docs(adr): Managed Fleet — canonical server, attaching clients, self-serve repair (ADR 0005) - #282
Merged
Merged
Conversation
…serve repair (ADR 0005) The 2026-08-07 triple fleet failure (silent 3-week fork, fork reborn in a tunnel reconnect gap, panel stranded with no self-recovery) designed into a product feature: three machine-scoped server modes, canonical server as a product-managed system service, extension-owned managed tunnel, identity handshake + fleet token, and local fallback with rejoin merge as the repair hatch. Glossary: CONTEXT.md gains Fleet & serving.
This was referenced Aug 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Records the Managed Fleet design: three machine-scoped server modes (
standalone/server/client), the canonical server as a product-managed system service, the extension-owned Managed Tunnel (one component, two launchers), identity handshake + fleet token, and Local fallback with Rejoin merge as the user-facing repair hatch.Born from the 2026-08-07 triple fleet failure (silent three-week fork → fork reborn in a tunnel reconnect gap → panel stranded without self-recovery). CONTEXT.md gains the Fleet & serving glossary; the design rationale and flip conditions live in ADR 0005.
Docs-only; no code. The tracking issue for implementation follows.