From 9653a34241e9132d3347c8b6abf322ae84b2d127 Mon Sep 17 00:00:00 2001 From: sjat Date: Fri, 5 Jun 2026 09:47:24 +0200 Subject: [PATCH] STATUS: record ubongo control host as designed, not built --- STATUS.md | 1 + 1 file changed, 1 insertion(+) diff --git a/STATUS.md b/STATUS.md index 6dad1a3..200cf29 100644 --- a/STATUS.md +++ b/STATUS.md @@ -52,6 +52,7 @@ So `make deploy PLAYBOOK=site` currently **fails** on a clean clone — the `bas | `/security-review` skill | ADR-002 / TODO 8.5 | Periodic posture re-check + accepted-risk re-challenge; planned, not built | | CIS hardening (Debian L1+L2 + Docker) | ADR-002 / TODO 15 | Implemented by the (unbuilt) `base`/`docker_host` roles; brings AppArmor + AIDE as baseline. L2 partitions affect VM provisioning (ADR-006) | | Network IDS + security alerting | ADR-002 / TODO 15 | Suricata on OPNsense + AIDE/`auditd`/`fail2ban` alerting into the monitoring stack; not built | +| `ubongo` — physical control / AI-worker host | ADR-015 | Replaces the cluster control VM with a dedicated always-on x86 box outside the cluster. Decision recorded; box not yet acquired/installed, not in inventory. | ## Keeping this honest