6 Commits

Author SHA1 Message Date
jj.wang 5192e04088 PAD-12: per-terminal transport (direct Tailscale SSH or Warpgate, pre-session fallback, pinned host keys, agent key from Vault), one-call win10 launch and one-call collect, remote call timings, agentd ping 2026-10-22 02:59:37 +00:00
jj.wang 709d65ef83 Docs: Plane-side webhook enabled (allowlist applied on VM 506, v2 deliveries verified, latency record) 2026-10-22 01:29:47 +00:00
jj.wang 57887a90f2 Docs: static-port NAT path for the LXC, dispatcher back on LXC, Plane webhook allowlist notes 2026-10-21 15:45:54 +00:00
jj.wang 4ba6d0ca5f Docs: webhook receiver (runbook, design §10, deploy-lxc §8), PAD-7 rollout record
Runbook: service, endpoint, signature, logs, secret rotation, disabling,
heartbeat skipped reasons, new failure rows. Design: webhook trigger design,
notify hook, Plane SSRF guard (WEBHOOK_ALLOWED_IPS). Deploy: install steps.
Record: synthetic-delivery acceptance and measured latencies.
2026-10-21 13:52:19 +00:00
jj.wang 19be2296bc Docs: LXC deployment as done (agentd-01), rollback to oregon, double-start guard, PAD-11 cutover record 2026-10-21 12:11:34 +00:00
jj.wang 20e4e4ed73 Docs: LXC deployment guide, remote POSIX transport in the executor contract
deploy-lxc.md: Debian 12 packages, vault client + identity, Warpgate host key
(pinned by the identity), helper scripts and protocol file, all-remote config,
cron under exec --secret-env, logs/heartbeat, adding a terminal.
design.md 9: P1-6 done for Linux/macOS; Windows still on the helper scripts (TODO unify).
2026-10-21 08:25:14 +00:00