C3 Auto-remediation
- Area
- C — Trust & correctness
- Audience
- operator
- Kind
- feature
- Status
- accepted
- Maturity
- built
- Labels
- verification
The feature in the specification · Read at
Requirements
Remediations MUST be proposed with their effects stated and MUST require confirmation before applying.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@b00845f85dlemonfiber@16700cb37clemonfiber@02d0de7a41
Re-pushing a changed VPN forwarded port MAY be applied automatically, and MUST be reported afterwards.
Findings MUST be classified as automatically fixable, guided, or external, and the classification MUST be visible.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37c
A fix MUST re-run its originating check, and MUST only report fixed if that check then passes.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41
A completed action whose check still fails MUST report fix-failed.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41
Configuration-modifying fixes MUST record enough information to be reversed.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@314718f702
A fix that would overwrite an operator's manual change MUST be refused and deferred to drift handling.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@b03a922d2blemonfiber@314718f702lemonfiber@527ee9096f
Batch remediation MUST allow individual findings to be declined.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37c
A declined fix MUST NOT be re-offered until the condition clears and recurs.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41lemonfiber@b3f6e9a8d6
Findings sharing a root cause MUST be remediated once, with dependents re-verified.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41
Non-interactive remediation MUST require an explicit flag; the default MUST be report-only.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@b00845f85dlemonfiber@16700cb37clemonfiber@02d0de7a41
Every remediation MUST be logged with finding, action, timestamp and verification outcome.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37c
A fix that fails partway MUST report the resulting state precisely.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41
A repeatedly failing fix MUST stop being offered and MUST escalate to a support bundle.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@16700cb37clemonfiber@02d0de7a41
An operator MUST be able to retract the most recent remediation, reversing that remediation alone and leaving other recorded changes untouched.
- locked by
- 0.7.0 met
- recorded done
- lemonfibercrates/lemonfiber-core/src/repair.rs
- cited by
- lemonfiber@b03a922d2blemonfiber@c0de64d312
A series reported under C1-R18 MUST be offered a repair that asks the filler of media.serve, through its contract's refresh operation, to refresh that series and nothing else. The repair MUST be confirmed like any other and MUST be offered as one that cannot be reversed. A rehearsal MUST state it and MUST NOT ask for the refresh. Before the check runs again, the repair MUST wait for the series to answer seasons, for no longer than a stated bound.