Commit graph

  • ce3a0c5076 Make setup-host privilege-aware; make the drill prove the new contract claude-bot-andresmgsl 2026-07-17 13:16:06 +0000
  • aad576a86a Make host setup complete in one run, and let the installer run it claude-bot-andresmgsl 2026-07-17 12:52:50 +0000
  • 84da78a2c1
    Merge pull request #62 from claude-hdb/fix/doctor-fresh-host Daniel Marin 2026-07-15 01:57:47 +0100
  • 42c1f63c95 fix(doctor): a fresh host is not a dirty one claude-hdb 2026-07-15 00:55:10 +0000
  • 6c3ff72a3a
    Merge pull request #61 from claude-hdb/fix/install-extract-dir Daniel Marin 2026-07-15 01:39:39 +0100
  • ca2be71f88 fix(install): find THE extracted directory instead of guessing its name claude-hdb 2026-07-15 00:38:51 +0000
  • 71ba6e8782
    Merge pull request #60 from claude-hdb/docs/readme-run-the-drill Daniel Marin 2026-07-15 01:29:13 +0100
  • 342b533f4f docs(readme): how to run the drill against the latest version claude-hdb 2026-07-15 00:28:15 +0000
  • 018e16ec40
    Merge pull request #58 from claude-hdb/docs/agnostic-readme Daniel Marin 2026-07-15 01:24:44 +0100
  • aff68f5492 docs(box-design): update isolation-stack names to the 0.4.0 rename claude-hdb 2026-07-15 00:23:58 +0000
  • 1cbdfb05dd
    Merge pull request #59 from claude-hdb/feat/new-resource-flags Daniel Marin 2026-07-15 01:22:57 +0100
  • 2c567f0549 docs(readme): drill count follows the two checks this branch adds claude-hdb 2026-07-15 00:21:44 +0000
  • 9fb2b8147c docs: extend the agent-agnostic reframe to design, recipe, and drill docs claude-hdb 2026-07-15 00:21:22 +0000
  • 85e70a326a docs: add CHANGELOG, starting at 0.5.0 claude-hdb 2026-07-15 00:21:18 +0000
  • b90372da62 feat(new): inline resource overrides — --cpu, --memory, --disk (#57) claude-hdb 2026-07-15 00:17:33 +0000
  • 244a8f69a2 docs(readme): make the narrative agent-agnostic, not Claude-specific claude-hdb 2026-07-15 00:15:45 +0000
  • 4890c9a3d9
    Merge pull request #56 from claude-hdb/integration/0.5.0 Daniel Marin 2026-07-15 01:04:53 +0100
  • b1c430c448 chore(templates): debrand the claude template's description too claude-hdb 2026-07-15 00:00:15 +0000
  • 794c81c520 docs: debrand the last project-name references — the repo becomes heavy-duty/box claude-hdb 2026-07-14 23:59:34 +0000
  • 75acd5c84d docs(readme): 0.5.0 — expose, codex/grok, host verbs, drill at 81/81 claude-hdb 2026-07-14 23:55:07 +0000
  • edf8309f99 fix(expose): accept established flows back from boxnet — the input drop was eating the door's replies claude-hdb 2026-07-14 23:13:25 +0000
  • 32bb203ddb fix(expose): install the loopback door's missing half — route_localnet + masquerade on boxnet claude-hdb 2026-07-14 22:55:10 +0000
  • 44b9d512db fix(expose): pin the boxnet lease as static — NAT proxy resolves connect=0.0.0.0 against ipv4.address, not the lease claude-hdb 2026-07-14 22:31:40 +0000
  • a5d54e4b70 fix(expose): it was pointing the proxy at docker0 — the drill's own oldest trap claude-hdb 2026-07-14 20:45:09 +0000
  • e4b546cd29 fix: expose asks for too much, and the fake legacy box had no claude user claude-hdb 2026-07-14 20:30:01 +0000
  • 8729c3e522 fix(grok): read the actual installer instead of guessing — the binary is 'grok' claude-hdb 2026-07-14 20:04:10 +0000
  • 6f7c3bfd60 fix: run 17's four real findings — migrate retire, expose proxy, wait_box, grok PATH claude-hdb 2026-07-14 19:56:17 +0000
  • c31fbc63f7 fix: name the boot failure — a corrupt image, Secure Boot, or a GRUB hang claude-hdb 2026-07-14 19:31:41 +0000
  • e09e4b62ee fix: assert the install landed the ref we asked for — a silent wrong-install is worse than a failure claude-hdb 2026-07-14 19:10:48 +0000
  • 455fbc656e feat: host lifecycle as verbs (setup-host/teardown-host/migrate-host) + .box/ convention claude-hdb 2026-07-14 18:01:34 +0000
  • 4eb6b35a7b chore: finish the debrand — env vars, install dir, docs are 'box', not 'claudebox' claude-hdb 2026-07-14 17:44:24 +0000
  • 912e0621ca fix: disable Secure Boot on box VMs — 'bad shim signature' hung every mint at GRUB claude-hdb 2026-07-14 17:05:39 +0000
  • b9480fd9ce fix: strip whole escape sequences from the console dump, and name the GRUB hang claude-hdb 2026-07-14 16:56:52 +0000
  • c4cc9f43d1 fix: sanitize the console dump (no more scrambled terminal) + tear down failed mints claude-hdb 2026-07-14 16:38:54 +0000
  • 5deef69621 chore: VERSION → 0.5.0 (templates, migrate-host, expose) claude-hdb 2026-07-14 16:13:08 +0000
  • 449d750eb5 Merge remote-tracking branch 'fork/feat/expose' into integration/0.5.0 claude-hdb 2026-07-14 16:12:53 +0000
  • 05287c96d7 Merge remote-tracking branch 'fork/feat/migrate-host' into integration/0.5.0 claude-hdb 2026-07-14 16:12:53 +0000
  • de6467a728 feat: 'box expose <box> <port>' — a deliberate, loopback-only door to a dev server claude-hdb 2026-07-14 16:07:17 +0000
  • c9712834f2 feat: host/migrate-host.sh — re-home legacy boxes onto the new stack, then retire it claude-hdb 2026-07-14 16:02:27 +0000
  • c6bb6cb0e0 feat: codex and grok templates — the mechanic's second and third tenants claude-hdb 2026-07-14 15:59:39 +0000
  • 9b3522e4ee
    Merge pull request #52 from claude-hdb/feat/box-rename Daniel Marin 2026-07-14 16:44:10 +0100
  • c033a26979 fix: a watched mint must move — unbuffer the dots, name the log after the box claude-hdb 2026-07-14 15:34:08 +0000
  • 0c87911cb1 fix: give the agent five minutes, and ship the console log when it never comes claude-hdb 2026-07-14 15:28:25 +0000
  • 06d4589b6a feat(drill): a heartbeat during every mint — silence must never mean 'maybe wedged' claude-hdb 2026-07-14 15:21:28 +0000
  • ce4d2b6006 fix: pin stdin on every non-interactive exec in the CLI — a mint wedged at 'status: done' claude-hdb 2026-07-14 15:07:01 +0000
  • cdd8b703eb fix: box-net's NIC still pointed at claudenet — the drill caught it in seconds claude-hdb 2026-07-14 14:43:43 +0000
  • 5defd40bca feat!: rename the host stack too, default to blank, drill the templates, add wipe claude-hdb 2026-07-14 14:36:39 +0000
  • c11f3d7552 feat!: claudebox becomes box — the Claude box is one template among several claude-hdb 2026-07-14 14:22:50 +0000
  • ffdfb52512
    Merge pull request #51 from claude-hdb/fix/storage-btrfs Daniel Marin 2026-07-14 14:24:32 +0100
  • 154f10e336
    Merge pull request #50 from claude-hdb/feat/doctor-verb Daniel Marin 2026-07-14 14:24:17 +0100
  • 7e03f88c6f
    Merge pull request #49 from claude-hdb/feat/tmux-verb Daniel Marin 2026-07-14 14:23:58 +0100
  • c0611e5f0b fix: create the storage pool deliberately — btrfs, because cloning is the whole point claude-hdb 2026-07-14 13:14:26 +0000
  • 16a4c129fc feat: 'claudebox doctor' — the host-health checks as a first-class verb claude-hdb 2026-07-14 13:13:18 +0000
  • eacb1a9e28 feat: 'claudebox tmux <box> [session]' — a shell that survives you claude-hdb 2026-07-14 13:10:59 +0000
  • f241b1f27a
    Merge pull request #48 from claude-hdb/docs/runs-11-13 Daniel Marin 2026-07-14 14:01:41 +0100
  • 6525d7f3c4
    Merge pull request #47 from claude-hdb/docs/readme-measured-isolation Daniel Marin 2026-07-14 14:01:29 +0100
  • bcc641beff docs(drill): record runs 11–13 — the contract measured at zero, from a bare host claude-hdb 2026-07-14 12:52:02 +0000
  • 15fe15b23f docs(readme): the isolation contract as it ships — and measured, not claimed claude-hdb 2026-07-14 12:47:09 +0000
  • 7df9dafc40
    Merge pull request #45 from claude-hdb/fix/pin-claudenet-resolver Daniel Marin 2026-07-14 13:22:47 +0100
  • a2c0758ba6 fix: pin claudenet's resolver — a box's DNS is not a function of the host's VPN claude-hdb 2026-07-14 12:15:45 +0000
  • 7efc8a171d
    Merge pull request #44 from claude-hdb/fix/drill-shared-host Daniel Marin 2026-07-14 13:12:06 +0100
  • 730d7da54e fix(drill): stop demanding an empty host — assert OUR boxes, not NO boxes claude-hdb 2026-07-14 12:09:44 +0000
  • c1542c2f34
    Merge pull request #43 from claude-hdb/fix/doctor-gateway-ping Daniel Marin 2026-07-14 12:59:26 +0100
  • 2c03624013 fix(doctor): the gateway does not answer ping — by design, so stop asking claude-hdb 2026-07-14 11:58:36 +0000
  • 1c24fa7ef0
    Merge pull request #42 from claude-hdb/fix/doctor-probe-hangs Daniel Marin 2026-07-14 12:54:37 +0100
  • 2ab3ac8244 fix(doctor): pin the probes' stdin — an interactive exec cannot be timed out claude-hdb 2026-07-14 11:50:08 +0000
  • 03546917aa
    Merge pull request #41 from claude-hdb/fix/probe-reads-the-message Daniel Marin 2026-07-14 12:28:36 +0100
  • ba068e06a1
    Merge pull request #40 from claude-hdb/fix/doctor-lies Daniel Marin 2026-07-14 12:28:23 +0100
  • 3b79f304c0
    Merge pull request #36 from claude-hdb/drill/run10-results Daniel Marin 2026-07-14 12:28:10 +0100
  • e00b6666da fix(drill): read curl's message — the exit code cannot tell you what happened claude-hdb 2026-07-14 02:33:02 +0000
  • f1748b681d fix(doctor): four checks that lied, and none of them about a real fault claude-hdb 2026-07-14 02:24:20 +0000
  • 3f21a7b043
    Merge pull request #39 from claude-hdb/fix/isolation-ground-truth Daniel Marin 2026-07-14 03:18:30 +0100
  • a0400606c2 fix(doctor): read the isolation off the bridge, not off the config claude-hdb 2026-07-14 02:16:57 +0000
  • ff10325fb7
    Merge pull request #38 from claude-hdb/fix/firewall-restart Daniel Marin 2026-07-14 02:42:35 +0100
  • 3bed7c2f2a fix: isolate boxes with the bridge's port-isolation flag, not an nft rule claude-hdb 2026-07-14 01:41:18 +0000
  • bd849181bd fix: the firewall unit never re-ran, so new rules were never applied claude-hdb 2026-07-14 01:40:02 +0000
  • f90d98a25d
    Merge pull request #37 from claude-hdb/fix/sibling-isolation Daniel Marin 2026-07-14 02:30:28 +0100
  • dbefd66dd5 fix: boxes could reach each other — isolate them at the bridge claude-hdb 2026-07-14 01:29:33 +0000
  • 7fb2b28ce5 docs(drill): the audit is complete — and boxes are not isolated from each other claude-hdb 2026-07-14 01:25:42 +0000
  • 08b6b2ce90
    Merge pull request #35 from claude-hdb/drill/doctor-dnsmasq Daniel Marin 2026-07-14 02:23:51 +0100
  • 9736977196 fix(doctor): check that something is actually serving the network claude-hdb 2026-07-14 01:13:38 +0000
  • c86afabe89
    Merge pull request #34 from claude-hdb/drill/doctor-dns Daniel Marin 2026-07-14 02:01:35 +0100
  • 28be7a0ec7 fix: a failed cold mint must say why, and the doctor must find the cause claude-hdb 2026-07-14 00:55:39 +0000
  • f1f9913552
    Merge pull request #32 from claude-hdb/drill/doctor Daniel Marin 2026-07-14 01:33:31 +0100
  • b0eefd8369 fix(drill): stop poisoning the host, and add a doctor to prove it claude-hdb 2026-07-14 00:32:03 +0000
  • d1d920fa73
    Merge pull request #31 from claude-hdb/fix/drill-no-verdicts-on-broken-baseline Daniel Marin 2026-07-14 01:06:02 +0100
  • b0abd287ec
    Merge pull request #30 from claude-hdb/fix/reset-identity-restart Daniel Marin 2026-07-14 01:05:47 +0100
  • 769287eb7e fix(drill): refuse to judge #16 on a broken baseline claude-hdb 2026-07-14 00:04:01 +0000
  • 4e2c6c9caf fix: the clone identity reset could never reboot, so it never took effect claude-hdb 2026-07-14 00:03:21 +0000
  • b93b90fa0d
    Merge pull request #28 from claude-hdb/fix/drill-nic-name Daniel Marin 2026-07-14 00:33:40 +0100
  • 1fb1ddfc20
    Merge pull request #27 from claude-hdb/fix/clone-identity Daniel Marin 2026-07-14 00:33:27 +0100
  • 6899fc3626 fix(drill): the NIC inside a VM is enp5s0, not eth0 — read by subnet instead claude-hdb 2026-07-13 23:32:22 +0000
  • 793f499178 fix: a clone must not inherit its source's identity claude-hdb 2026-07-13 23:31:32 +0000
  • d8731b4772
    Merge pull request #25 from claude-hdb/drill/clean-before-setup Daniel Marin 2026-07-14 00:10:19 +0100
  • dcc9f001b3 fix(drill): clean the host BEFORE setup-host, and bound it claude-hdb 2026-07-13 23:09:51 +0000
  • 8bda06d0dc
    Merge pull request #24 from claude-hdb/drill/setup-visibility Daniel Marin 2026-07-14 00:07:46 +0100
  • a3e5d1226e docs(drill): keep the run log in the repo, not in PR descriptions claude-hdb 2026-07-13 23:06:38 +0000
  • 40a9e05e51 fix(drill): stop going silent through host setup claude-hdb 2026-07-13 23:05:34 +0000
  • 0b083f4da5
    Merge pull request #23 from claude-hdb/drill/listenerless-probes Daniel Marin 2026-07-14 00:03:14 +0100
  • 12350aaa3e fix(drill): delete every listener — refused-vs-dropped answers it already claude-hdb 2026-07-13 23:02:48 +0000