kayg/infraternal
Watch
1
0
Fork
You've already forked infraternal
 0
Code Issues 356 Pull requests Projects Releases Packages Wiki Activity Actions

Research: complete host and fact discovery coverage (Linux families, macOS, Windows, BSD) #64

New issue
Open
opened 2026-10-07 08:30:45 +00:00 by kayg · 16 comments
kayg commented 2026-10-07 08:30:45 +00:00
Owner
Copy link

Owner (2026-10-07): make host and fact discovery complete and well researched. Which Linux distro families, macOS, Windows and BSDs are covered; which facts; how hosts are found from the server host. Probes are cheap and parallelisable, so cover everything sensible. Research first (matrix + probe design + owner questions), then implement after the grill.

Owner (2026-10-07): make host and fact discovery complete and well researched. Which Linux distro families, macOS, Windows and BSDs are covered; which facts; how hosts are found from the server host. Probes are cheap and parallelisable, so cover everything sensible. Research first (matrix + probe design + owner questions), then implement after the grill.
kayg commented 2026-10-07 08:32:36 +00:00
Author
Owner
Copy link

Started research on branch research-discovery from main a85ca2e265. Read the worktree contract, DECISIONS 17–22/126/138/141/144, docs/ARCHITECTURE.md, docs/PROCESS.md, and dev contracts/bootstrap.md. Issue #64 has no prior comments; checked tracking context (#5, #9, #24).

Started research on branch research-discovery from main a85ca2e265ce83572ae86b6ce322256af6ee3a10. Read the worktree contract, DECISIONS 17–22/126/138/141/144, docs/ARCHITECTURE.md, docs/PROCESS.md, and dev contracts/bootstrap.md. Issue #64 has no prior comments; checked tracking context (#5, #9, #24).
kayg commented 2026-10-07 08:33:18 +00:00
Author
Owner
Copy link

Owner steer, D145 (posted while the research runs): fact collection is an infraternal agent feature (Rust, native /proc /sys / OS APIs, parallel external commands with a timeout each, hang detection and diagnosis), not a portable shell script. Before install, SSH does only a tiny OS/arch sniff, then the same binary runs once in a one-shot probe mode over SSH and returns JSON without installing. The research report's section 5 (probe design) should be read through this lens: the matrix of facts and commands stays fully valid, and the per-OS command list becomes the agent's collector table.

Owner steer, D145 (posted while the research runs): fact collection is an **infraternal agent feature** (Rust, native /proc /sys / OS APIs, parallel external commands with a timeout each, hang detection and diagnosis), not a portable shell script. Before install, SSH does only a tiny OS/arch sniff, then the same binary runs once in a one-shot probe mode over SSH and returns JSON without installing. The research report's section 5 (probe design) should be read through this lens: the matrix of facts and commands stays fully valid, and the per-OS command list becomes the agent's collector table.
kayg commented 2026-10-07 08:38:59 +00:00
Author
Owner
Copy link

Finding (live-host access): local NetBird status contains 3 peers but no requested o1/o2/minipc01 names. Failed to connect to kayg@o1:22

Troubleshooting steps:

  1. Check peer connectivity: netbird status -d
  2. Verify SSH server is enabled on the peer
  3. Ensure correct hostname/IP is used failed before remote execution: (8.2 s wall). No host state changed; probe still pending for remaining targets.
Finding (live-host access): local NetBird status contains 3 peers but no requested o1/o2/minipc01 names. Failed to connect to kayg@o1:22 Troubleshooting steps: 1. Check peer connectivity: netbird status -d 2. Verify SSH server is enabled on the peer 3. Ensure correct hostname/IP is used failed before remote execution: (8.2 s wall). No host state changed; probe still pending for remaining targets.
kayg commented 2026-10-07 08:39:58 +00:00
Author
Owner
Copy link

Correction: the previous comment was corrupted by shell expansion while posting. Actual evidence from the earlier attempt: netbird ssh --no-browser kayg@o1 failed before remote execution with dial tcp lookup o1 on 127.0.0.53:53 server misbehaving; wall time 8.2 s. NetBird status exposed no requested target name; no host commands ran.

Correction: the previous comment was corrupted by shell expansion while posting. Actual evidence from the earlier attempt: netbird ssh --no-browser kayg@o1 failed before remote execution with dial tcp lookup o1 on 127.0.0.53:53 server misbehaving; wall time 8.2 s. NetBird status exposed no requested target name; no host commands ran.
kayg commented 2026-10-07 08:39:59 +00:00
Author
Owner
Copy link

D145 incorporated into probe design: recommend a tiny preinstall OS/architecture sniff, then the matching one-shot infraternal agent probe over the same SSH connection. The collector is native Rust with OS interfaces and bounded parallel commands, JSON output, and per-command timeout/hang diagnosis; the shell-family coverage remains documented for the initial sniff and fallback research.

D145 incorporated into probe design: recommend a tiny preinstall OS/architecture sniff, then the matching one-shot infraternal agent probe over the same SSH connection. The collector is native Rust with OS interfaces and bounded parallel commands, JSON output, and per-command timeout/hang diagnosis; the shell-family coverage remains documented for the initial sniff and fallback research.
kayg commented 2026-10-07 08:47:48 +00:00
Author
Owner
Copy link

Finding (read-only host probe attempts, 2026-10-07): all three Linux peers failed before remote execution with DNS failure: o1 7.916 s (stdout 190 B/stderr 116 B), o2 7.902 s (190/116 B), minipc01 7.899 s (196/134 B); zero probe rows. macOS VM ssh failed host-key verification in 1.721 s (0 stdout/31 B stderr); no command ran. I preserved strict host-key checking and did not change known_hosts. Needs NetBird DNS/peer access and a trusted VM host key before measurements can complete.

Finding (read-only host probe attempts, 2026-10-07): all three Linux peers failed before remote execution with DNS failure: o1 7.916 s (stdout 190 B/stderr 116 B), o2 7.902 s (190/116 B), minipc01 7.899 s (196/134 B); zero probe rows. macOS VM ssh failed host-key verification in 1.721 s (0 stdout/31 B stderr); no command ran. I preserved strict host-key checking and did not change known_hosts. Needs NetBird DNS/peer access and a trusted VM host key before measurements can complete.
kayg commented 2026-10-07 09:16:04 +00:00
Author
Owner
Copy link

Section 1 complete in research/discovery/REPORT.md: documented 12 discovery sources with yielded data, SSH-acceptance limits, privacy, cost and failure modes. Passive mesh/config/host-file reads are separated from the optional unauthenticated service check; cloud credential files and API calls are excluded by default.

Section 1 complete in research/discovery/REPORT.md: documented 12 discovery sources with yielded data, SSH-acceptance limits, privacy, cost and failure modes. Passive mesh/config/host-file reads are separated from the optional unauthenticated service check; cloud credential files and API calls are excluded by default.
kayg commented 2026-10-07 09:16:05 +00:00
Author
Owner
Copy link

Section 2 complete in research/discovery/REPORT.md and matrix.json: 30 target families are mapped. Linux identity uses parsed os-release plus special markers; the shell-polyglot first sniff is marked a candidate because cmd and Windows PowerShell could not be validated on a host. OpenWrt 25.12+ uses apk; earlier releases use opkg.

Section 2 complete in research/discovery/REPORT.md and matrix.json: 30 target families are mapped. Linux identity uses parsed os-release plus special markers; the shell-polyglot first sniff is marked a candidate because cmd and Windows PowerShell could not be validated on a host. OpenWrt 25.12+ uses apk; earlier releases use opkg.
kayg commented 2026-10-07 09:16:05 +00:00
Author
Owner
Copy link

Section 3 complete: matrix.json covers 34 facts × 30 families = 1,020 explicit cells. It preserves D126's 11 default facts, leaves its 5 optional facts as optional, and marks all 18 additional facts opt-in. Each cell includes command, fallback, root need, relative cost, parallelism, privacy, parsing and status.

Section 3 complete: matrix.json covers 34 facts × 30 families = 1,020 explicit cells. It preserves D126's 11 default facts, leaves its 5 optional facts as optional, and marks all 18 additional facts opt-in. Each cell includes command, fallback, root need, relative cost, parallelism, privacy, parsing and status.
kayg commented 2026-10-07 09:16:06 +00:00
Author
Owner
Copy link

Section 4 complete: read-only access attempts produced 0 target fact rows. o1/o2/minipc01 failed before remote execution in 7.916/7.902/7.899 s; the macOS VM failed strict host-key verification in 1.721 s. Output sizes and causes are in research/discovery/REPORT.md; no host state changed.

Section 4 complete: read-only access attempts produced 0 target fact rows. o1/o2/minipc01 failed before remote execution in 7.916/7.902/7.899 s; the macOS VM failed strict host-key verification in 1.721 s. Output sizes and causes are in research/discovery/REPORT.md; no host state changed.
kayg commented 2026-10-07 09:16:07 +00:00
Author
Owner
Copy link

Section 5 complete: D145's native-first Rust one-shot --probe-once design, bounded JSON/timeouts, static/live refresh split and unresolved transient binary-delivery question are recorded. No collector timing or output-size measurement is claimed because no remote command ran.

Section 5 complete: D145's native-first Rust one-shot --probe-once design, bounded JSON/timeouts, static/live refresh split and unresolved transient binary-delivery question are recorded. No collector timing or output-size measurement is claimed because no remote command ran.
kayg commented 2026-10-07 09:16:08 +00:00
Author
Owner
Copy link

Section 6 complete: owner questions cover privacy defaults, fact defaults, Windows/BSD priority, API-only families, macOS/Intel floor, transient binary delivery and explicit exclusions.

Section 6 complete: owner questions cover privacy defaults, fact defaults, Windows/BSD priority, API-only families, macOS/Intel floor, transient binary delivery and explicit exclusions.
kayg commented 2026-10-07 09:16:08 +00:00
Author
Owner
Copy link

Section 7 reviewer checklist complete in research/discovery/REPORT.md: confirms full cross-product, source/privacy limits, real-host evidence, unverified areas and unchanged decisions. No product code or host configuration changed.

Section 7 reviewer checklist complete in research/discovery/REPORT.md: confirms full cross-product, source/privacy limits, real-host evidence, unverified areas and unchanged decisions. No product code or host configuration changed.
kayg commented 2026-10-07 09:18:14 +00:00
Author
Owner
Copy link

Finding (verification gate): attempted scripts/verify fast on branch research-discovery at a85ca2e265; this main-based worktree has no scripts/verify (exit 127: zsh:1: no such file or directory: scripts/verify). The dev ref has a different verifier tree, so I did not copy or run it against this branch. JSON parsing and the 1,020-cell structural audit passed; no product code changed.

Finding (verification gate): attempted scripts/verify fast on branch research-discovery at a85ca2e265ce83572ae86b6ce322256af6ee3a10; this main-based worktree has no scripts/verify (exit 127: zsh:1: no such file or directory: scripts/verify). The dev ref has a different verifier tree, so I did not copy or run it against this branch. JSON parsing and the 1,020-cell structural audit passed; no product code changed.
kayg commented 2026-10-07 09:20:35 +00:00
Author
Owner
Copy link

Finished: committed research/discovery/REPORT.md and matrix.json at 2a986fc276. Matrix audit: 30 OS families × 34 facts = 1,020 cells, all recipes and required fields present; 0 target fact rows because access failed before remote execution. scripts/verify fast output verbatim: zsh:1: no such file or directory: scripts/verify (exit 127; verifier absent on this main-based branch). Worktree is clean.

Finished: committed research/discovery/REPORT.md and matrix.json at 2a986fc2767cf7720527aa92c7d0cca6a1de70b8. Matrix audit: 30 OS families × 34 facts = 1,020 cells, all recipes and required fields present; 0 target fact rows because access failed before remote execution. scripts/verify fast output verbatim: zsh:1: no such file or directory: scripts/verify (exit 127; verifier absent on this main-based branch). Worktree is clean.
kayg commented 2026-10-07 09:23:18 +00:00
Author
Owner
Copy link

Real-host evidence (orchestrator, read-only, NetBird SSH), completing report §4, which could not reach the hosts:

Host Result Wall time (incl. NetBird SSH setup) Facts
o1 (10.69.69.51) Ubuntu 24.04.5, aarch64, kernel 7.0.0-1013-oracle, 4 CPU, 24 GB, QEMU KVM, systemd, docker.sock, docker+podman+kubectl, apt, netbird+tailscale, no passwordless sudo 1.82 s all
o2 (10.69.69.52) Ubuntu 24.04.5, aarch64, 6.17.0-1018-oracle, same shape 1.29 s all
monitor01 (10.69.69.50) Debian 13, x86_64, 4 CPU, 8 GB, QEMU/KVM, systemd, docker and containerd sockets, docker+podman, apt, netbird+tailscale, no passwordless sudo ok all
calternal-macos (10.69.69.21) macOS 27.0 (26A428), arm64, VirtualMac2,1, 4 CPU, 8 GB, launchd, netbird, no package manager found ok all
minipc01 (10.69.69.217) name resolves; TCP 22 times out: the live #58 "blocked by mesh policy" case fail 0

Findings for the collector and discovery design:

  1. Mesh names do not resolve on this server host (lookup o1.vpn.kayg.org on 127.0.0.53: no such host, while netbird status -d lists o1/o2 with IPs). Discovery must use the mesh-reported IPs (and keep the names as labels), not system DNS.
  2. netbird status -d on the server host lists 13+ peers (hass, m5p, npve-compute01, stash, calternal-macos, admin-rook, shipmelol, compute01, calternal-dev, monitor01, o1, o2, …), so quiet discovery (D144) finds them with no token.
  3. The POSIX probe covered Debian, Ubuntu (aarch64 Oracle kernels) and macOS without changes; the macOS fallbacks (sw_vers, sysctl) worked.
  4. Passwordless sudo is "no" on all four reachable hosts. Root agents therefore need the H13 consent plus a sudo password, or a user agent. Good real-world input for the add-host design.
  5. One SSH round trip including the NetBird SSH handshake is about 1.3–1.8 s from Germany, which supports the one-shot single-round-trip probe design (D145).
**Real-host evidence (orchestrator, read-only, NetBird SSH)**, completing report §4, which could not reach the hosts: | Host | Result | Wall time (incl. NetBird SSH setup) | Facts | |---|---|---|---| | o1 (10.69.69.51) | Ubuntu 24.04.5, aarch64, kernel 7.0.0-1013-oracle, 4 CPU, 24 GB, QEMU KVM, systemd, docker.sock, docker+podman+kubectl, apt, netbird+tailscale, no passwordless sudo | 1.82 s | all | | o2 (10.69.69.52) | Ubuntu 24.04.5, aarch64, 6.17.0-1018-oracle, same shape | 1.29 s | all | | monitor01 (10.69.69.50) | Debian 13, x86_64, 4 CPU, 8 GB, QEMU/KVM, systemd, docker and containerd sockets, docker+podman, apt, netbird+tailscale, no passwordless sudo | ok | all | | calternal-macos (10.69.69.21) | macOS 27.0 (26A428), arm64, VirtualMac2,1, 4 CPU, 8 GB, launchd, netbird, no package manager found | ok | all | | minipc01 (10.69.69.217) | name resolves; **TCP 22 times out**: the live #58 "blocked by mesh policy" case | fail | 0 | **Findings for the collector and discovery design:** 1. **Mesh names do not resolve on this server host** (`lookup o1.vpn.kayg.org on 127.0.0.53: no such host`, while `netbird status -d` lists o1/o2 with IPs). Discovery must use the **mesh-reported IPs** (and keep the names as labels), not system DNS. 2. `netbird status -d` on the server host lists **13+ peers** (hass, m5p, npve-compute01, stash, calternal-macos, admin-rook, shipmelol, compute01, calternal-dev, monitor01, o1, o2, …), so quiet discovery (D144) finds them with no token. 3. The POSIX probe covered Debian, Ubuntu (aarch64 Oracle kernels) and macOS without changes; the macOS fallbacks (`sw_vers`, `sysctl`) worked. 4. **Passwordless sudo is "no" on all four** reachable hosts. Root agents therefore need the H13 consent plus a sudo password, or a user agent. Good real-world input for the add-host design. 5. One SSH round trip including the NetBird SSH handshake is about 1.3–1.8 s from Germany, which supports the one-shot single-round-trip probe design (D145).
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
Labels
Clear labels   
launch-qa
Findings from launch QA.

No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#64
No description provided.