OSS-OO/laboratory
OSS-OO/laboratory
Watch
5
0
Fork
You've already forked laboratory
 0
Code Issues 7 Pull requests 5 Projects Releases Packages Wiki Activity Actions

Add native administrator-authorized sponsor adoption #145

Merged
ClaudiuSchuster merged 1 commit from oss-oo/sponsor-adoption-20261020-a20 into main 2026-10-20 10:41:52 +00:00
Conversation 0 Commits 1 Files changed 21 +2745 -397
ClaudiuSchuster commented 2026-10-20 10:32:46 +00:00
Owner

Guardian-pool identities could be exempt from expiry while still belonging to the guardian. Add native administrator-authorized adoption that records the human sponsor UID and permanent lifecycle exemption together, preserving the agent UID, credentials, scopes and original creator.

Registrar, console, fleet and join lifecycle share the current-owner projection and a transaction lock. A version-checked SSH dispatcher authenticates the native caller through protected stdin and uses server-owned policy. Adoption records an explicit administrative control attestation; it does not claim agent possession or recipient consent.

Validation:

  • Independent authority, concurrency, durability and source review; no remaining findings in the final scope.
  • All 28 adoption tests pass normally and with Python optimization; existing reader regressions pass.
  • The full isolated PVE end-to-end run exits 0 on the exact candidate tree a48644bed78d03421632da82b8807bf1b1e3757c, including real SSH, authenticated HTTP console ownership/quota, credential preservation, stale warning suppression, expiry and rotation/revocation. Source hashes, teardown and neighboring services were verified afterward.

Installation must update the ten cooperating runtime files together, provision the stable shared lock and retire old managed writers. The runbook documents recovery: after the first genuine transfer, old code is not a valid rollback because it ignores the new owner. Production installation is a separate operation.

Guardian-pool identities could be exempt from expiry while still belonging to the guardian. Add native administrator-authorized adoption that records the human sponsor UID and permanent lifecycle exemption together, preserving the agent UID, credentials, scopes and original creator. Registrar, console, fleet and join lifecycle share the current-owner projection and a transaction lock. A version-checked SSH dispatcher authenticates the native caller through protected stdin and uses server-owned policy. Adoption records an explicit administrative control attestation; it does not claim agent possession or recipient consent. Validation: - Independent authority, concurrency, durability and source review; no remaining findings in the final scope. - All 28 adoption tests pass normally and with Python optimization; existing reader regressions pass. - The full isolated PVE end-to-end run exits 0 on the exact candidate tree `a48644bed78d03421632da82b8807bf1b1e3757c`, including real SSH, authenticated HTTP console ownership/quota, credential preservation, stale warning suppression, expiry and rotation/revocation. Source hashes, teardown and neighboring services were verified afterward. Installation must update the ten cooperating runtime files together, provision the stable shared lock and retire old managed writers. The runbook documents recovery: after the first genuine transfer, old code is not a valid rollback because it ignores the new owner. Production installation is a separate operation.
feat: add native sponsor adoption with shared transactions
All checks were successful
access-validation-contract / contract (pull_request) Successful in 3m21s
Details Explain this check
ci / ci (pull_request) Successful in 4m25s
Details Explain this check
d413e578f3 
Assign active guardian-pool identities through native administrator-attested
MCP authority, preserving UID, credentials, scopes and creator provenance.
Project current UID-bound ownership consistently across tokens, quota,
management, console and pool lifecycle while retaining legacy lifetime-only
exemptions.

Serialize native, SSH and host-runner mutations through one durable ledger
transaction. Keep SSH caller authentication in protected stdin, retain
server-owned policy and suppress stale lifecycle notifications.

Validation: complete isolated scripts/e2e-local.sh gate with native HTTP and
actual SSH; 28 focused adoption tests in normal and optimized mode; syntax
and whitespace checks. Installation and first live assignment remain separate.
ClaudiuSchuster changed title from WIP: Add native administrator-authorized sponsor adoption to Add native administrator-authorized sponsor adoption 2026-10-20 10:41:35 +00:00
ClaudiuSchuster deleted branch oss-oo/sponsor-adoption-20261020-a20 2026-10-20 10:41:52 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
OSS-OO/laboratory!145
No description provided.