feat(dashmate): record why certificate renewal failed so doctor can name the cause - #4476

Merged

shumkov merged 36 commits into

renewal-visibility

Aug 28, 2026

Commits on Aug 24, 2026

fix(dashmate): restore the report date as a date, not a string

shumkov
and
claude
committed
929800a
feat(dashmate): name why a certificate renewal failed

shumkov
and
claude
committed
58ecedb
feat(dashmate): persist the outcome of every scheduled renewal

shumkov
and
claude
committed
010619a
feat(dashmate): tell an operator why renewal is failing, before the node goes dark

shumkov
and
claude
committed
28275be
feat(dashmate): let update name the cause too, from the same vocabulary

shumkov
and
claude
committed
27d6923
fix(dashmate): never prescribe a certificate request the recorded cause forbids

shumkov
and
claude
committed
78499ef
fix(dashmate): correct four defects in the renewal record, and pin what held only by reading

shumkov
and
claude
committed
791c87f
fix(dashmate): keep bookkeeping from failing an install, and narrow what the record carries

shumkov
and
claude
committed
e2b542d

Commits on Aug 25, 2026

refactor(dashmate): give the renewal record a model and a repository

shumkov
and
claude
committed
c0b5b6d
docs(dashmate): point operators at the port 80 guide, and repair three dead links

shumkov
and
claude
committed
cb76557
fix(dashmate): three defects a second review found in the renewal record

shumkov
and
claude
committed
790108f
perf(dashmate): bound a recorded excerpt before scanning it

shumkov
and
claude
committed
38d7418
refactor(dashmate): name new modules in kebab-case, per the package guideline

shumkov
and
claude
committed
ec45fb2
fix(dashmate): seven more defects, four of them in guidance I had just rewritten

shumkov
and
claude
committed
77fd674
fix(dashmate): two blocking defects and a shared guidance state, agreed with an independent review

shumkov
and
claude
committed
e070096
revert(dashmate): drop unrelated lint autofixes from this branch

shumkov
and
claude
committed
309e1af
revert(dashmate): drop the remaining lint autofix collateral

shumkov
and
claude
committed
3b0f1de
fix(dashmate): repair four defects the fence and the shared state introduced

shumkov
and
claude
committed
4367fa2
revert(dashmate): drop the last of the lint autofix collateral, in test

shumkov
and
claude
committed
0c2e85b
fix(dashmate): make one decision the only thing that prescribes a certificate

shumkov
and
claude
committed
b1459ae
style(dashmate): drop a stray blank line

shumkov
and
claude
committed
fd88826
fix(dashmate): give the shared decision the input it was missing, and make the fence atomic

shumkov
and
claude
committed
c5fc461
fix(dashmate): keep the certificate authority's reason for a failed renewal

shumkov
and
claude
committed
fc284dd

Commits on Aug 27, 2026

fix(dashmate): stop responder-supplied text choosing an operator's next move

shumkov
and
claude
committed
d9f8450
fix(dashmate): stop offering a certificate that could not be saved

shumkov
and
claude
committed
60b53d7
fix(dashmate): make the storage veto reachable, and honour it everywhere

shumkov
and
claude
committed
99a8865
fix(dashmate): one place decides whether to ask for a certificate

shumkov
and
claude
committed
522a52d
feat(dashmate): stop naming the config an operator is already on

shumkov
and
claude
committed
911acbf
Revert "feat(dashmate): stop naming the config an operator is already on"
shumkov
committed
2c514d5
fix(dashmate): close the review findings on the renewal record

shumkov
and
claude
committed
95a978d
fix(dashmate): confirm the log attachment before waiting on lego

shumkov
and
claude
committed
4e6475d

Commits on Aug 28, 2026

fix(dashmate): stop four ways a request outlived the decision withholding it

shumkov
and
claude
committed
8ce253b
fix(dashmate): hold the fence through the write, and let the switch reach the legacy checks

shumkov
and
claude
committed
7fed9a9
fix(dashmate): reclaim a fence only from a holder that is gone

shumkov
and
claude
committed
83dcec9
revert(dashmate): reclaim the fence by age again, and state what that leaves

shumkov
and
claude
committed
f55052d
fix(dashmate): never hand back a generation that is not a number

shumkov
and
claude
committed
71e42ca