7 Commits

Author	SHA1	Message	Date
PTah	c50bd6e9d8	fix: never chmod 700 system dirs like /var/log (2.3.3-SAC) ... Hardening state files under /var/log was applying chmod 700 to the parent directory, which broke syslog/logrotate and other services after agent update.	2026-07-25 13:20:05 +10:00
PTah	b0abf99d1b	feat: suppress sac-fail.count on shutdown (2.3.2-SAC) ... Phase 4.2: SAC_SUPPRESS_FAIL_COUNT during lifecycle shutdown so restart during SAC deploy does not trip Telegram fallback. Add docs/sac-ingest.ru.md for SAC_TIMEOUT_SEC guidance, smoke test, and release manifest.	2026-07-08 14:12:25 +10:00
PTah	18a65078fc	feat: safe config parser without source (2.3.0-SAC) ... Whitelist-based /etc/ssh-monitor.conf load; validate URLs/enums/CIDR; remove BACKUP_WEBHOOK_URL.	2026-07-08 12:57:36 +10:00
PTah	6511d34ca7	fix: suppress sudo Telegram during SAC agent update (2.2.3-SAC) ... Whitelist SAC maintenance commands in ssh-monitor-perms and monitor_sudo; pre-commit uses working python on Windows.	2026-07-08 12:25:06 +10:00
PTah	440577ac5a	chore: install-git-hooks.ps1 for Windows	2026-07-08 12:14:11 +10:00
PTah	5ac4792c3c	chore: auto manifest on version bump; local manual script only ... contrib/manifest/generate.py + pre-commit hook; install-git-hooks.sh creates .local/build-release-manifest.sh (gitignored). Remove scripts/ from remote.	2026-07-08 12:05:21 +10:00
PTah	e93fde7f52	feat: reliability, ops hooks, security checks, daily report	2026-04-12 19:30:32 +10:00