clawdie/clawdie-iso
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(firstboot): make the skip message honest about unsecured state

Browse source 
The '.secured' marker is written but not yet consumed by colibri, so the gate
must not imply colibri/zot are blocked. Reword the skip message to state the
node is UNSECURED and the agent SHOULD NOT register/run while unsecured — true
as a policy statement, without claiming enforcement we haven't built. Upgrade to
'will not' once the colibri .secured interlock lands.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Sam & Claude 2026-06-25 06:08:14 +02:00
parent f428bc7fcb
commit e135c305a4
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
live/operator-session/clawdie-firstboot-rootpw
View file

@ -140,7 +140,9 @@ clawdie_firstboot_rootpw_start() {
printf ' Node secured.\n'
_rootpw_continue_countdown 3
else
printf '\n\n [skipped] passwords NOT set — this node remains OPEN.\n'
printf '\n\n [skipped] root/operator passwords NOT set — node is UNSECURED.\n'
printf ' Treat this node as untrusted until a password is set. The colibri\n'
printf ' agent should not register with mother or run tasks while unsecured.\n'
printf ' You will be prompted again on the next boot.\n'
_rootpw_continue_countdown 3
fi