Repository navigation
Route pinned operations through SSH and registered host environments #400
Description
Parent
What to build
Windows/WSL/remote registration, SSH-principal mapping, fleet freshness and caller-independent single execution authority; disconnected mutation effects stay explicit.
Acceptance criteria
- Windows/WSL/remote registration, SSH-principal mapping, fleet freshness and caller-independent single execution authority; disconnected mutation effects stay explicit.
- Demonstrate the stated end-to-end behavior through public operations and every capable CLI/API/MCP surface.
- Cover authorized success, stale/unsupported/unauthorized targets and relevant crash/reconnect or uncertain-effect cases.
- Record source/package evidence and preserve existing work, authority and cumulative accounting; production effects need separate authorization.
Existing upgrade reconciliation
New controller capability; reuse the existing owners and the specification’s recorded decisions. No existing completed acceptance is invalidated.
Delivery boundary
Use public-seam TDD and exact red/green receipts. Source, integration, installed disposable acceptance and production activation are distinct. No provider experiment, credential copying, shared restart, governor activation or resource renewal is implied.
Activity
test: retain host routing admission and installed fixture evidence
feat: pin host environments and SSH read routing authority
test: retain host routing admission and installed fixture evidence
test: qualify installed host routing across CLI API and MCP
ecochran76 commentedon Oct 30, 2026
Integrated0d895443+92f05ff and full public acceptance18f83fac. Primary rebuilt/reinstalled combined integration538694c and reran installed host acceptance successfully: actual CLI, stdio MCP, OAuth API/MCP/remote CLI list/resolve/routing, exact authority generations, scope attenuation, revocation, offline refusal and uncertain/no-replay receipts. SSH-shaped executable is explicitly synthetic; real separate-host Windows/WSL/SSH matrix remains405.34 integrated controller tests pass. Evidence docs/dev/evidence/plan0190/hosts400-public.md. No production effects or provider credentials. Closing source plus isolated installed contract; no real-fleet deployment claim.
Unify scoped controller operations and durable agent flows (#419) [sk…