Claude f2d343b0ef feat(bootstrap): traits under the roles — class/host/join, dev/workstation/custom, /etc/rig/role marker ... Roles become presets over three orthogonal traits declared in one map: class (who lives here), host (runs VMs), join (authkey or interactive login). Every per-role behavior now keys off the traits — the /dev/kvm advisory rides host=yes, the next-steps log rides class and host — and tag:server is derived policy, not a trait: only control-plane and workload are shapes the control plane manages, so every other role refuses the effective tag. join=login inverts the tag assertion (a user-owned node must come up untagged; a tag is refused and backed out on first join, refused without back-out on a box already joined) and refuses a set TS_AUTHKEY before the root check. The verified shape is recorded convergently in /etc/rig/role as ground truth for rig users. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-17 19:15:06 +00:00
..
lib	bootstrap: infer the tailnet tag from the pre-auth key, verify the granted tag	2026-07-17 15:27:09 +00:00
bootstrap.sh	feat(bootstrap): traits under the roles — class/host/join, dev/workstation/custom, /etc/rig/role marker	2026-07-17 19:15:06 +00:00
coolify-backup-install.sh	fix(coolify): validate the dump bindings, and stop printing $EDITOR	2026-07-12 19:55:39 +00:00
coolify-install.sh	feat(coolify): install the control-plane dump as a systemd timer	2026-07-12 19:14:07 +00:00
runner-install.sh	fix(runner): install refuses a box registered to another repo	2026-07-13 14:57:28 +00:00
runner-remove.sh	feat(runner): status, remove, and repoint — the runner lifecycle verbs	2026-07-13 13:25:27 +00:00
runner-repoint.sh	fix(runner): install refuses a box registered to another repo	2026-07-13 14:57:28 +00:00
runner-status.sh	fix(runner): install refuses a box registered to another repo	2026-07-13 14:57:28 +00:00