Recover stopped HA leases and empty allocator sources #29
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/28-restore-management"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Pending backup restore previously attempted normal native lease capture before management interfaces were restored, so an old HA address could prevent the agent from starting. The recovery path now inspects stopped lease stores under the existing durable restore fence, preserving ordinary live-capture HA safety checks.
A separate RZ prerequisite failure involved a verified exactly empty stopped legacy allocator source with no factory marker. A truthful empty-source retirement proof now permits native startup without forged factory/upgrade provenance. Tests cover before/after behavior, running-service rejection, missing/nonempty files, and consumed/corrupt native receipts. The unchanged original RZ empty file and completed protected handoff were verified on-device.
This PR targets the issue25 branch so its tested combined tree can subsequently land in main through PR #27. Partially addresses #28; keep #28 open for documented deferred startup/restore availability failures.
Validation
Final combined source:
b5975f128a305fea919386e4b3150977058a50842f3a1916e511fc5096f98530, based on main05f7e29(including PR #30). Fullmake checkpassed: Go race tests, vet, 325 UI tests, and Svelte zero errors/warnings. Combinedmake check-buildpassed. Independent static review of implementation, regression tests, integration, scripts and existing evidence found no substantive findings.Scope7, Minis-Forum and RZ-VM run the exact final source binary, SHA256
ea904ab327cb16077d888faefa33b23aee1df71e4bf9279695a04be27f254d77. API readiness, full configuration equality and no pending transaction passed on each. Authorized SQLite purge/backup restore completed on all three. Scope7 cold reboot restored management automatically; RZ restored and rebooted successfully. Minis-Forum required an agent restart after link readiness; that remaining startup problem is documented in #28. Final binary updates preserved configuration without another purge or native-service stop.Staticcheck 2026.2.1 was executed separately: exit 1, 108 existing diagnostics versus 112 on clean main, zero new diagnostics. The Makefile's optional lint probe skipped staticcheck because the task-private tool was outside PATH; the explicit run and baseline comparison supply its actual result. The user explicitly accepted this inherited-check exception and authorized merge. Follow-up tracking: #31. Broader availability findings remain deferred in #28, which must stay open.
[WIP] Inspect stopped HA leases during restore startupto [WIP] Recover stopped HA leases and empty allocator sources[WIP] Recover stopped HA leases and empty allocator sourcesto Recover stopped HA leases and empty allocator sources