feat(agent-fleet): add crash-safe Bridge account cutover - #6

Merged

ruby-dlee merged 54 commits into

mainfrom

codex/bridge-cutover-final-assembly

Jul 19, 2026

Commits on Jul 18, 2026

feat: import and harden Agent Fleet
ruby-dlee
committed
84a550e
no-mistakes(review): Harden Agent Fleet trust and recovery
ruby-dlee
committed
89e2c59
no-mistakes(review): Harden Agent Fleet routing and trust boundaries
ruby-dlee
committed
b7b0df5
no-mistakes(test): Captain, fix Agent Fleet lint parity assertion
ruby-dlee
committed
bcfee06
no-mistakes(document): Correct Agent Fleet documentation ownership and contracts
ruby-dlee
committed
a681a0e
no-mistakes(document): Correct Agent Fleet runtime documentation
ruby-dlee
committed
9a5b8fe
no-mistakes: apply CI fixes
ruby-dlee
committed
ce3baf9
fix(agent-fleet): skip TOON preflight for launches
ruby-dlee
committed
b5dfcf5
test(report-stack): refresh relocated manifests
ruby-dlee
committed
58cde83
Harden Agent Fleet identity isolation
ruby-dlee
committed
97b7dc1
Require fresh public routeability proofs
ruby-dlee
committed
a381c52
feat: add crash-safe Bridge cutover control plane
ruby-dlee
committed
96e88ad
Harden Bridge worker isolation and recovery
ruby-dlee
committed
aca31a2
Harden managed Bridge launch freshness
ruby-dlee
committed
db78c57
Harden Bridge session and Herdr lifecycle gates
ruby-dlee
committed
f363753
Recover interrupted Herdr artifact publication
ruby-dlee
committed
7a5513a
Recover all attributed Herdr cleanup phases
ruby-dlee
committed
8b5a11d
feat(agent-fleet): add safe credential login transactions
ruby-dlee
committed
c62efc6
fix(agent-fleet): make credential recovery restart-safe
ruby-dlee
committed
01dfac8
fix(agent-fleet): fence credential recovery transactions
ruby-dlee
committed
813c00d
fix(agent-fleet): close recovery routing races
ruby-dlee
committed
ff0ae75
fix(agent-fleet): make credential rollback no-replace
ruby-dlee
committed
d07f708
fix(agent-fleet): bind rollback cleanup ownership
ruby-dlee
committed
51f6c5a
fix(agent-fleet): make credential recovery generation-safe
ruby-dlee
committed
e31fff3
fix(agent-fleet): close credential recovery races
ruby-dlee
committed
a7df75a
fix(agent-fleet): bind rollback copy sources
ruby-dlee
committed
7f54966
fix(agent-fleet): preserve exact Quota account contract
ruby-dlee
committed
bcd5ae0
fix(agent-fleet): pin sealed Quota release
ruby-dlee
committed
d4f1d24
fix: close sealed cutover proof and recovery gaps
ruby-dlee
committed
5c475c3
fix: harden sealed cutover recovery
ruby-dlee
committed
fd2e995
fix: make cutover recovery generation-safe
ruby-dlee
committed
aacd439
fix: bind recovery to durable generations
ruby-dlee
committed
4c5b9bb
fix: converge identity cleanup restarts
ruby-dlee
committed
5538600
docs: normalize cutover Markdown
ruby-dlee
committed
ece9297
test: assert canonical desktop anchor home
ruby-dlee
committed
660104f
no-mistakes(review): Captain: Harden bridge cutover recovery and provenance
ruby-dlee
committed
fcb230e
no-mistakes(test): Fix routing and Herdr test fixtures
ruby-dlee
committed
6803949
no-mistakes(document): Refresh Bridge cutover documentation
ruby-dlee
committed
d821056
no-mistakes(document): Refresh Bridge liveness documentation
ruby-dlee
committed
18f14fa
no-mistakes(lint): Document intentional deferred shell expansions for ShellCheck
ruby-dlee
committed
4098db5
fix: make Bridge CI checks platform-safe
ruby-dlee
committed
0553c98
fix: retain proof staging inode through publish
ruby-dlee
committed
2ddaa6b
test: report managed rollback metadata drift
ruby-dlee
committed
d62988c

Commits on Jul 19, 2026

test: expose managed rollback cleanup failure
ruby-dlee
committed
bbd6609
test: expose failed rollback control calls
ruby-dlee
committed
84a39dd
fix: report rollback release status
ruby-dlee
committed
12ef9b6
test: trace rollback release inputs
ruby-dlee
committed
827b62d
fix: preserve successful bounded control status
ruby-dlee
committed
06d3698
fix: preserve routed control success status
ruby-dlee
committed
71c6957
test: expose Herdr recertification failure
ruby-dlee
committed
675ed57
test: age metadata lock grace authority
ruby-dlee
committed
722e35b
test: stabilize Herdr lifecycle process probes
ruby-dlee
committed
9c9c9c5
test: stabilize concurrent Herdr process probes
ruby-dlee
committed
f7aa56a
fix: retain Herdr lock owner PID across probes
ruby-dlee
committed
4360ec1