nexxo 4f9ca27732 fix(vpn): a replaced key must not stall the reconciliation ... Codex found that a sync landing between the key swap and its removal would see the old key as unknown. Writing the test showed something worse than the duplicate he predicted: the adoption cannot even happen — the address still belongs to the live access — so the insert violated the unique index and took the ENTIRE reconciliation down with it. One stale key would have stopped every peer's state from updating. The sync now recognises that case and queues the removal instead of adopting, and a key with no row of its own is revoked with force: it can only ever be removed, never kept, so the removal cannot be talked out of it by a row that should not exist. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-26 01:23:15 +02:00
..
Contracts	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00
Events	feat(engine-b): live provisioning progress (admin console + customer dashboard)	2026-07-25 11:57:35 +02:00
Jobs	fix(vpn): a replaced key must not stall the reconciliation	2026-07-26 01:23:15 +02:00
Steps	fix(hosts): retry a failed DNS registration before advancing without a name	2026-07-26 00:01:16 +02:00
PipelineRegistry.php	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
RunRunner.php	fix(engine): don't reset started_at on poll so step deadlines accumulate	2026-07-25 12:15:26 +02:00
StepResult.php	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00