- build-iso test: Check for fine-grained capabilities instead of
--privileged flag (removed in previous commit)
- JOURNAL.md: Session 8 entry with ADR-014/015/016 and lessons
- STATUS.md: Current as of this commit
786 tests, 0 failures, 0 shellcheck warnings.
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
Test Fixes:
- Fixed grep regex matching `test:iso)` instead of `iso|iso:demo)` by
using `grep -F` for literal string matching in 3 test files
- Increased grep context from -A 5 to -A 15 for FDE reference tests
since FDE mention is 9+ lines into the iso command block
Stale Files:
- Deleted test-iso.sh (merged into run.sh in Session 4)
- Deleted verify.sh (orphaned, never referenced anywhere)
Documentation:
- Fixed stale test file references in COMPLIANCE.md
- Updated TEST-COVERAGE.md to remove "delegates to test-iso.sh"
- Added JOURNAL.md entry with full audit findings
- Updated STATUS.md timestamp
NVMe Build Cache (from previous session, was uncommitted):
- Added Docker volume `knel-football-cache` for build caching
- Added `clean:cache` and `cache` commands to run.sh
- Cache preserves bootstrap + package downloads between builds
Test Results: 786 pass, 0 fail, 16 VM skip
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
- Add JOURNAL entry for critical hook bug fixes
- Update STATUS.md to reflect ISO rebuild in progress
- Fix test count (110 not 111)
- Update metrics with correct commit count
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
- Add ADR-009 for script consolidation (run.sh as single entry point)
- Update STATUS.md to reflect complete state (ISO built, VM framework merged)
- Document lessons learned from libvirt group requirement
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
- Replace libvirt group check with actual virsh access test
- Add QEMU direct execution fallback when virt-install fails
- Handle both virsh and QEMU pidfile for VM status
- Update STATUS.md: ISO verified, VM boot test passed
- Runtime coverage now ~50% (boot verified)
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
- STATUS.md: ISO rebuild in progress, updated next actions
- JOURNAL.md: Added session 2 entry for FIM/audit/SSH work, ADRs 005-007
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
Add JOURNAL.md to version control. This file serves as
the AI agent's long-term memory and learning repository.
Purpose:
- Capture insights and patterns discovered
- Document lessons learned from sessions
- Record architectural decision records (ADRs)
- Enable knowledge persistence across sessions
Format:
- Append-only (never delete or modify existing entries)
- Dated entries with clear sections
- Cross-references to related files
This file is maintained by AI agents working on the project
and provides context for future sessions.
💘 Generated with Crush
Assisted-by: GLM-5 via Crush <crush@charm.land>
Document 2026-01-28 session including FR-001 (Full Disk Encryption) and FR-007 (Password Complexity) addition, configuration changes, hooks created, security hardening enhancements, ISO build process, and verification results.
💘 Generated with Crush
Assisted-by: GLM-4.7 via Crush <crush@charm.land>
