Host agent

One line to install, signed root-free self-updates, and a strict data-minimalism rule: the agent never reads command lines, environment variables, or usernames.

Install

One line from the distribution point installs the agent on Linux (x86_64 and aarch64, static musl builds) or macOS (universal binary). On Linux it runs as a hardened systemd unit. uninstall.sh removes it cleanly and deregisters the host from the cockpit.

What it reports

Availability (with a grace period before silence counts as down), CPU, memory, disk, and named services with anti-flapping grace. You bind it to a monitor of type agent and choose per metric whether a breach counts as degraded or as an outage, with its own severity and push toggle.

Self-update

Releases are ed25519-signed and verified before the binary is swapped; the signing key stays offline. The updater is fail-closed (an unverifiable release is not installed) and needs no root helper. You are not chasing agent versions across a fleet.

Data minimalism

The agent never collects command lines, environment variables, or usernames. Process inventory is opt-in. It measures the host and reports; it is not an inventory or forensics tool, and its short scope is the point.

Silence semantics

A host that stops reporting counts as down after its grace period; missing data counts as pending, never as a healthy check. An agent cannot be silently absent from your record.

Windows is not shipped yet; it is the stated next step and lands on the changelog when real.