7 Commits

Include renames

Author	SHA1	Message	Date
archipelago	2fee0339cb	Prepare large paid files on disk and stream peer responses in bounded chunks	2026-10-06 05:31:19 -04:00
archipelago	bf7fb425eb	Require FIPS for peer playback and stream owned media with bounded reads	2026-10-05 23:52:44 -04:00
archipelago	2c1bcacf0a	Test Nostr encryption compatibility and forged relay messages	2026-10-05 10:00:41 -04:00
archipelago	2f1a3ade07	Promote runtime manifests before starting app reconciliation	2026-09-30 12:50:46 -04:00
archipelago	f5c0ba85cd	feat(release): stage GitWorkshop and next node updates	2026-09-09 18:15:21 -04:00
archipelago	cbd463e980	feat(host): crash/hardware-error capture, delivered by a new host-fixup OTA channel (#144) ... kdump + rasdaemon on every node, per docs/kdump-rasdaemon-design.md with the approved decisions: hang capture ON (a wedged kiosk dumps and reboots itself instead of sitting dead), crashkernel=256M, backfill ships with this release, phase-2 UI surfacing deferred. Host fixups (docs/system-level-ota-design.md) are the general answer to 'deliver system-level updates OTA': curated OS packages, sysctl drop-ins, service enablement and the GRUB crashkernel line, carried by the signed binary and applied idempotently at startup — non-fatal by construction (offline/locked-dpkg nodes converge on a later boot), skipped on dev boxes and non-Debian hosts. This formalizes the polkit/audio repair precedents into a channel with a stated policy: pinned packages and parameter intent only, never dist-upgrade automation; the ISO bakes the identical end state into fresh installs (next commit). The one runtime limitation is honest: crashkernel memory can only be reserved at boot, so the fixup writes GRUB, runs update-grub, and logs that it takes effect on the next reboot. tests/lifecycle/os-audit.sh gains section D — a graded baseline check: FAIL if capture never landed, WARN if written but awaiting reboot, PASS when reserved, policy live and rasdaemon recording. Section D runs independently of RPC health: a wedged backend must not mask that the node also stopped capturing evidence. Verification: host_fixups unit tests 4/4; cargo fmt clean; full suite runs in the release gate (create-release) and the archi-dev-box lifecycle gate before the tag.	2026-08-31 07:23:44 -04:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00