Commit graph lazaret/crates/lazaret-host-coordinator/src/control.rs
Author SHA256 Message Date
6816f0632e Add interactive client terminal transport 2026-07-17 23:23:19 +09:00
2bc5982a62 Enforce exact recovery ownership before cold start 2026-07-17 23:23:19 +09:00
71b0266cf2 Run non-interactive sessions through production coordination 2026-07-17 23:23:19 +09:00
a9c9cf7ab3 Fail teardown when control withdrawal fails 2026-07-17 23:23:19 +09:00
da7557b850 Route production control through lifecycle ownership 2026-07-17 23:23:19 +09:00
33ac0ba4ee Compose cold-start resources under Runtime Supervisor ownership 2026-07-17 23:23:19 +09:00
510dfccf5a Route lifecycle admission through the control registry 2026-07-17 23:23:19 +09:00
407b75b1ff Add confined host escalation transport 2026-07-15 19:59:51 +09:00
18afbeaa91 Make control identity mode umask-independent
Set and validate the publication identity through its retained descriptor so restrictive process masks cannot weaken or remove the required mode.
2026-07-15 18:19:18 +09:00
c3a76ec8c4 Add generation-bound TLS control face
Create ephemeral trust anchors, publish an exact-profile Unix control socket, and persist generation-authorized mTLS session registration through the Domain Store.
2026-07-15 18:19:18 +09:00