A snapshot: read at commit 707a04c7ce8 on 2026-10-18T00:06:01Z by majordomus 0.29.0. Nothing on this page is read again. See it live
safe-self-update
Every mesh node follows the published release by itself, versions meet safely, and a release's provenance can be checked
7issuesdevtask.milestone
2readydevtask.milestone
3blockeddevtask.milestone
0activedevtask.milestone
2completedevtask.milestone
The milestone
devtask.milestone- Title
- Every mesh node follows the published release by itself, versions meet safely, and a release's provenance can be checked
- Outcome
- An enrolled mesh node follows the stable release by itself through the one installer, forward only, activating in order and rolling back a failed activation (ADR 0161); a newer client replaces an older server in an ordered hand-off and an older client is told it is older; a change to any wire or on-disk schema needs a version bump; a released archive carries a provenance attestation the installer checks.
- Status
- ACTIVE
- Rank
0- Depends on
- none
- Waiting on
- none
- Holds back
- none
- Record
.ai/repo/project/milestones/safe-self-update.yaml- Its issues
- Every issue of this milestone
Where the work is
- Ready
- Blocked
- Waiting
- —
- Active
- —
- In review
- —
- Completion blocked
- —
- Complete
- Cancelled
- —
What holds the most back
What may run at the same time
Every issue
| Readiness | Status | Issue | Title | Wave | Priority | Waiting on | Holds back |
|---|---|---|---|---|---|---|---|
| complete | DONE | I2163 | A client never attaches to a server of another version without saying so, and a newer client replaces an older server | 1 | p1 | — | 0 |
| complete | DONE | I2165 | A released archive carries a provenance attestation the installer can check | 0 | p1 | — | 1 |
| ready | READY | I2720 | majordomus self update re-runs the published installer, and never reimplements it | 0 | p0 | — | 3 |
| blocked | BLOCKED | I2721 | An enrolled mesh node follows the stable pointer by itself | 1 | p0 | 0 | |
| blocked | BLOCKED | I2722 | A hub activates a new version under its service manager, checks its health and rolls back by itself | 1 | p0 | 0 | |
| ready | READY | I2723 | The mesh shows each node's version and how far a release has rolled out | 0 | p1 | — | 0 |
| blocked | BLOCKED | I2724 | A node without a route to the site takes the archive from a peer and still verifies it itself | 1 | p1 | 0 |
Findings
| Level | Code | Message | Reproduce |
|---|---|---|---|
| WARN | scope_conflict | I2720: shares test/cases with I2723; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2731; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2734; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares apps/majordomus-cli/src/capability/builtin with I2740; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2742; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2747; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2760; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2720: shares test/cases with I2786; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2731; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2734; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2740; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2742; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares apps/majordomus-cli/src/ui with I2747; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2760; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares apps/majordomus-cli/src/ui with I2770; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2723: shares test/cases with I2786; they may not run concurrently | majordomus plan validate |