ochenstarik/server-monitor-manager
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 17 Packages Wiki Activity Actions 2
server-monitor-manager/agents/_salvage-2026-08-18/panel-control/Task3-B3-2026-08-04/PR_BODY.md
Ochenstarik 23eb3f5233 chore(agents): разбор рабочих папок с диска на 2026-08-18 
Задания, отчёты и патчи, лежавшие в C:\Users\Ochenstarik\projects и в
домашней папке, перенесены в agents/. Разложено по агентам там, где имя
файла позволяло определить автора; остальное — в _salvage-2026-08-18/
и разбирается вручную.

Патчи в notes/salvage-2026-08-18/ — незакоммиченная работа из брошенных
рабочих копий: она существовала только на диске.

Тяжёлое (релизные архивы, инсталляторы, наборы данных) в репозиторий не
попало: оно лежит рядом, в Agent_projects/_archive и Agent_projects/_data.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-18 14:19:54 +07:00

2.2 KiB
Raw Blame History

Summary

Implements Block B-3 and mandatory additive B-3R for fact-first Link policy reconciliation.

  • adds strict helper link-list factual inspection with managed-comment parsing and fail-closed exits;
  • reconciles active, disabled, duplicate, orphan, and DB-less orphan rules from one initial factual snapshot;
  • preserves exact batching: one list on no drift, one initial plus one shared final list when mutations are attempted;
  • verifies all touched natural keys by exact multiplicity before state, audit, and success events;
  • separates Converged, Failed, and Deferred results with exhaustive invariants;
  • preserves generation marker, bounded retry/throttle, and firewall-unavailable semantics;
  • adds lock-safe batch finalization with natural-key/version revalidation;
  • adds source-generated orphan audit JSON and completed-policy retention;
  • updates Desktop effective/drift filtering and PendingActivation presentation;
  • extends Linux/bootstrap/Desktop/acceptance contracts.

Block C is not included.

Security boundaries

  • existing deploy/ochenstarik-smm-policy-apply remains the only privileged policy target;
  • sudoers is unchanged;
  • strict argv/arity and helper exit contracts are preserved;
  • no shell interpolation or broadened privilege surface;
  • Linux peer/enrollment/root-owned helper boundaries are unchanged.

Verification

  • Windows Control Release: 94/94 PASS
  • clean WSL/Linux Control: 94/94 PASS
  • bootstrap contracts: PASS
  • helper and acceptance script syntax: PASS
  • Windows Desktop contracts: PASS
  • Desktop x64 Release: 0 warnings / 0 errors
  • self-contained linux-x64 PublishTrimmed: PASS
  • native published orphan audit: PASS
  • native helper cardinality: 2× link-list, 1× link-disconnect
  • clean-base patch apply: 25/25 paths PASS
  • independent full B-3+B-3R security/spec review: APPROVE, no findings

Physical acceptance

The mandatory three-server physical acceptance was not executed because all topology/SSH inputs are unavailable. It remains explicitly pending and is not replaced by tests, CI, or the native verifier.

Expected delivery status after green CI and merge: merged / verified, physical acceptance pending.