nexxo 8eb9d7ad30 fix(vpn): serialize hub reads against hub mutations ... A sync could read the hub snapshot just before ApplyVpnPeer removed a peer and purged its tombstone, then adopt what it had seen as a fresh enabled access — restoring a revoked one. Both jobs now hold Cache::lock('wireguard:hub') around read-decide-mutate, so a reconciliation can never straddle a removal. Retry removals are dispatched after the lock is released, because the sync queue driver runs them inline and they take the same lock. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 21:53:13 +02:00
..
Contracts	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00
Events	feat(engine-b): live provisioning progress (admin console + customer dashboard)	2026-07-25 11:57:35 +02:00
Jobs	fix(vpn): serialize hub reads against hub mutations	2026-07-25 21:53:13 +02:00
Steps	fix(monitoring): cap monitoring retries at the run budget; dependency-free liveness probe	2026-07-25 20:19:32 +02:00
PipelineRegistry.php	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
RunRunner.php	fix(engine): don't reset started_at on poll so step deadlines accumulate	2026-07-25 12:15:26 +02:00
StepResult.php	fix(engine): address Codex round 2 (poll budget, host error state, wg race)	2026-07-25 10:26:37 +02:00