WIP: Windows Agent baseline, miner control, and task-preserving upgrades #2

2026-10-14T10:54:40-05:00

lussierj commented

2026-10-14 10:54:40 -05:00

Source: codex/review-02-windows-control
Target: codex/review-01-system-health

Summary

Adds the canonical Windows Agent source baseline, typed miner-control and authenticated command-transport infrastructure, migration 0015_miner_control_foundation, and installer behavior that preserves existing Scheduled Tasks and runtime data during upgrades.

Exact included commits

6cd876b — chore: add Windows agent source baseline
f5965af — feat: add safe miner control foundation
d8cd7ad — fix: preserve Windows agent tasks during upgrades

Dependencies

Depends on PR 1. This comparison includes only the three commits above. PR 3 targets this source branch.

Available validation evidence

The commits include miner-control and command-transport tests, PostgreSQL concurrency/audit coverage, a migration lifecycle runner, Windows control tests, installer tests, and source-contract checks.

The Git comparison and commit scope were verified. No isolated passing test result for this endpoint is claimed.

Outstanding testing and security concerns

Run focused control, command-transport, installer, and migration tests against this endpoint.
Review physical-control permissions, safety interlocks, credential redaction, command claiming, result binding, and audit atomicity.
Migration 0015 can reject unsupported queue statuses or duplicate live miner-control commands. Validate production-shaped preflight failures and remediation without losing history.
Legacy control producers and scheduled command materialization remain in the full committed stack. Their permissions and routing require explicit review.
Verify task preservation, rollback, and stopped/running intent on native Windows.
Seven historical Windows baseline files produce “new blank line at EOF” warnings. They remain unchanged to preserve the original commits.
Baseline checksums describe historical source provenance; distinguish them from checksums of later modified runtime files.

Deployment status

This PR is not approved for production deployment. Real miner-control execution requires separate approval and validation.

Source: `codex/review-02-windows-control` Target: `codex/review-01-system-health` ### Summary Adds the canonical Windows Agent source baseline, typed miner-control and authenticated command-transport infrastructure, migration `0015_miner_control_foundation`, and installer behavior that preserves existing Scheduled Tasks and runtime data during upgrades. ### Exact included commits - `6cd876b` — chore: add Windows agent source baseline - `f5965af` — feat: add safe miner control foundation - `d8cd7ad` — fix: preserve Windows agent tasks during upgrades ### Dependencies Depends on PR 1. This comparison includes only the three commits above. PR 3 targets this source branch. ### Available validation evidence The commits include miner-control and command-transport tests, PostgreSQL concurrency/audit coverage, a migration lifecycle runner, Windows control tests, installer tests, and source-contract checks. The Git comparison and commit scope were verified. No isolated passing test result for this endpoint is claimed. ### Outstanding testing and security concerns - Run focused control, command-transport, installer, and migration tests against this endpoint. - Review physical-control permissions, safety interlocks, credential redaction, command claiming, result binding, and audit atomicity. - Migration `0015` can reject unsupported queue statuses or duplicate live miner-control commands. Validate production-shaped preflight failures and remediation without losing history. - Legacy control producers and scheduled command materialization remain in the full committed stack. Their permissions and routing require explicit review. - Verify task preservation, rollback, and stopped/running intent on native Windows. - Seven historical Windows baseline files produce “new blank line at EOF” warnings. They remain unchanged to preserve the original commits. - Baseline checksums describe historical source provenance; distinguish them from checksums of later modified runtime files. ### Deployment status This PR is not approved for production deployment. Real miner-control execution requires separate approval and validation.

lussierj added 3 commits 2026-10-14 10:54:40 -05:00

chore: add Windows agent source baseline 6cd876b4b3

feat: add safe miner control foundation f5965af914

fix: preserve Windows agent tasks during upgrades d8cd7ad058

lussierj referenced this pull request

2026-10-14 10:54:41 -05:00

WIP: Agent zones and secure per-Agent enrollment #3

lussierj referenced this pull request

2026-10-14 10:54:43 -05:00

WIP: Agent management and self-enrolling Windows packages #4

lussierj referenced this pull request

2026-10-14 10:54:44 -05:00