Grimmory + MeTube records: row 2.6 with the demo-hp with-data removal (userdata kept — R-800); MeTube 3.9 through the real internet

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-02 10:43:14 +02:00
parent 96829d0d0f
commit febf58c7e6
2 changed files with 3 additions and 3 deletions
@@ -37,7 +37,7 @@ registry reads at v3.5.0). The spike that measured the gate first: felhom.eu/doc
 2.3 | done | app-catalog-felhom.eu/templates/grimmory/.felhom.yml — books mandatory (the DB points at them), appdata mandatory, the import inbox excluded; tier 1 holds the database volume
 2.4 | done | felhom.eu/documentation/audits/new-apps-2026-10-01/S/S2-grimmory-bench-probe.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/grim-seed.txt — the folders are 1000:1000 from the first start; the uploaded book is written on the household's drive
 2.5 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt — the night chain's backup, remove keeping backups, the household's restore button, the book read back with the household's own login; the family-gate file and the stranger's refusal come back after the restore
-2.6 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/final.txt — "remove, keep data": the app, its volume and its gate file go, the books and appdata stay on the drive (and the restore brings the app back to them); "remove with data" on 9202 is REFUSED, app kept (R-442: 9202 has no host agent, so the drive path cannot be resolved — fail-closed and right); the with-data half is measured on a demo box after publishing (Part B4) and added here
+2.6 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/final.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B4/grimmory-demo.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B4/teardown.txt — "remove, keep data" (9202): the app, its volume and gate file go, the drive data stays and the restore uses it; "remove with data" on 9202 is refused (R-442, no host agent — fail-closed); on demo-hp (live catalog) it removed the app, its volume, its appdata and its backups, and KEPT the book EPUB in the household's userdata folder — the box treats userdata as the household's files and the dialog does not say so (R-800)
 2.7 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/grim-seed.txt — 169 MB database (mostly the empty schema) + 76 KB on the drive after one book; the books dominate a real household's size
 2.8 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/grim-seed.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/shots/grimmory/1.png — the EPUB uploaded through traefik behind the family gate, listed back by the app's own API and shown in its web page
 3.1 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/A/setup.txt ; felhom.eu/documentation/audits/new-apps-2026-10-01/box/grimmory/install.txt — class 4: the household makes the first admin with `POST /api/v1/setup` through the setup gate (200)
@@ -36,7 +36,7 @@ B/metube-reads/ (the entrypoint and every setting, read at the tag).
 2.3 | done | app-catalog-felhom.eu/templates/metube/.felhom.yml — the downloads are class optional (they can be downloaded again; large); tier 1 holds metube_state
 2.4 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/metube-fresh.txt — the downloaded file is 1000:1000 0644 on the household's drive (PUID/PGID 1000)
 2.5 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt — the night chain's backup, remove keeping data, the household's restore button (38.5 s), the history and the file read back by a family member; the family-gate file and the stranger's refusal come back after the restore
-2.6 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/final.txt — "remove, keep data": the app, its volume and its gate file go, the downloads stay; "remove with data" on 9202 is REFUSED, app kept (R-442: no host agent on 9202 — fail-closed and right); the with-data half is measured on a demo box after publishing (Part B4) and added here
+2.6 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/life.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/final.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B4/metube-demo.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/B4/teardown.txt — "remove, keep data" (9202): the app, its volume and gate file go, the drive data stays and the restore uses it; "remove with data" on 9202 is refused (R-442, no host agent — fail-closed); on demo-hp (live catalog) it removed the app, its volume, its appdata and its backups, and KEPT the downloaded video in the household's userdata folder — the box treats userdata as the household's files and the dialog does not say so (R-800)
 2.7 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/metube-fresh.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/C-metube-bench/move/evidence/MV-metube/burst-metube.log — 12 KB of state + the files; the downloads ARE the size (563 MB for 96 short test clips on the bench); a household's videos are optional in the backup for that reason
 2.8 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/B/box/metube-fresh.txt — the downloaded file opens again through the front door: GET /download/<file> 200 through traefik behind the family gate (a never-downloaded name 404)
 3.1 | done | app-catalog-felhom.eu/FIRST-ADMIN.md ; felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt — class 5: no accounts at all; the family gate is the only door, and only family members pass it
@@ -47,7 +47,7 @@ B/metube-reads/ (the entrypoint and every setting, read at the tag).
 3.6 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt — MeTube has no lock of its own; the family sign-in locks per visitor (5 a minute) and per name (10 in 10 minutes): a stranger's 7 wrong tries locked only the stranger, the family member signed in at once from elsewhere
 3.7 | done | app-catalog-felhom.eu/templates/metube/.felhom.yml ; felhom.eu/documentation/audits/family-gate-2026-10-02/A/setup.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt — add_people: the Család card (add: the password shown once; reset and remove end access at the next request, measured)
 3.8 | n/a | no after_install or after_setup command in the template
-3.9 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/shots/familylogin-video.png — the family sign-in through traefik over https, LAN and the simulated tunnel; in a real browser (headless Chrome) the app's address leads to the sign-in page; the websocket passes the gate (101) for a member
+3.9 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt ; felhom.eu/documentation/audits/family-gate-2026-10-02/shots/familylogin-video.png — the family sign-in through traefik over https, LAN and the simulated tunnel; in a real browser (headless Chrome) the app's address leads to the sign-in page; the websocket passes the gate (101) for a member ; felhom.eu/documentation/audits/family-gate-2026-10-02/B4/member-internet.txt — and through the REAL internet on demo-hp: a member's browser → the family sign-in → MeTube; the dashboard stays shut to the member; logout ends access; a stranger 401
 3.10 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/A/items.txt — MeTube reads no visitor address; the gate does, from the right (R-753): a stranger's guesses through the simulated tunnel locked only that visitor
 4.1 | done | app-catalog-felhom.eu/templates/metube/docker-compose.yml ; felhom.eu/documentation/audits/family-gate-2026-10-02/C-metube-bench/birth/evidence/BIRTH/birth.log — curl is in the image (its own upstream healthcheck uses it); dials 127.0.0.1:8081; healthy on the first probe
 4.2 | done | felhom.eu/documentation/audits/family-gate-2026-10-02/C-metube-bench/C3-catalog-gates-metube.txt — probe-matches-compose OK