Round-4 audit: 35 contained fixes - #5

Merged

im-tyler merged 13 commits into

mainfrom

Sep 20, 2026

Commits on Sep 20, 2026

fix(state,ssh): T02 — ambiguous fenced-release failure no longer deletes a successor's lock
im-tyler
committed
41192f4
fix(docker): T15+T17 — structured label parsing, daemon errors are not cache misses
im-tyler
committed
1b267ec
fix(docker): T12+T13+T19 — anonymous volume identity, bracketed IPv6 bindings, env off the argv
im-tyler
committed
a83ff14
fix(deploy): T06+T07+T21+T63 — honest recovery accounting, fail-closed worker verification, inventory-retried fallback cleanup
im-tyler
committed
34d6dc9
fix(releasemeta,deploy): T10+T11+T56 — asset seed selection, bounded attempt retention, asset cleanup on the live tree, record identity
im-tyler
committed
67c097b
fix(ssh,secret): T41+T45+T46 — no-directory-operand publication, find status observed, local parent-dir fsync
im-tyler
committed
a602edc
fix(build,backup): T51+T37+T38 — protected ignore defaults, redis recovery armed before the baseline copy, post-stop baseline
im-tyler
committed
353dc93
fix(state,cli): T08 — pin/unpin run under the app's fenced lock with validated release ids
im-tyler
committed
c9260a7
fix(config,deploy): T23+T53 — typed publish-grammar preflight, access fields validated to what they render
im-tyler
committed
9694108
fix(caddy,autodeploy,cli): T26+T27+T29+T30+T31+T32 — webhook route persisted in the Caddyfile, honest autodeploy hygiene
im-tyler
committed
82d0ed3
fix(cli,caddy): T57+T58+T62 — fleet LB activation is a required phase, detached recovery waves, maintenance serialized with deployment
im-tyler
committed
5401f87
fix(cli,deploy,ci): T48+T49+T20+T61 — bounded update extraction, updater context, proxy-free probes, least-privilege workflows
im-tyler
committed
555581b
docs(audit): round 4 (T01-T63) recorded — 35 contained fixes, 28 standing deferrals with evidence folded in
im-tyler
committed
a7eb7a0