iris
30a8f71bb5
docs: the trust-boundary pages keep the operator guidance, the mechanism moves to implementation ...
boundary.md keeps the model, the design rule, why network isolation
matters and host admin socket access; the hive-priv socket activation and
the per-agent socket directory move to 4-implementation/trust-boundary.
security.md keeps the agent trust model and the path-name rule; the nix
builds mode with its threat model, and the hive-c0re privilege separation,
move to their own pages there. Headings and text move as they were, with
one level shaved off the heading depth. Links, code and nix pointers, and
the docs index follow the moves.
2026-11-06 19:45:11 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
state the heal_own_dir cause in the backend env comments
2026-10-28 02:22:55 +01:00
containers reach network-online only with a dhcp lease, and bao users wait for it
2026-11-01 11:06:41 +01:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
move the meta flake render into the hive-meta-flake crate
2026-10-24 21:13:24 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: the trust-boundary pages keep the operator guidance, the mechanism moves to implementation
2026-11-06 19:45:11 +01:00
the meta flake takes docs from the pinned hyperhive input
2026-10-18 20:09:14 +02:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
forge-token: exit 1 when the store read fails for any reason but "not there"
2026-11-06 09:19:33 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-github-notify: pick up a rotated PAT without a restart
2026-10-13 08:07:47 +02:00
hyperhive: make the values the meta-flake render reads swarm-wide
2026-10-17 13:43:16 +02:00
add external gitlab accounts: stored in bao, linked per agent, allowed in squid, usable with glab
2026-11-02 16:44:56 +01:00
agent trust bundle: retry the root fetch inside its start job so a dns blip at boot queues the harness instead of failing it
2026-11-01 13:35:01 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
swarm-logs: authenticate as the agent with its own queue secret
2026-10-13 08:38:05 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
agents: always write the memory cap, infinity for none
2026-10-12 10:59:12 +02:00
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
add external gitlab accounts: stored in bao, linked per agent, allowed in squid, usable with glab
2026-11-02 16:44:56 +01:00
move nixBuilds into its own agent module, and have the vm test's agent import it
2026-11-06 09:18:42 +01:00
remove otel.metricIntervalMs and the host-level otel.debug
2026-10-17 08:00:14 +02:00
merge the self-scrape into each collector's settings instead of defining them twice
2026-10-28 23:02:18 +01:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
docs: the trust-boundary pages keep the operator guidance, the mechanism moves to implementation
2026-11-06 19:45:11 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
30a8f71bb5