From c265b371e250488e0cc7729a4363b17ee0d765db Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 5 Oct 2026 21:50:24 +0200 Subject: [PATCH] CHANGELOG: the burn-down night (R-758, R-127a, R-798, R-763, R-764, R-786, R-731; R-776/R-613 held for 9202) Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS --- CHANGELOG.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a10c6b3..3be06af 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,28 @@ +## 2026-10-05 (night) — the burn-down night: honest memory figures, encryption keys flagged, wger closed to strangers (R-758, R-127a, R-798, R-763, R-764, R-786, R-731) + two stale gate tools + +**What runs on a box changed:** memory FIGURES in eight `.felhom.yml` (deploy screen + soft over-commit warning only; the +hard refusal reads `mem_request`, unchanged); `data_key` flags on four fields (read only on the restore paths); grimmory's +env (`API_DOCS_ENABLED=false` replaces the dead `SWAGGER_ENABLED`, default false — no behaviour change); wger's compose +and `.felhom.yml` (wger is `lifecycle: hidden` — no box runs it). No image, version, ladder or healthcheck changed. + +- **R-758:** `mem_limit` is the sum of the compose limits in adventurelog, bookstack, calcom, claper, kimai, nextcloud, + outline, zipline; new `--fast` gate `mem-limit-sum` (stdlib, CI runs it) with decoys; red-proved. +- **R-127 (leg a):** `data_key: true` on n8n `N8N_ENCRYPTION_KEY`, calcom `CALENDSO_ENCRYPTION_KEY`, wanderer + `POCKETBASE_ENCRYPTION_KEY`, bookstack `APP_KEY` (encrypts two-factor secrets); new `--fast` gate `data-key` (a name + rule + a registry with reasons) with decoys; red-proved. Leg (b) is controller work. +- **R-798:** grimmory sets the API-docs switch v3.5.0 reads. +- **R-763:** wger closes its own sign-up and guest users after the first admin (`ALLOW_REGISTRATION=False`, + `ALLOW_GUEST_USERS=False`). Hidden app; the 9202 stranger walk is owed before it is offered again. +- **R-764:** wger sends mail through the box's relay (`smtp_mapping`, plaintext :2526, `ENABLE_EMAIL` gate). Hidden app; + the 9202 boots (mail ON and OFF) are owed. +- **R-786:** SparkyFitness onboarding record — 1.6 done (every env read of the server source listed); 1.7 read in source. +- **R-731:** `scripts/check-currency.py` (stdlib) makes the tag-shape-switch control standing, with fixture tests. +- **Fixed without a row:** `test_gate_decoys.py`'s copy-i18n ratchet ABOVE case removes English instead of adding it + (it could not fail once coverage was complete — red on `main`); `check-probe-matches-compose.py` accepts `--all` + (`catalog_gates.py --all` read INCONCLUSIVE on a clean tree). +- **Held back, not on `main`** (each owes a 9202 proof first; they touch apps real boxes run): R-776 (kimai, zipline, + vikunja, nextcloud see each visitor behind the tunnel), R-613 (nextcloud's probe asks for `"installed":true`). + ## 2026-10-05 — burn-down round 2: copy, gate and harness fixes (R-760, R-593, R-594, R-605, R-781, R-806) + a stale runner test No image, version, ladder, environment or healthcheck that runs on a box changed.