Go to file

Claude bf0c67539e tower 0.61.10 — Phase I review hardening

Pre-test review of 0.61.9 surfaced two issues in the manifest reader:

1. v3 stores instanceCode under provenance.* but readManifestString
   only looked at recipe → root. Today the v2 root mirror covers it,
   but a future v4 dropping that mirror would silently lose the
   filestore-rename hint.

2. Adding a blanket provenance lookup re-opened the leak: a poison
   bundle could embed provenance.tenantId and have it reachable to
   any future caller.

Fix: provenance lookup is now allowlisted to {instanceCode}. Any
new provenance field requires an explicit constant addition,
which is a code-review gate against re-introducing the leak.

Round-trip simulation (tools/phase_i_simulate.go) passes for v3,
v3-pure (no v2 mirrors), v3-poison, and v2.

2026-04-30 13:24:56 +03:00

templates

tower 0.61.8 — Phase H substrate completeness

2026-04-30 12:50:25 +03:00

backend-deployment.yaml

tower 0.9.0 + tower-ui 0.8.0 — capacity bars on Server Detail

2026-04-26 20:47:11 +03:00

Chart.yaml

Initial Tower chart

2026-04-26 18:01:44 +03:00

ingressroute.yaml

tower 0.9.0 + tower-ui 0.8.0 — capacity bars on Server Detail