From eb95c14310ef18c7ab9edbcff991a04a560a7d86 Mon Sep 17 00:00:00 2001 From: zzstoatzz Date: Mon, 27 Jul 2026 00:53:10 -0500 Subject: [PATCH] docs: note that a recycled Hetzner IP reads as a host-key attack Co-Authored-By: Claude Opus 5 (1M context) --- docs/gotchas.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/docs/gotchas.md b/docs/gotchas.md index 9d84d90..b730963 100644 --- a/docs/gotchas.md +++ b/docs/gotchas.md @@ -62,6 +62,13 @@ wrapped by the archive append that triggered it as `ArchiveAppendFailed`. Both are correct and both exit non-zero. Pin the invariant — a fatal cause reaches `main` — not one side of the race. +**A recycled Hetzner IP fails SSH as a host-key attack warning.** Tear down an +experiment and the next one can be handed an address a previous run used — +`65.109.0.222` came back as a build host having been experiment 3's watchdog, +and SSH refused with REMOTE HOST IDENTIFICATION HAS CHANGED. It is ordinary +address reuse, not an interception: `ssh-keygen -R ` clears it. Worth +knowing before the warning arrives mid-provision and reads as something worse. + **Build the deploy artifact natively.** Emulating linux/amd64 on an arm64 workstation turns an 8-minute compile into 40-plus and yields a cross-emulated approximation of the thing that ships. `STREAM_BUILD_HOST` points `admit` at a -- 2.51.2