Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases Activity

raf: sync docs to code + relative cross-reference links

Browse source 
Handler/migration counts, calculateBackoff -> calculateDelay, machine-id
binding (cross-platform machineid + fallbacks, not hostname), last-reviewed
dates, and made [[cross-references]] relative so they resolve.
This commit is contained in:
Fimeg 2026-06-15 09:39:34 -04:00
commit d9ba008f67
13 changed files with 108 additions and 109 deletions
Download patch file Download diff file Expand all files Collapse all files

16
RAF/components/02-agent.md
View file

@ -6,7 +6,7 @@
## Doctrine
The agent does not track lifecycle states, make policy decisions, or hold install privileges on gated ecosystems. The server owns every state transition. The agent's only autonomous decisions are: verify this signature, check this nonce, reject this replay. See [core/02-architecture-decisions](core/02-architecture-decisions.md).
The agent does not track lifecycle states, make policy decisions, or hold install privileges on gated ecosystems. The server owns every state transition. The agent's only autonomous decisions are: verify this signature, check this nonce, reject this replay. See [core/02-architecture-decisions](../core/02-architecture-decisions.md).
---
@ -73,9 +73,9 @@ agent/
Discovery (scan, dry-run, hash-resolve) always runs unprivileged through `DiscoveryRunner`. Sudoers grants only discovery commands plus the single helper invocation line — zero sudo otherwise.
**Cross-references:**
- [security/05-supply-chain-gate](security/05-supply-chain-gate.md) (token contract)
- [flows/02-command-execution](flows/02-command-execution.md) (command path)
- [flows/07-process-scan](flows/07-process-scan.md) (process explorer flow)
- [security/05-supply-chain-gate](../security/05-supply-chain-gate.md) (token contract)
- [flows/02-command-execution](../flows/02-command-execution.md) (command path)
- [flows/07-process-scan](../flows/07-process-scan.md) (process explorer flow)
---
@ -87,18 +87,18 @@ Discovery (scan, dry-run, hash-resolve) always runs unprivileged through `Discov
- Signing-required is doctrine, not config. There is no skip path.
**Cross-references:**
- [verification/02-agent-verification](verification/02-agent-verification.md) (full pipeline)
- [verification/04-replay-protection](verification/04-replay-protection.md)
- [verification/02-agent-verification](../verification/02-agent-verification.md) (full pipeline)
- [verification/04-replay-protection](../verification/04-replay-protection.md)
---
## Resilience Machinery
- **Instance lock** — `Global\RedFlagAgent_v1` mutex / flock; prevents two agents racing one `config.json` and burning refresh-token rotations ([security/03-refresh-tokens](security/03-refresh-tokens.md))
- **Instance lock** — `Global\RedFlagAgent_v1` mutex / flock; prevents two agents racing one `config.json` and burning refresh-token rotations ([security/03-refresh-tokens](../security/03-refresh-tokens.md))
- **Circuit breakers** — fragile scanners (notably WUA) trip open instead of hammering; health reported to server
- **TeeLogger** — every loop event goes to both structured local log and server-bound buffer; tracker save failures tee inward (ETHOS #1)
- **At-least-once acks** — `acknowledgment/tracker.go` persists until the server confirms result-recorded
---
*Last reviewed: 2026-06-11*
*Last reviewed: 2026-06-14*