Repository navigation

draft: opt-in K3s P0 persistent T3 owner environment - #46

Draft

kvnloo wants to merge 59 commits into

mainfrom

infra/k3s-p0-owner-20261028

Draft

draft: opt-in K3s P0 persistent T3 owner environment#46
kvnloo wants to merge 59 commits into
mainfrom
infra/k3s-p0-owner-20261028

Commits on Oct 28, 2026
- docs(k3s): add P0 opt-in owner proof - Dockerfile
  kvnloo
  committed
  c90aa6b
- docs(k3s): add P0 opt-in owner proof - k3s.yaml
  kvnloo
  committed
  a2acb63
- docs(k3s): add P0 opt-in owner proof - render.py
  kvnloo
  committed
  dfe4ff3
- docs(k3s): add P0 opt-in owner proof - test_contract.py
  kvnloo
  committed
  c7eeb47
- docs(k3s): add P0 opt-in owner proof - k3s-p0-contract.yml
  kvnloo
  committed
  391e44f
- docs(k3s): add P0 opt-in owner proof - README.md
  kvnloo
  committed
  9ba8194
- fix(k3s): parse release checksum filename without awk regex ambiguity
  kvnloo
  committed
  0e70b0d
- test(k3s): add read-only restart identity evidence probe
  kvnloo
  committed
  62f083f
- test(k3s): cover identity drift, private route and safe evidence snapshots
  kvnloo
  committed
  6d6ecaf
- docs(k3s): add private, read-only before/after restart acceptance
  kvnloo
  committed
  6a89e7c
- docs(k3s): separate acceptance checklist step
  kvnloo
  committed
  87b91fe
- fix(k3s): require observed replacement Pod in restart identity proof
  kvnloo
  committed
  f435345
- test(k3s): reject stale rollout evidence and Pod readiness drift
  kvnloo
  committed
  79eead5
- docs(k3s): require distinct Ready Pod UID for restart acceptance
  kvnloo
  committed
  8da283b
- test(k3s-p0): verify actual Pod PVC and private Service/Ingress wiring
  kvnloo
  committed
  4cbc645
- test(k3s-p0): prove live owner Service endpoints and rollout freshness
  kvnloo
  committed
  8514ad8
- test(k3s-p0): reject unverified ingress and additive policy bypass
  kvnloo
  committed
  8b2d429
- test(k3s): verify private HTTPS descriptor matches persisted P0 identity
  kvnloo
  committed
  9e065fb
- test(k3s): cover HTTPS identity, TLS, redirect and private baseline failures
  kvnloo
  committed
  ce1e860
- docs(k3s): add human-only HTTPS descriptor identity acceptance
  kvnloo
  committed
  2727b81
- docs(k3s): use copy-pasteable one-line descriptor probe command
  kvnloo
  committed
  6cb5054
- test(k3s-p0): add read-only disposable-cluster preflight
  kvnloo
  committed
  13651d6
- test(k3s-p0): cover preflight fail-closed scenarios
  kvnloo
  committed
  a92338e
- docs(k3s-p0): gate manual apply on read-only preflight
  kvnloo
  committed
  8a65a31
Commits on Oct 29, 2026
- test(k3s-p0): reject non-K3s or malformed cluster versions
  kvnloo
  committed
  78c8d6a
- fix(k3s-p0): require genuine stable K3s server preflight
  kvnloo
  committed
  533dbee
- docs(k3s-p0): state K3s-only preflight contract
  kvnloo
  committed
  5bbb91b
Commits on Oct 30, 2026

Commits

Commits on Oct 28, 2026

Commits on Oct 29, 2026

Commits on Oct 30, 2026