S1: Rust workspace, static builds and gates #11

New issue

Closed

opened 2026-10-05 15:32:07 +00:00 by kayg · 14 comments

kayg commented 2026-10-05 15:32:07 +00:00

Owner

Copy link

The Rust side of the monorepo and its gates. Decisions 7, 20 and 40.

• Cargo workspace, rust-toolchain.toml (stable, with musl targets for x86_64 and aarch64)
• Crates (empty, documented): infraternal (the binary: server and agent modes), protocol, plugin-api, server, agent, shim, plugins/ssh
• Lints: #![forbid(unsafe_code)] everywhere except shim, clippy pedantic as errors, no unwrap outside tests; cargo-deny for licenses and advisories
• Static musl release builds for x86_64 and aarch64; a check that proves the binary is static
• scripts/verify fast runs the Rust gates (fmt, clippy, test, deny, static build)
• .forgejo/workflows/ci.yml runs scripts/verify fast on the infraternal-dev runner

The Rust side of the monorepo and its gates. Decisions 7, 20 and 40. - [ ] Cargo workspace, `rust-toolchain.toml` (stable, with musl targets for x86_64 and aarch64) - [ ] Crates (empty, documented): `infraternal` (the binary: `server` and `agent` modes), `protocol`, `plugin-api`, `server`, `agent`, `shim`, `plugins/ssh` - [ ] Lints: `#![forbid(unsafe_code)]` everywhere except `shim`, clippy pedantic as errors, no `unwrap` outside tests; `cargo-deny` for licenses and advisories - [ ] Static musl release builds for x86_64 and aarch64; a check that proves the binary is static - [ ] `scripts/verify fast` runs the Rust gates (fmt, clippy, test, deny, static build) - [ ] `.forgejo/workflows/ci.yml` runs `scripts/verify fast` on the `infraternal-dev` runner

kayg commented 2026-10-05 15:34:50 +00:00

Author

Owner

Copy link

Starting implementation on branch s1-workspace, based on 4560d9dd64. I have read CLAUDE.md, DECISIONS.md, and docs/ARCHITECTURE.md; this slice follows decisions 7, 20, 34, and 40.

Starting implementation on branch s1-workspace, based on 4560d9dd64cec2da88254eb5014aa180728f1b5f. I have read CLAUDE.md, DECISIONS.md, and docs/ARCHITECTURE.md; this slice follows decisions 7, 20, 34, and 40.

kayg commented 2026-10-05 15:35:57 +00:00

Author

Owner

Copy link

Finding: this worktree has no Cargo workspace, Rust toolchain, or verify script yet; rustup reports 'no installed toolchains' and no default toolchain. I will pin and install Rust 1.99.0 and add the Rust-only checks under scripts/verify.d/rust.sh.

Finding: this worktree has no Cargo workspace, Rust toolchain, or verify script yet; rustup reports 'no installed toolchains' and no default toolchain. I will pin and install Rust 1.99.0 and add the Rust-only checks under scripts/verify.d/rust.sh.

kayg commented 2026-10-05 15:40:34 +00:00

Author

Owner

Copy link

Finding: this environment cannot reach its Docker socket ('permission denied' for /var/run/docker.sock), and Forgejo reports 0 existing action tasks for kayg/infraternal, so there is no runner cache history to verify. I will validate the Rust gates directly in this worktree and omit cache configuration until the runner's cache support is demonstrated.

Finding: this environment cannot reach its Docker socket ('permission denied' for /var/run/docker.sock), and Forgejo reports 0 existing action tasks for kayg/infraternal, so there is no runner cache history to verify. I will validate the Rust gates directly in this worktree and omit cache configuration until the runner's cache support is demonstrated.

kayg commented 2026-10-05 15:42:10 +00:00

Author

Owner

Copy link

Finding: Cargo 1.99 rejects a crate that inherits and locally changes ('cannot override workspace.lints in lints'). The shim will declare the same shared Clippy lints locally with unsafe_code=deny; the other six crates inherit the workspace forbid policy.

Finding: Cargo 1.99 rejects a crate that inherits and locally changes ('cannot override workspace.lints in lints'). The shim will declare the same shared Clippy lints locally with unsafe_code=deny; the other six crates inherit the workspace forbid policy.

kayg commented 2026-10-05 15:42:19 +00:00

Author

Owner

Copy link

Finding: Cargo 1.99 rejects a crate that inherits [lints] workspace = true and locally changes unsafe_code (error: cannot override workspace.lints in lints). The shim will declare the same shared Clippy lints locally with unsafe_code=deny; the other six crates inherit the workspace forbid policy.

Finding: Cargo 1.99 rejects a crate that inherits `[lints] workspace = true` and locally changes `unsafe_code` (error: cannot override workspace.lints in lints). The shim will declare the same shared Clippy lints locally with unsafe_code=deny; the other six crates inherit the workspace forbid policy.

kayg commented 2026-10-05 15:47:16 +00:00

Author

Owner

Copy link

Finding: the first workspace build reaches quote and proc-macro2 but fails before linking Rust code because the environment has no cc linker (linker cc not found). CI will install its host C build tools; I will provision the same build prerequisite locally and rerun the gate.

Finding: the first workspace build reaches `quote` and `proc-macro2` but fails before linking Rust code because the environment has no `cc` linker (`linker cc not found`). CI will install its host C build tools; I will provision the same build prerequisite locally and rerun the gate.

kayg commented 2026-10-05 15:48:25 +00:00

Author

Owner

Copy link

Finding: the aarch64 musl build reaches the configured Rust-bundled LLD and CRT, but the wrapper adds -flavor gnu, which Rust 1.99 LLD rejects as an unknown argument. The command line already contains direct GNU linker options, so I am removing that redundant flag and will repeat both static builds.

Finding: the aarch64 musl build reaches the configured Rust-bundled LLD and CRT, but the wrapper adds `-flavor gnu`, which Rust 1.99 LLD rejects as an unknown argument. The command line already contains direct GNU linker options, so I am removing that redundant flag and will repeat both static builds.

kayg commented 2026-10-05 15:51:59 +00:00

Author

Owner

Copy link

Finding: the first complete fast gate passed, including static PIE x86_64 (658,808 bytes) and static aarch64 (564,752 bytes), but cargo-deny warned that five allowed licenses were not present in the graph. I am narrowing deny.toml to the licenses the locked graph actually uses so the gate is clean.

Finding: the first complete fast gate passed, including static PIE x86_64 (658,808 bytes) and static aarch64 (564,752 bytes), but cargo-deny warned that five allowed licenses were not present in the graph. I am narrowing deny.toml to the licenses the locked graph actually uses so the gate is clean.

kayg commented 2026-10-05 15:53:41 +00:00

Author

Owner

Copy link

Update on caching: the repository has no prior Actions tasks, so runner cache availability remains unverified. I will add the Forgejo cache action as best-effort with continue-on-error, keyed by OS, architecture, Cargo.lock, and rust-toolchain.toml; an unsupported runner will still run the gates normally.

Update on caching: the repository has no prior Actions tasks, so runner cache availability remains unverified. I will add the Forgejo cache action as best-effort with continue-on-error, keyed by OS, architecture, Cargo.lock, and rust-toolchain.toml; an unsupported runner will still run the gates normally.

kayg commented 2026-10-05 15:56:26 +00:00

Author

Owner

Copy link

Review finding: the CLI currently prints server: not implemented or agent: not implemented, while the issue requires the exact message not implemented. I am changing both branches and the static smoke check to assert the requested text.

Review finding: the CLI currently prints `server: not implemented` or `agent: not implemented`, while the issue requires the exact message `not implemented`. I am changing both branches and the static smoke check to assert the requested text.

kayg commented 2026-10-05 15:58:39 +00:00

Author

Owner

Copy link

Finding: the final gate reported clippy::match_same_arms (exit 101) because both required subcommands now print the same exact text and return code. The compiler-provided fix is to merge the patterns; the static smoke gate will continue invoking both commands separately.

Finding: the final gate reported clippy::match_same_arms (exit 101) because both required subcommands now print the same exact text and return code. The compiler-provided fix is to merge the patterns; the static smoke gate will continue invoking both commands separately.

kayg commented 2026-10-05 16:00:30 +00:00

Author

Owner

Copy link

Finished on branch s1-workspace at head dd2338ebeff1364c7f9d82ed534941bd4f30b4fa. The committed fast gate passed locally; a temporary Nix shell supplied the missing host C compiler. Cache is configured as best-effort, but this repository has no previous Actions tasks, so runner cache support is still unverified. Binary sizes: x86_64-unknown-linux-musl 657,976 bytes; aarch64-unknown-linux-musl 563,728 bytes. file reports static-pie/static linking for both and readelf confirms PT_INTERP is absent.

scripts/verify fast output verbatim:

==> fmt

==> clippy
Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal)
Finished dev profile [unoptimized + debuginfo] target(s) in 0.10s

==> test
Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal)
Finished test profile [unoptimized + debuginfo] target(s) in 0.14s
Running unittests src/main.rs (target/debug/deps/infraternal-239f4951fa340219)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_agent-eadaa10b8c42bfd9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_plugin_api-4480fd7032f11ca2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_plugin_ssh-22a9a893799c7f17)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_protocol-342516d5dbf00714)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_server-3a7dcd467cd5ddf2)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

 Running unittests src/lib.rs (target/debug/deps/infraternal_shim-2036f3f8f778c3eb)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

==> cargo-deny
advisories ok, bans ok, licenses ok, sources ok

==> static builds
Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal)
Finished release profile [optimized] target(s) in 4.25s
target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 657976 bytes
Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal)
Finished release profile [optimized] target(s) in 4.43s
target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 563728 bytes
server subcommand: exit 2, not implemented
agent subcommand: exit 2, not implemented

+---------------------------+--------------+
| Rust gate | Result |
+---------------------------+--------------+
| fmt | PASS |
| clippy | PASS |
| test | PASS |
| cargo-deny | PASS |
| static builds | PASS |
+---------------------------+--------------+

Finished on branch s1-workspace at head dd2338ebeff1364c7f9d82ed534941bd4f30b4fa. The committed fast gate passed locally; a temporary Nix shell supplied the missing host C compiler. Cache is configured as best-effort, but this repository has no previous Actions tasks, so runner cache support is still unverified. Binary sizes: x86_64-unknown-linux-musl 657,976 bytes; aarch64-unknown-linux-musl 563,728 bytes. `file` reports static-pie/static linking for both and readelf confirms PT_INTERP is absent. `scripts/verify fast` output verbatim: ==> fmt ==> clippy Checking infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal) Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.10s ==> test Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal) Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s Running unittests src/main.rs (target/debug/deps/infraternal-239f4951fa340219) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_agent-eadaa10b8c42bfd9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_plugin_api-4480fd7032f11ca2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_plugin_ssh-22a9a893799c7f17) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_protocol-342516d5dbf00714) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_server-3a7dcd467cd5ddf2) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/infraternal_shim-2036f3f8f778c3eb) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny advisories ok, bans ok, licenses ok, sources ok ==> static builds Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal) Finished `release` profile [optimized] target(s) in 4.25s target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 657976 bytes Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/s1-workspace/crates/infraternal) Finished `release` profile [optimized] target(s) in 4.43s target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 563728 bytes server subcommand: exit 2, not implemented agent subcommand: exit 2, not implemented +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+

kayg commented 2026-10-05 16:03:18 +00:00

Author

Owner

Copy link

Orchestrator review of the job (it delivered one commit, dd2338e):

• The commit was split into 5 atomic commits (owner rule): workspace and crates → rust-lld static linking → cargo-deny → scripts/verify → CI. Head 39630d6.
• Changed panic = "abort" to unwind. With abort, one panicking session task kills the whole server and every connection. With unwind, tokio isolates the task. Binary: 706 KB with unwind, 658 KB with abort (x86_64).
• The gate needs readelf and file on PATH. The CI image installs binutils and file. On a local machine they are a prerequisite.
• scripts/verify fast passes again (fmt, clippy, test, deny, static builds for x86_64 and aarch64). The branch is pushed, and Forgejo CI runs on it.

Orchestrator review of the job (it delivered one commit, `dd2338e`): - The commit was split into 5 atomic commits (owner rule): workspace and crates → rust-lld static linking → cargo-deny → scripts/verify → CI. Head `39630d6`. - Changed `panic = "abort"` to `unwind`. With abort, one panicking session task kills the whole server and every connection. With unwind, tokio isolates the task. Binary: 706 KB with unwind, 658 KB with abort (x86_64). - The gate needs `readelf` and `file` on PATH. The CI image installs binutils and file. On a local machine they are a prerequisite. - `scripts/verify fast` passes again (fmt, clippy, test, deny, static builds for x86_64 and aarch64). The branch is pushed, and Forgejo CI runs on it.

kayg referenced this issue from a commit 2026-10-05 16:03:19 +00:00

Add the Rust workspace with documented crate skeletons

kayg referenced this issue from a commit 2026-10-05 16:03:19 +00:00

Link the static musl builds with the toolchain's own rust-lld

kayg referenced this issue from a commit 2026-10-05 16:03:19 +00:00

Add the cargo-deny policy for licenses and advisories

kayg referenced this issue from a commit 2026-10-05 16:03:19 +00:00

Add scripts/verify with the Rust fast gate

kayg referenced this issue from a commit 2026-10-05 16:03:19 +00:00

Run the fast gate in Forgejo Actions on every push

kayg referenced this issue from a commit 2026-10-06 10:10:41 +00:00

Merge s1-workspace into s1-base (lane base for S1)

kayg referenced this issue from a commit 2026-10-06 11:30:52 +00:00

Merge s1-base: Rust workspace, gates and S1 contracts

kayg referenced this issue 2026-10-06 11:43:21 +00:00

S1: foundations + SSH plugin #9

kayg commented 2026-10-28 17:52:06 +00:00

Author

Owner

Copy link

Closed by the orchestrator during the 2026-10-28 handover (#254), on the owner's request to close finished issues. Evidence: Workspace/gates merged as 39630d6 (in dev and prod) after orchestrator split into atomic commits; gate PASS in the issue. Reopen if anything is still missing.

Closed by the orchestrator during the 2026-10-28 handover (#254), on the owner's request to close finished issues. Evidence: Workspace/gates merged as 39630d6 (in dev and prod) after orchestrator split into atomic commits; gate PASS in the issue. Reopen if anything is still missing.

kayg closed this issue 2026-10-28 17:52:06 +00:00

kayg referenced this issue 2026-10-28 17:53:54 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

kayg referenced this issue 2026-10-28 18:00:45 +00:00

Orchestrator handover 2026-10-28: moving to a new machine #254

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

j470b-server-mesh-rejoin

mesh-compat-382

j444b-d381-key-wins-flood

j461b-macos-utun-reader-thread

j475b-remove-host-motion

fix-reconnect-new-link

j481-d380

dev

j479-mesh-soak

fix/j476-host-facts

j475-motion-pill-split

j470-mac-node-join

root-upgrade-d376

j474-review-merge

latency-targets-120hz

nightly-suite-shards

gotatun-pin-j469

macos-utun-reader-thread

fix-flood-echo-stall

wip/j416

motion-fast-ease-out

mesh-addhost-j259

takeover-close-terminals-d368

kbd-instant-followups

fix-trust-key-double-click

nightly-suite-partial-report

appwin-icons-j207

rusqlite-slice1

swipe-content-first-d374

mesh-mtu-381

addhost-instant-open

glass-contrast-d365-mock

glass-contrast-d365

signout-followups-442

fix-startup-toast-red

research-gotatun-matrix-j317

themes-sync-j304

fix-load-flakes

fix-nix-zig-patch

fix-compute01-browser-baseline

ratchet-size-baseline-419

predict-auto-d130

revoke-coverage-d367

nightly-suite-queue-timeout

nightly-browser-suite

fix-rustsec-2026-0459

fonts-ioskeley-obel

log-retention-d375

fix-kbd-no-anim-427

fix-dev-red-specs-2

takeover-proof-305-j205

wip/j410-server-pump

ui-consistency-d372

fix-osc52-clipboard

libghostty-vt-1.0

forget-retired-host-d369

j404-merge-426

fix-setup-lock-race

fix-touch-select-426

revoke-access-report-ui

fix-predictive-echo-specs

fix-selinux-agent-exec

wip/j395-checkpoint2

wip/j395

j391-review-scratch

ui-consistency-j195-deferred-rebased

fix-rustc-paths-421

decisions-wording-341

fix-install-suite-red

fix-dev-rtt-specs

fix-pending-removal-align

fix-privileged-skip

fix-install-suite-404

review-j368

mesh-dns-j254

revoke-access-report-d356b

revoke-privilege-round5

fix-removal-confirm

review-j360

gotatun-rotation-367

deps-refresh-340

review-j354

review-J351

review-j350

addhost-takeover-d359

revoke-report-items-347

revoke-end-sessions-d362

review-j348

size-mesh-ssh-346

size-trim-337

revoke-access-diff-d356

j259-pre-rebase-b06c5a6

j305-ended-at-start-spec

addhost-sudo-consent

fix-layout-real-specs-411

fix-shell-open-411

fix-console-hosts-373

fix-shell-exit

fuzz-host-name-353

fix-host-details-410

macos-filter-j197

research-gotatun-tricks

revoke-p3-j216l

stale-state-pill

revoke-followups-j216k

revoke-progress-j216e

backup/macos01-20261106/lume/j197

backup/macos01-20261106/lume/appwin-icons-j207-stash0

backup/macos01-20261106/claude/stash-0

backup/macos01-20261106/claude/stash-1

backup/macos01-20261106/claude/J80-macos-s1

backup/macos01-20261106/claude/J80

backup/macos01-20261106/claude/J80-slice1-20261102

backup/macos01-20261106/claude/J16b-appwin-on-dev

backup/macos01-20261106/claude/appwin-launch-idle-146

backup/macos01-20261106/claude/J80-s1-run

wip/j259

trust-285-p3c

runtime-lock-j216f

mesh-ssh-p3-j175

tun-proof-p3b

trust-285-p3

terminal-polish-j271

tun-proof-p3

ssh-install-flakes-j216i

fuzz-fixes-j264

trust-285-a

trust-285-b

restart-oversized-fixture-j198

backup/macos01-20261106/lume/appwin-icons-j207

restart-bound-j216h

up-preflight-p3-j198

backup/macos01-20261106/lume/j251

up-preflight-j198

wip/up-preflight-j198-j245-p2

wip/up-preflight-j198-j245-p1

agent-fsync-offloop-j196

wip/up-preflight-j198-j245

settings-offscreen-j231

wip/up-preflight-j198-j226-inspection

wip/j103f

themes-j206

wip/up-preflight-j198-j226

flakes-j216c

backup/macos01-20261106/claude/j197

flakes-j216b

backup/macos01-20261106/claude/j197-red

wip/up-preflight-j198-review

flakes-j216

backup/macos01-20261106/claude/appwin-icons-j207

engineering-j208b

appwin-mock-j209

toast-stack-j165

engineering-j208

decisions-d351

decisions-d350

decisions-d349

appearance-presets-mock-j129

decisions-d348

docs-audit-spec

doc-coverage-baseline-raise

decisions-d347

decisions-d346b

decisions-d346

j88h-profile

ui-consistency-j195-deferred

ui-consistency-j195

engineering-practices-j194

preferred-login-ui-j166

signin-pools-263-j174

macos-node-265-s1

decisions-d345

decisions-d344

proxy-cgroup-j164

verify-quick-fuzz-329

proxy-start-io-j168

timing-flakes-j163

up-263-s1

mcp-events-j147

verify-quick-fuzz-j158

proxy-p3-j159

agent-resource-j157-detect

wip/j103d-final

remote-cancel-hang-j155

proxy-traefik-281-j62d

j149-verify-quick

proxy-traefik-281-j62b

j150-drop-unnamed

wip/j79d-red-r4

wip/j103d-d332

rootless-toast-j142

wip/j103d-head

wip/j103d

j125c-mcp

macos-build-j136

backup/macos01-20261106/claude/j136

wip/j79d-red-cli

wip/j79d-red-server

j121-link-liveness

j118c-tracer-failures

wip/j79c-head

release-desktop-j131

j124c-signed-macos

wip/j79c-red-p3

wip/j79c-red-p23

wip/j79c-red-p22

merge-j128-check

perf-deferred-j128

sidebar-toggle-260

j127-shortcut-changed-dot

j125-mcp

j118-tracer-failures

j126-account-summary

settings-sections-mock-j92

j120-pinch-lock

sidebar-292

backup/macos01-20261106/claude/j120

taste-2026-11-03

row-actions-242-215

backup/macos01-20261106/claude/stash-0-untracked

backup/macos01-20261106/claude/J80-265-s1-run

backup/macos01-20261106/claude/J80-macos-s1-20261102

j112-canvas-commands

ui-no-overshoot-scroll

fix-recovery-restart

backup/macos01-20261106/claude/stash-1-untracked

taste-2026-11-02

size-baseline-ratchet

machine-cards-structure-j108

j109-boot-copy-mockups

fix-dev-red

wip/up-263-s1

j95b-settings-rows

proxy-traefik-281

j95-option-rows

docs-human-j91

docs-keys-palette

fix-flood-1013-270-j38d

mesh-ssh-s1

mesh-ssh-s0

addhost-d291-tunnel

test-stability-load

mesh-relay-220

repro-296

shim-thp-off-24

mesh-pins-258-v2

mesh-dns

signin-d311-merged

docs-pages

ui-size-283

fix-ui-batch-specs

wip/j12b-edge-update

gate-on-arm

fix-rename-sync-293

trust-285-j60b

fix-focus-ring-clip

integ-ui-1101

edge-update-v2

signin-d311

taste-2026-11-01

layout-per-tab-250

ui-approved-splitopt-224

ui-approved-splitopt-224-on-dev

icon-text-centre-282

ui-approved-189-212-216

research-reverse-proxy

transfer-budget-320

review-mesh-pins-258-r2

sidebar-pill-259

review-mesh-relay-220

wip/j12-edge-update-v2

nix-package

status-crash-loop-237

fix-dev-test-failures

fix-fixture-socket-path

wip/mesh-relay-220-pre-dev-advance-rebase

fix-canvas-side-clip

research-head-to-head

frosted-real-256

review-mesh-pins-258

wip/mesh-relay-220-pre-final-rebase

review-layout-per-tab-250-r2

broad-suite-triage

nix-devshell

review-status-crash-loop-237-r3

wip/nix-devshell-pre-p3

taste-frosted-real

wip/code-serve-demo-2026-10-30

wip/code-serve-glass-2026-10-30

wip/code-serve-clusters-2026-10-30

wip/code-merge-release94-dev-2026-10-30

wip/rproxy-delta-scratch-2026-10-30

wip/stale-note-257-staged-2026-10-30

wip/d241-size-staged-2026-10-30

review-broad-suite-207

wip/mesh-pins-258-pre-split

wip/mesh-relay-220-pre-rebase

mesh-measure-220

plan-211-update

review-edge-autoupdate-r3

perf24-reconnect

review-stale-note-r2

release-prod-live

d241-shell-marker

review-mesh-pins-server-258

review-revocation-r3

review-setup-token-r2

review-sync-journal-r3

wip/review-mesh-pins-258-prune-review-1995fee46

frosted-scroll-256

sync-journal-r3

revocation-per-account-wip

review-tokio-asyncfd-0386

review-sync-p3s

wip/stash-8by64-stash0-2026-10-30

mesh-drag-r2

setup-token-data-wip

release-9-4

auth-busy-1013

mesh-view-overlap

sync-p3s

review-auth-busy-wake

review-readd-r8-wip

mesh-drag-bounds

audit-auth-93

app-windows-stream-start

review-authority-cap-r3

app-windows-r7-measure

readd-minimal-r6

readd-minimal-r5

app-windows-r7-soak

readd-minimal-r4

app-windows-r7

app-windows-r6

readd-minimal-r3

readd-minimal-r2

readd-minimal

merge-release8-dev

review-busy-page-liveness-r2

review-busy-page-liveness

mesh-view-trim

review-authority-read-retry-r2

review-remove-uninstall-r2

release-retry-reattach

release-retry

review-remove-uninstall

review-authority-read-retry

app-windows-ship

mesh-autoswitch-p2

mesh-ssh

mesh-relay

mesh-macos-node

screen-and-control

session-labels

review-real-logins-r5

review-real-logins-r4

review-real-logins-r3

shim-memory-r2

review-real-logins-r2

shim-memory

shadow-addhost-instant

shadow-real-logins

shadow-same-session-flood

shadow-prod-perf-fix

hosts-from-server

app-windows-real

app-windows-transport

release-prod-6w

mesh-policy-verify

quiet-close-toast

dev-merge-r4

review-mesh-agent-transport

review-app-windows-transport

settings-roundtrip

review-release-pipeline-r4

mesh-agent-transport

ended-strip-fix

review-audit-ca-update-d244

settings-rows

phone-width

signout-clear

fix-restart-tests

dev-merge-rp

signer-hardening

review-audit-ca-update

terminal-fidelity

review-audit-ca-update-wip

mesh-integrate

review-mesh-agent-transport-515d3712

review-mesh-dataplane-feec1988

mesh-dataplane

signout

research-canvas-node

wip/review-renderer-cost

wip/review-terminal-fidelity

padlock-glyph

review-release-pipeline-2e95b689

phone-polish

sidebar-polish

inbox-generic

review-mesh-dataplane-378d4055

prod-batch

ui-inbox

ui-ca-unlock

ui-machine-sections

review-mesh-dataplane-a5f744fb

tls-session-prod

session-bounds-prod

fix-dead-session

session-bounds

tls-session

palette-polish

shortcuts-d222

research-appmeta

phone-gutter

ui-centre-button

wip/ui-centre-button

wip/tls-session

review-addhost-breakit

ui-platform

renderer-cost

remote-agents

mesh-api

ssh-bootstrap

prod-hotfix2

prod-fixes

review-remote-agents

review-mesh-dataplane

session-life

research-browser

review-mesh-api

research-capture

review-mesh-api-round3

review-mesh-api-round1

gate-stability

review-gate-stability

review-relay-direct

review-mesh-api-findings

proto-sessions

font-picker

proto-addhost

proto-windows

mesh-core

latency-gate

research-bsd

research-discovery

keytray-mods

mock-core

ui-tweaks

fix-motion-sel

fix-motion

integrate2

fix-robust

t-web

t-server

vt-ghostty

fix-snap-echo

t-web-auth

review-vt2

t-agent

lane-protocol

lane-shim

lane-auth

s1-base

s1-contracts

s1-workspace

No results found.

Labels

Clear labels   

launch-qa

Findings from launch QA.

No labels

launch-qa

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

kayg/infraternal#11

No description provided.