mosaicstack/stack
1
0
Fork 0
Code Issues 57 Pull Requests Actions Packages Projects Releases 15 Wiki Activity

fix(fleet): enforce exact comms authority #787

Merged
jason.woltje merged 2 commits from fix/766-exact-fleet-comms into main 2026-07-16 00:32:24 +00:00
Conversation 0 Commits 2 Files Changed 22 +3534 -859
jason.woltje commented 2026-07-15 21:34:38 +00:00
Owner
Copy Link

Summary

  • make canonical fleet identity, persona, and tool policy roster-authoritative
  • harden installed Fleet Comms context reads against symlink and ancestor substitution
  • align connector schema and runtime validation, with four-runtime regression coverage

Immutable candidate

  • head: 0dc47cac92c93a3ffd39ba9dd6685ac4165f6361
  • tree: 538de6ccce1f8c44ba288a7493286e63a3413e75
  • reviewed source base: 499090508ef1d768660e4d54e7934cbcf13cb1cd

The candidate was intentionally not rebased after main advanced. Fresh reviewer-of-record approval and terminal CI must bind to the exact committed head and actual PR diff against current main.

Evidence

  • focused four-runtime regression: 39/39
  • focused matrix: 345/345
  • Mosaic package: 910/910
  • installer/schema/shell/transport checks: pass
  • repository typecheck: 42/42
  • repository lint: 23/23
  • repository tests: 42/42
  • repository build: 23/23
  • format and git diff --check: pass

Closes #766

Fixes #766

## Summary - make canonical fleet identity, persona, and tool policy roster-authoritative - harden installed Fleet Comms context reads against symlink and ancestor substitution - align connector schema and runtime validation, with four-runtime regression coverage ## Immutable candidate - head: `0dc47cac92c93a3ffd39ba9dd6685ac4165f6361` - tree: `538de6ccce1f8c44ba288a7493286e63a3413e75` - reviewed source base: `499090508ef1d768660e4d54e7934cbcf13cb1cd` The candidate was intentionally not rebased after `main` advanced. Fresh reviewer-of-record approval and terminal CI must bind to the exact committed head and actual PR diff against current `main`. ## Evidence - focused four-runtime regression: 39/39 - focused matrix: 345/345 - Mosaic package: 910/910 - installer/schema/shell/transport checks: pass - repository typecheck: 42/42 - repository lint: 23/23 - repository tests: 42/42 - repository build: 23/23 - format and `git diff --check`: pass Closes #766 Fixes #766
jason.woltje added 1 commit 2026-07-15 21:34:39 +00:00
fix(fleet): enforce exact comms authority
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
0dc47cac92 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
jason.woltje added 1 commit 2026-07-16 00:09:25 +00:00
fix(fleet): bind secure reads to descriptors
All checks were successful
ci/woodpecker/pr/ci Pipeline was successful
Details
dd7f8a77a0 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
jason.woltje merged commit adad486b6f into main 2026-07-16 00:32:24 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#787
Delete Branch "fix/766-exact-fleet-comms"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?