diff --git a/docs/gotchas.md b/docs/gotchas.md index 9d84d90..b730963 100644 --- a/docs/gotchas.md +++ b/docs/gotchas.md @@ -62,6 +62,13 @@ wrapped by the archive append that triggered it as `ArchiveAppendFailed`. Both are correct and both exit non-zero. Pin the invariant — a fatal cause reaches `main` — not one side of the race. +**A recycled Hetzner IP fails SSH as a host-key attack warning.** Tear down an +experiment and the next one can be handed an address a previous run used — +`65.109.0.222` came back as a build host having been experiment 3's watchdog, +and SSH refused with REMOTE HOST IDENTIFICATION HAS CHANGED. It is ordinary +address reuse, not an interception: `ssh-keygen -R ` clears it. Worth +knowing before the warning arrives mid-provision and reads as something worse. + **Build the deploy artifact natively.** Emulating linux/amd64 on an arm64 workstation turns an 8-minute compile into 40-plus and yields a cross-emulated approximation of the thing that ships. `STREAM_BUILD_HOST` points `admit` at a