← The board

C3 Auto-remediation

Area
C — Trust & correctness
Audience
operator
Kind
feature
Status
accepted
Maturity
built
Labels
verification
Requires
C4G4
Relates to
C1C9

The feature in the specification · Read at

Requirements

  1. C3-R1acceptedMUST

    Remediations MUST be proposed with their effects stated and MUST require confirmation before applying.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@b00845f85dlemonfiber@16700cb37clemonfiber@02d0de7a41
  2. C3-R2acceptedMUST

    Re-pushing a changed VPN forwarded port MAY be applied automatically, and MUST be reported afterwards.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rscrates/lemonfiber-core/src/app/forwarding.rs
    cited by
    lemonfiber@514edfa781lemonfiber@16700cb37c
  3. C3-R3acceptedMUST

    Findings MUST be classified as automatically fixable, guided, or external, and the classification MUST be visible.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37c
  4. C3-R4acceptedMUST

    A fix MUST re-run its originating check, and MUST only report fixed if that check then passes.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41
  5. C3-R5acceptedMUST

    A completed action whose check still fails MUST report fix-failed.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41
  6. C3-R6acceptedMUST

    Configuration-modifying fixes MUST record enough information to be reversed.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@314718f702
  7. C3-R7acceptedMUST

    A fix that would overwrite an operator's manual change MUST be refused and deferred to drift handling.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@b03a922d2blemonfiber@314718f702lemonfiber@527ee9096f
  8. C3-R8acceptedMUST

    Batch remediation MUST allow individual findings to be declined.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37c
  9. C3-R9acceptedMUST

    A declined fix MUST NOT be re-offered until the condition clears and recurs.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41lemonfiber@b3f6e9a8d6
  10. C3-R10acceptedMUST

    Findings sharing a root cause MUST be remediated once, with dependents re-verified.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41
  11. C3-R11acceptedMUST

    Non-interactive remediation MUST require an explicit flag; the default MUST be report-only.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@b00845f85dlemonfiber@16700cb37clemonfiber@02d0de7a41
  12. C3-R12acceptedMUST

    Every remediation MUST be logged with finding, action, timestamp and verification outcome.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37c
  13. C3-R13acceptedMUST

    A fix that fails partway MUST report the resulting state precisely.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41
  14. C3-R14acceptedMUST

    A repeatedly failing fix MUST stop being offered and MUST escalate to a support bundle.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@16700cb37clemonfiber@02d0de7a41
  15. C3-R15acceptedMUST

    An operator MUST be able to retract the most recent remediation, reversing that remediation alone and leaving other recorded changes untouched.

    locked by
    0.7.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/repair.rs
    cited by
    lemonfiber@b03a922d2blemonfiber@c0de64d312
  16. C3-R16acceptedMUST

    A series reported under C1-R18 MUST be offered a repair that asks the filler of media.serve, through its contract's refresh operation, to refresh that series and nothing else. The repair MUST be confirmed like any other and MUST be offered as one that cannot be reversed. A rehearsal MUST state it and MUST NOT ask for the refresh. Before the check runs again, the repair MUST wait for the series to answer seasons, for no longer than a stated bound.

    locked by
    0.18.0 met
    recorded done
    lemonfibercrates/lemonfiber-core/src/doctor/seasons.rscrates/lemonfiber-core/src/patience.rscrates/lemonfiber-contract/src/capabilities/media.rscrates/lemonfiber/src/repair.rs
    cited by
    lemonfiber@589089b80flemonfiber@7bfd5a6505