From 179ae2d78e39970ae55955f1a7a56a6b9671eb3d Mon Sep 17 00:00:00 2001 From: Tom van der Lee Date: Fri, 18 Sep 2026 15:14:46 +0200 Subject: Propose fixing the SSH authorized-key spec drift Planning artifacts only. The developer-environment capability's SSH requirement never stated that an authorized key must be provisioned -- the real gap that locked out the floep host after its first rebuild. The code fix already shipped; this change brings the spec in line with it. design.md skipped (none of its trigger conditions apply to a documentation-only correction). --- openspec/changes/fix-ssh-authorized-keys-spec/tasks.md | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 openspec/changes/fix-ssh-authorized-keys-spec/tasks.md (limited to 'openspec/changes/fix-ssh-authorized-keys-spec/tasks.md') diff --git a/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md b/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md new file mode 100644 index 0000000..24b7528 --- /dev/null +++ b/openspec/changes/fix-ssh-authorized-keys-spec/tasks.md @@ -0,0 +1,7 @@ +## 1. Verify implementation already matches the updated spec + +- [ ] 1.1 Confirm `modules/nixos/common.nix` declares `users.users.tom.openssh.authorizedKeys.keys` with at least one key — verify by reading the file (no code change expected; this task is a sanity check, not an implementation step) + +## 2. Sync + +- [ ] 2.1 Archive this change and sync the `MODIFIED` requirement into `openspec/specs/developer-environment/spec.md` — verify the main spec's "SSH access is enabled by default on NixOS hosts" requirement includes the authorized-key sentence and the new "An authorized key is provisioned" scenario after archiving -- cgit v1.3