Skip to content

Reliability tests, deployment and threat-model docs; product-only README/landing - #3

Merged
unnipv merged 2 commits into
mainfrom
chore/alpha-completion
Oct 5, 2026
Merged

unnipv merged 2 commits into
mainfrom
chore/alpha-completion

Conversation

@unnipv

@unnipv unnipv commented Oct 5, 2026

Copy link
Copy Markdown
Owner

Summary

  • Tests: relay frame-bound enforcement + passthrough; coordinator restart invalidation; capability scheduling across two nodes; offline nodes are not scheduled.
  • Docs: docs/deployment.md (TLS via Caddy/nginx, systemd units, enrollment/revocation) and docs/threat-model.md. docs/architecture.md reframed to test coverage and non-goals.
  • README/landing: product and setup only. Removed status/roadmap/progress sections and the internal validation log.

Testing

go test ./internal/... -race green; make e2e unaffected.

unnipv added 2 commits October 5, 2026 19:47
… threat model

- Relay frame bound becomes configurable; add a test that an oversized
  frame closes the relay and a passthrough test that preserves frame type.
- Coordinator tests: restart invalidates in-memory leases while enrolled
  devices reconnect; scheduling routes by headful, browser, profile, and
  node, and skips offline nodes.
- New docs: deployment guide (TLS, reverse proxy, systemd, enrollment) and
  threat model.
- README and landing present the product and setup only: remove status,
  roadmap, and progress sections; drop the internal validation log.
- Restart test now uses a file-backed store, enrolls a device, tears the
  first coordinator down, reopens the store, and reconnects with the same
  device token, so it proves durable identity rather than a static-token
  path.
- Offline scheduling test asserts a 409 scheduling refusal and checks the
  node is reported offline first, so a launch failure cannot pass it.
- Deployment worker unit runs as the enrolled user with the same --data-dir.
- Threat model qualifies where device tokens live and drops an incorrect
  idle-cleanup claim.
- Pause/resume test retries reattachment to remove a known flake.
@unnipv
unnipv merged commit 3c20196 into main Oct 5, 2026
2 checks passed
@unnipv
unnipv deleted the chore/alpha-completion branch October 5, 2026 14:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant