Add authenticated admission for safe native-host updates #181

Merged

karsten merged 1 commit from feat/host-update-admission into main

2026-10-31 13:14:28 +00:00

karsten commented

2026-10-31 13:01:45 +00:00

Owner

Adds an exclusive expiring update-admission lease and foreground-work fencing for native-host release activation. Existing ordered shutdown remains authoritative.

Validation: 38 focused admission/API/dispatcher tests passed in independent review and repeated locally. Linux author checks: 111 focused tests, typecheck and build passed. Full suite has three observer-stream cancellations also reported on the unchanged base; no gate waiver.

Scoped independent review approved this exact head. Cross-family independence is not established. Native host updater activation and live WSL acceptance remain separate.

Adds an exclusive expiring update-admission lease and foreground-work fencing for native-host release activation. Existing ordered shutdown remains authoritative. Validation: 38 focused admission/API/dispatcher tests passed in independent review and repeated locally. Linux author checks: 111 focused tests, typecheck and build passed. Full suite has three observer-stream cancellations also reported on the unchanged base; no gate waiver. Scoped independent review approved this exact head. Cross-family independence is not established. Native host updater activation and live WSL acceptance remain separate.

karsten added 1 commit

2026-10-31 13:01:45 +00:00