didericis-claude 784e49239d docs(orchestrator): tighten auth-provisioning wording to concrete services ...

Address review on #482: drop the generic "credential boundary" framing in the
PRD and docstrings and talk about the specific services — the orchestrator holds
the control-plane key; the host controller (#468) gets a separate key the
orchestrator never holds, so the orchestrator can't mint the credentials it uses
to talk to the host controller that owns its lifecycle. Lead with that concrete
win. No code behaviour change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-26 01:14:06 +00:00

..

backend

refactor(orchestrator): uniform control-plane auth provisioning per trust domain

2026-07-26 01:06:51 +00:00

cli

Merge main into fix/db-off-data-plane-469

2026-07-24 19:35:49 -04:00

contrib

fix(claude): don't log the raw identity token in supervise MCP recovery hint

2026-07-25 22:27:18 +00:00

egress

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

gateway

fix(egress): run supervise propose/poll RPCs off the mitmproxy event loop

2026-07-25 23:30:12 +00:00

git_gate

refactor(backend): verb-first names for the provisioning modules

2026-07-25 14:13:54 -04:00

manifest

fix(types): satisfy pyright strict on the refactored facades

2026-07-24 19:11:37 -04:00

orchestrator

refactor(orchestrator): uniform control-plane auth provisioning per trust domain

2026-07-26 01:06:51 +00:00

store

refactor(supervise): fold Supervise into the facade as Supervisor; drop dead flat-fallbacks

2026-07-24 14:24:06 -04:00

supervisor

refactor(orchestrator): rename in-guest core Orchestrator -> OrchestratorCore

2026-07-25 14:29:32 -04:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

fix(firecracker): restore agent home ownership at boot

2026-07-21 14:52:44 -04:00

bottle_state.py

feat(firecracker): port freeze/migrate off host Docker (PRD 0069 / #397)

2026-07-17 00:31:00 -04:00

constants.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

deploy_key_provisioner.py

refactor(manifest): consolidate the manifest modules into a bot_bottle.manifest package

2026-07-24 13:04:39 -04:00

env.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

errors.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

image_cache.py

refactor(supervise): fold Supervise into the facade as Supervisor; drop dead flat-fallbacks

2026-07-24 14:24:06 -04:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

orchestrator_auth.py

docs(orchestrator): tighten auth-provisioning wording to concrete services

2026-07-26 01:14:06 +00:00

paths.py

docs(orchestrator): tighten auth-provisioning wording to concrete services

2026-07-26 01:14:06 +00:00

trust_domain.py

docs(orchestrator): tighten auth-provisioning wording to concrete services

2026-07-26 01:14:06 +00:00

util.py

refactor(util): make render_diff generic (caller supplies side titles); move to root util

2026-07-24 15:09:27 -04:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00