Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
64 commits
Select commit Hold shift + click to select a range
0770ff2
docs(runbook): managed-runtime redeploy section — build surface, feat…
danshapiro Oct 13, 2026
81c0244
docs(runbook): fold restart-test findings — reconnect soul creation i…
danshapiro Oct 13, 2026
caa37d3
docs(runbook): fresheyes round 1 — shells are managed souls; host-sid…
danshapiro Oct 13, 2026
31febee
docs(runbook): fresheyes round 2 — fenced API for probe cleanup (exte…
danshapiro Oct 13, 2026
18bf3f8
docs(runbook): fresheyes round 3 — full intent-revision-guarded stop …
danshapiro Oct 13, 2026
8bf38a4
docs(runbook): fresheyes round 4 — client auto-reconciles host-side p…
danshapiro Oct 13, 2026
adc94e3
docs(runbook): fresheyes round 5 — record and verify probe soul ident…
danshapiro Oct 13, 2026
76a1c36
docs(runbook): fresheyes round 6 — build/restart skew sequences (quic…
danshapiro Oct 13, 2026
6b621ff
docs(runbook): fresheyes round 7 — strict sequence starts both units …
danshapiro Oct 13, 2026
6c19043
docs(runbook): fresheyes round 8 — private per-run probe dir with ter…
danshapiro Oct 13, 2026
bad5097
docs(runbook): fresheyes round 9 — set -euo pipefail so the identity …
danshapiro Oct 13, 2026
7d8fa6a
docs(runbook): fresheyes round 10 — post-restart inventory to a separ…
danshapiro Oct 13, 2026
bc4c8b0
docs(runbook): fresheyes round 11 — private per-run dir for survival …
danshapiro Oct 13, 2026
5f9c61f
docs(runbook): fresheyes round 12 — per-soul launchState verification…
danshapiro Oct 13, 2026
cc8c58d
docs(runbook): fresheyes round 13 — executable D recovery (live var +…
danshapiro Oct 13, 2026
9b9e016
docs(runbook): fresheyes round 14 — browser check before cleanup (D/h…
danshapiro Oct 13, 2026
2c99067
docs(runbook): fresheyes round 15 — probe workspaces chmod 0770 (in-s…
danshapiro Oct 13, 2026
7e7e662
docs(runbook): fresheyes round 16 — strict start waits for the superv…
danshapiro Oct 13, 2026
f8f6e76
docs(runbook): fresheyes round 17 — connect-probe socket liveness (st…
danshapiro Oct 13, 2026
d14ed2d
docs(runbook): fresheyes round 18 — loop exhaustion re-verified befor…
danshapiro Oct 13, 2026
b5bc790
docs(runbook): fresheyes round 19 — 900s socket bound (reconciliation…
danshapiro Oct 13, 2026
ff2139d
docs(runbook): fresheyes round 20 — inventory-sized socket bound from…
danshapiro Oct 13, 2026
19d6a63
docs(runbook): fresheyes round 21 — preliminary baseline capture (con…
danshapiro Oct 13, 2026
2eadd90
docs(runbook): fresheyes round 22 — liveness-checked unbounded socket…
danshapiro Oct 13, 2026
a771022
docs(runbook): fresheyes round 23 — set-u-safe traps (no header leak …
danshapiro Oct 13, 2026
4b338a8
docs(runbook): fresheyes round 24 — dead-server token acquisition def…
danshapiro Oct 13, 2026
2cfeae0
docs(runbook): fresheyes round 25 — step-4 refresh re-acquires the to…
danshapiro Oct 13, 2026
b654e64
docs(runbook): fresheyes round 26 — lookups group by soulId and act o…
danshapiro Oct 13, 2026
6cf1db0
docs(runbook): fresheyes round 27 — set-e-safe concurrency read (if-f…
danshapiro Oct 13, 2026
f9e3089
docs(runbook): fresheyes round 28 — systemd precedence for the concur…
danshapiro Oct 13, 2026
91d2db5
docs(runbook): fresheyes round 29 — DOCKER_CONTEXT unset (it override…
danshapiro Oct 13, 2026
0698980
docs(runbook): fresheyes round 30 — step-4 token re-acquire restores …
danshapiro Oct 13, 2026
e9f6c5c
docs(runbook): fresheyes round 31 — dead-server baseline read from th…
danshapiro Oct 13, 2026
810ce58
docs(runbook): fresheyes round 32 — cap counts unique soul IDs (per-i…
danshapiro Oct 13, 2026
4e356d1
docs(runbook): fresheyes round 33 — settings restore is JSON-safe (js…
danshapiro Oct 13, 2026
f21aa6a
docs(runbook): fresheyes round 34 — destructive-path guard validates …
danshapiro Oct 13, 2026
c34adac
docs(runbook): fresheyes round 35 — extra fi fixed (all fenced blocks…
danshapiro Oct 13, 2026
6158910
docs(runbook): fresheyes round 36 — PROBE_ROOT pattern-validated befo…
danshapiro Oct 13, 2026
c660485
docs(runbook): fresheyes round 37 — guard ties WS/BWS/PROBE_ROOT to o…
danshapiro Oct 13, 2026
103cf60
docs(runbook): fresheyes round 38 — guard fixed for the normal flow (…
danshapiro Oct 13, 2026
9a8e34c
docs(runbook): fresheyes round 39 — recovery-minted D exempt from the…
danshapiro Oct 13, 2026
a19e0fb
docs(runbook): fresheyes round 40 — probe workspaces must be free of …
danshapiro Oct 13, 2026
4efd621
docs(runbook): fresheyes round 41 — SAFE-11 codex retention truth (sy…
danshapiro Oct 13, 2026
d5c1315
docs(runbook): fresheyes round 42 — probe workspaces must be complete…
danshapiro Oct 13, 2026
145f717
docs(runbook): fresheyes round 43 — per-unit is-active checks (multi-…
danshapiro Oct 13, 2026
7864992
docs(runbook): fresheyes round 44 — deployment checkout established b…
danshapiro Oct 13, 2026
78c6807
docs(runbook): fresheyes round 45 — concurrency parse handles quoted …
danshapiro Oct 13, 2026
7433b77
docs(runbook): fresheyes round 46 — verified HTTP+shape reads at ever…
danshapiro Oct 13, 2026
94c1d04
docs(runbook): fresheyes round 47 — the two remaining settings reads …
danshapiro Oct 13, 2026
ffffd69
docs(runbook): fresheyes round 48 — sweep re-mints the token from bot…
danshapiro Oct 13, 2026
f0fe6ba
docs(runbook): fresheyes round 49 — docker socket and registry root d…
danshapiro Oct 13, 2026
a4ae60e
docs(runbook): fresheyes round 50 — flag values extracted for both --…
danshapiro Oct 13, 2026
66e25f5
docs(runbook): fresheyes round 51 — allowed-path check tests whether …
danshapiro Oct 13, 2026
5bb84ef
docs(runbook): fresheyes round 52 — allowed-path check mirrors the se…
danshapiro Oct 14, 2026
545431a
docs(runbook): fresheyes round 53 — allowed check tests this run's ac…
danshapiro Oct 14, 2026
0bbfc23
docs(runbook): fresheyes round 54 — non-Linux allowed roots skipped (…
danshapiro Oct 14, 2026
5e41f04
docs(runbook): fresheyes round 55 — sweep fails closed when every rea…
danshapiro Oct 14, 2026
1a43c95
docs(runbook): fresheyes round 56 — empty allowedFilePaths is permit-…
danshapiro Oct 14, 2026
fcad476
docs(runbook): fresheyes round 57 — stale-client cleanup skips the st…
danshapiro Oct 14, 2026
18dfce0
docs(runbook): fresheyes round 58 — browser check matches a NEW soul …
danshapiro Oct 14, 2026
591038c
docs(runbook): fresheyes round 58 substantive — browser check matches…
danshapiro Oct 14, 2026
381c669
docs(runbook): fresheyes round 59 — snapshot precedes the UI step; Wi…
danshapiro Oct 14, 2026
45510fe
docs(runbook): fresheyes round 60 — snapshot-before-confirm enforced …
danshapiro Oct 14, 2026
a73d361
docs(runbook): fresheyes round 61 (final) — allowed-roots fallback re…
danshapiro Oct 14, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions docs/development/managed-runtime.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,13 @@ server built with `managed-runtime-v1`, booted with the runtime controller, and
a client that negotiated `managedRuntimeV1` can use it. Other routes remain
legacy.

Deploying or restarting the managed runtime is an operator procedure with its
own build surface, unit coupling, and restart effects — see "Redeploy managed
runtime" in the
[self-hosted launch runbook](self-hosted-launch-runbook.md). The build must
compile the feature in (`--features freshell-server/managed-runtime-v1`); the
runtime env var alone arms nothing.

## Current release qualification

OpenCode 1.18.21 (`openai/gpt-5.6-luna`, using the configured OpenAI OAuth
Expand Down
Loading
Loading