Backtalk6858
1d37e453ec
Agent-Sudo went live on both hosts tonight (005c214 in the boilerplates repo). This records what "done" actually means and what is left, since dedicated time on this ends today and the rest has to run via background agents. Corrects the goal: tier 4 is human-only BY DESIGN (D-CB7) — the daemon unit env holds SUDO_MD_VERIFY_ENFORCE, so a system that can restart its own daemon can disarm its own gate. "Handling tier 4" means refusing it, which is done and verified. Real remaining scope is tiers 1-3. Records the measured Incus asymmetry (server-01 has it, primary does not), which makes tier 2 on primary an open design question rather than a task; the tier-1 scoped-undo defect (app.py:244 hardcodes tier 3 while REQUIRES_UNDO_TIERS is (1,3)); and the per-host-values-in-a-shared-tracked-file bug class that bit twice in one directory. secrets-proxy is deliberately scoped as investigate-then-plan: it exited gracefully and nobody knows why, so S1 answers that before anyone writes S2. Refs #128, #146, #149, #150, #173, #191, projects id=187. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>