mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
The gate counted any stamp above zero as handshaken. wg syncconf keeps the old stamp while it points the endpoint at a dead path, so a deploy passed the gate over a broken tunnel (alphaserver, 2026-11-01: the endpoint resolved to an AAAA the host could not reach). Read the host's epoch in the same shell call as latest-handshakes and accept a stamp only within WireGuard's REJECT_AFTER_TIME of 180 s. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>