad486b6f into main 2026-07-16 00:32:24 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Defect in framework tooling or delivered code
 fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
code-be-01 (Mosaic fleet seat code-be-01) code-be-02 (Mosaic fleet seat code-be-02) code-dogfood-01 (Mosaic fleet seat code-dogfood-01) code-infra-01 (Mosaic fleet seat code-infra-01) fargo fred gate-merge-01 (Mosaic fleet seat gate-merge-01) happy jason.woltje (Jason Woltje) marcie merge-gate ops-01 (Mosaic fleet seat ops-01) ops-02 (Mosaic fleet seat ops-02) ops-03 (Mosaic fleet seat ops-03) ops-ci-01 (Mosaic fleet seat ops-ci-01) ops-deploy-01 (Mosaic fleet seat ops-deploy-01) orch-01 (Mosaic fleet seat orch-01) pepper resume rev-code-01 rev-code-02 rev-security-01 rev-security-02 rev-security-03 (Mosaic fleet seat rev-security-03) sanity scooby (Scooby) scrappy shaggy tiny topher (Mosaic fleet seat topher) velma veronica (Mosaic fleet seat veronica) vision woodpecker
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#787