Repository navigation

MicroVM controller App-key custody converge (root:root 0400, readback receipt) - #11679

Merged

briansrls merged 50 commits into

mainfrom

session/merry-bear-816

Sep 20, 2026

Merged

MicroVM controller App-key custody converge (root:root 0400, readback receipt)#11679
briansrls merged 50 commits into
mainfrom
session/merry-bear-816

Commits on Sep 19, 2026
- microVM JIT mint on the host and attempt-owned jail staging
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7658ab7
- MicroVM controller App-key custody converge: root:root 0400, readback receipt
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  84c6a56
- Address review 68117: ByteSize carrier, one JWT claim/header authority, HostMintAdmission checker
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  3341ce9
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  ab34afa
- Regenerate fleet-converge.yml for the microvm_controller_app_key_converge mode
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  bf07613
- Address review 68156: EpochSecs for the JWT clock, delete planned_jit_devices alias
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0e26b37
- Placement reads runner_host_file_scope instead of re-minting the /etc scope
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  eb3a189
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  acf0509
- extdeps.tools.openssl: import Unit from std.types (floor AmbiguousBareNameRead)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  afcc701
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  84961be
- runner_attempt_launch: derive the jit device's install mode and readback mode from one row (review 68264)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  be8da16
- App JWT carried as extdeps.auth.jwt JwtCompactSerialization, not a bare Secret (review 68283)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4830553
- github_effect_perform: hoist the brand-shedding note out of the function body (parse: annotation at module-item grain only)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2fc768a
- Reconcile the RS256 'cannot sign' rows with the signer this PR lands; keep clock notes attached (review 68318)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e20ac1c
- Merge origin/main (#11674 registration labels) into #11677; drop drive_destination from the resolved arms
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  bb09595
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  562ffe5
- Merge origin/main (#11547 generic App-token prelude) into #11677; the prelude consumes jws/claims authorities
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  da1f422
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  14f477b
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  3bf4a3a
- Model the signer over a key reference (extdeps.auth.jws JwsSigningKeyRef/JwsSignOutcome); openssl is one handler in gunbc.jws_signer_realize (CRYPTO-0/PRIMITIVE-EGRESS-0 shape condition)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9580ef2
- Merge origin/main (#11671); stage exactly runner_microvm jit_drive_content on the jail device
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  43da036
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  d959529
- Read the controller key path through lifecycle_controller_app_key's signing-key ref
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7ec15a3
- Refuse a mint whose App is not the one the controller key belongs to (review 68653 note)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8185db2
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  fee614a
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  93c8787
- Measure the credential in bytes, and delete the dangling endpoint_path fork (reviews 68668, 68670)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  f875cd1
Commits on Sep 20, 2026
- Merge origin/main (#11671 guest bootstrap, #11675 guest network + workspace staging) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  f8fe885
- Merge branches 'main' and 'session/keen-bear-791' of https://github.com/gunb-ai/gunbc into session/keen-bear-791
  gunbc-ci-auto-heal
  committed
  ea738ca
- Staging admits the jailer only from BOTH stagings, through a sealed receipt
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e6cef61
- Merge origin/main (#11672 microVM shape, #11675 workspace staging, gh enrolment) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0da0882
- stat.dag: restore the brace my keep-both merge resolution cut (floor: unterminated function body)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  46a9c33
- Take main's generated workflow projections; my copies were stale generations carried through merges
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7a9a379
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbai-bot[bot]
  authored
  a6ed2fd
- Merge main into the #11677 base for the wet lifecycle controller lane
  gunbc-ci-auto-heal
  committed
  12c0ffc
- microVM: carry the staged credential device path on InFlightAttempt, so #11677's jail-interior device does not leave #11670's teardown join importing a deleted symbol
  gunbc-ci-auto-heal
  committed
  8891230
- Merge origin/main (#11791 fleet witness lane + drift gate) into #11677
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ec2973a
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  a01a9cc
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  f93e7c1
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  95726a8
- Merge origin/main into #11677 (recomposition before taking witness evidence)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  217f5af
- Merge remote-tracking branch 'origin/session/keen-bear-791' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  1d81235
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  5d8b13d
- Import fleet_converge_expected_host_env_name from its current home
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  47f5014
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  d8e0141
- Merge remote-tracking branch 'origin/main' into session/merry-bear-816
  gunbc-ci-auto-heal
  committed
  3fc4d2f
- Merge origin/main into #11679: roster union of the converge modes
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9d5b0bc
- Regenerate fleet-converge.yml from its authority (review 69279)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  10c8336
- Merge remote-tracking branch 'origin/main' into mb816fix
  gunbc-ci-auto-heal
  committed
  e40a855
- Merge remote-tracking branch 'origin/main' into mb816fix
  gunbc-ci-auto-heal
  committed
  9071ce9

Commits

Commits on Sep 19, 2026

Commits on Sep 20, 2026